This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203131343331.roa
File:                     3230302e3231392e3134382e302f3234203d3e203131343331.roa (raw, json)
Hash identifier:          JUjbj8qTyqSZ0nZ3rzBpeKBmz3jLJpIttv22FXzG5p0=
Subject key identifier:   F2:78:28:81:AC:B2:9D:F5:B2:41:59:7D:83:5C:A1:30:F1:10:4E:4B
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       7D7D601BFEFD023D000C8AE7E637FFAB60450984
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203131343331.roa
Signing time:             Tue 09 Dec 2025 20:01:50 +0000
ROA not before:           Tue 09 Dec 2025 19:56:50 +0000
ROA not after:            Tue 08 Dec 2026 20:01:50 +0000
asID:                     11431
IP address blocks:        200.219.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7d:60:1b:fe:fd:02:3d:00:0c:8a:e7:e6:37:ff:ab:60:45:09:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:50 2025 GMT
            Not After : Dec  8 20:01:50 2026 GMT
        Subject: CN=F2782881ACB29DF5B241597D835CA130F1104E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:82:36:39:91:e0:67:f8:3c:6c:ae:cf:2d:
                    aa:40:fc:06:b2:1d:7f:50:7c:5b:aa:c3:99:56:19:
                    1c:96:3f:aa:92:43:83:f4:d3:7e:99:7a:58:ff:0a:
                    d2:f8:1b:43:ee:68:2d:44:bd:9e:b8:3b:38:b9:9b:
                    b3:d3:0b:42:f1:80:21:dc:6b:90:38:7e:9c:b6:6f:
                    23:c3:22:18:56:91:0e:8d:3d:17:26:90:a9:1e:b7:
                    b1:96:1d:ea:d5:8d:81:b4:c1:49:0e:89:53:82:e5:
                    9d:5d:33:74:49:df:d3:3c:aa:7c:60:eb:ff:70:2a:
                    31:56:61:9a:93:21:fb:31:43:e7:40:83:eb:5b:ee:
                    4a:46:a5:18:2f:79:db:af:7f:72:57:a0:a6:11:43:
                    6d:a1:d8:d9:a3:a1:c7:cb:f1:6b:33:10:e8:74:38:
                    4e:52:5b:9a:89:32:07:01:2d:c3:ec:6f:da:34:e9:
                    61:42:60:a5:f1:85:22:e9:8f:df:5a:92:11:b9:a5:
                    88:2f:4c:ee:60:a1:80:50:07:5b:0a:cb:bb:57:17:
                    c0:6d:00:f7:89:ac:3c:38:24:8e:03:a9:97:43:78:
                    b1:e6:c4:8b:5c:9c:82:cd:07:a9:8b:68:68:6d:d1:
                    c9:bc:fe:c3:8d:be:60:bf:90:81:6d:ed:48:46:9a:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:28:81:AC:B2:9D:F5:B2:41:59:7D:83:5C:A1:30:F1:10:4E:4B
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:cd:de:87:05:62:38:c2:8c:37:ea:9f:21:71:6d:63:84:2c:
         12:ac:34:d6:54:c0:be:03:dd:eb:33:8c:83:7f:65:16:ed:77:
         83:38:d5:c4:57:8d:b6:8b:7c:d8:be:35:24:4d:40:f1:ca:bc:
         66:f8:f2:a1:6c:d5:92:f6:d3:1f:95:5d:c8:aa:af:0b:96:3d:
         9e:fb:e1:28:49:45:4d:0b:f2:5f:7b:cd:6d:94:34:1f:bf:16:
         22:f0:46:98:89:a9:83:5f:e0:26:08:db:76:a9:cd:e5:d2:c3:
         23:1a:c0:fc:fd:9f:78:e8:d5:a3:c8:d3:19:b6:33:85:b0:09:
         d4:3b:47:9d:95:db:8f:25:d3:f7:4e:c5:8d:0c:5c:22:01:6f:
         6c:6e:d6:ea:a2:c9:7a:a1:25:74:c2:06:ea:f3:a4:ce:7f:16:
         29:33:8f:98:ef:76:c0:05:99:89:25:62:82:13:82:02:be:ff:
         6d:84:06:9b:8b:7f:5f:fe:b7:f2:31:ae:1d:57:56:12:b0:13:
         dd:b4:bf:32:15:f9:8f:e2:6a:63:78:cf:b7:5b:ac:48:60:d4:
         80:7e:67:4b:99:41:14:17:e3:d5:ba:31:40:e1:9b:87:ae:f6:
         14:44:95:f6:14:10:4c:71:78:fb:78:59:ca:16:54:f9:e0:a9:
         f2:47:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:19:16 2025 by rpki-client