This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203533303335.roa
File:                     3230302e3231392e3134382e302f3234203d3e203533303335.roa (raw, json)
Hash identifier:          NZrxhbLt3kBIjfdmHd+hN9ahUCymhFpW+MCTRYN1qXo=
Subject key identifier:   92:2F:CB:F9:52:E7:83:F1:D0:D8:B1:03:32:B9:CA:C0:5B:A5:75:00
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       4B758E51F1ED1229BB9DFE1FC9C097F1A1D9D361
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203533303335.roa
Signing time:             Tue 09 Dec 2025 20:01:53 +0000
ROA not before:           Tue 09 Dec 2025 19:56:53 +0000
ROA not after:            Tue 08 Dec 2026 20:01:53 +0000
asID:                     53035
IP address blocks:        200.219.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:75:8e:51:f1:ed:12:29:bb:9d:fe:1f:c9:c0:97:f1:a1:d9:d3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:53 2025 GMT
            Not After : Dec  8 20:01:53 2026 GMT
        Subject: CN=922FCBF952E783F1D0D8B10332B9CAC05BA57500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:e2:e2:ed:66:99:e4:ab:ed:79:8b:a5:b4:
                    7a:b1:83:41:73:43:02:e0:20:c3:61:64:b7:fc:2f:
                    ac:de:b0:99:cf:90:d7:71:b6:c7:53:c6:9b:e3:27:
                    3a:85:f0:a2:26:3f:15:15:2b:d7:87:a1:7b:3a:62:
                    3e:1f:ab:4a:f1:eb:15:aa:1e:c1:ef:f9:3d:6e:62:
                    12:9d:3c:90:7c:9d:41:59:d9:3f:39:9c:f6:d2:3d:
                    d7:9b:a7:b4:74:80:67:d5:5e:0e:2c:37:d4:82:1c:
                    14:0e:4b:52:d4:6e:76:30:20:2b:60:00:fc:8a:46:
                    d9:ed:40:9b:d2:34:ef:5d:62:d4:c7:b4:9a:55:5c:
                    69:12:0a:f5:05:6f:9f:a3:63:76:58:23:0d:cb:90:
                    f6:cd:48:58:69:43:c6:3c:bb:16:69:0a:b4:87:44:
                    32:b1:94:09:02:42:8c:44:67:a3:ac:ce:f8:e2:55:
                    f0:71:f3:f8:e6:41:2d:96:73:b8:51:35:04:5d:7e:
                    0f:71:72:5a:08:d4:4c:a0:89:f9:a1:1c:a3:a9:be:
                    aa:c0:e8:78:96:e2:ab:8b:c8:67:35:45:f5:05:a9:
                    93:8e:1d:48:24:f4:78:89:0d:91:1c:32:e0:53:11:
                    9f:6d:37:56:6d:08:71:4e:c2:fd:ba:80:04:84:f2:
                    f7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2F:CB:F9:52:E7:83:F1:D0:D8:B1:03:32:B9:CA:C0:5B:A5:75:00
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203533303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a3:af:ca:b9:b7:a1:ad:3e:3b:9a:a5:11:f8:59:da:19:c3:
         0e:5e:ea:74:19:00:67:20:16:11:66:e3:f2:66:28:cf:61:cd:
         fc:84:ba:17:db:68:ad:ed:5d:a6:bb:38:af:b7:18:57:ff:d6:
         ee:53:6b:68:1a:55:d0:e1:ca:73:7f:f9:90:52:07:cb:ed:1b:
         c2:db:4c:47:19:3f:6f:49:74:1b:0c:eb:1a:71:d2:9e:66:a2:
         e0:51:ed:34:27:28:71:dd:d3:33:94:5b:50:ef:36:df:b1:3a:
         1a:b1:06:61:b7:f7:6a:58:0b:59:65:ee:86:f3:07:59:7b:c4:
         4d:53:cf:1a:c8:b1:5e:6e:ee:a1:75:ba:8f:fc:8d:53:20:9d:
         55:ca:bd:60:f9:3e:ea:72:9b:f8:fa:57:37:61:a9:55:de:fc:
         93:d8:41:6c:06:59:c5:36:ee:a4:9a:93:16:7c:5d:7f:29:5c:
         04:56:8a:e6:72:1f:f7:2b:64:11:00:cf:5e:f2:d9:b3:a9:ff:
         61:8c:66:1e:ed:2a:19:d6:93:b5:d2:39:97:cb:0f:13:84:d6:
         a0:38:20:fb:c5:f0:7b:ae:72:97:3a:9b:e5:23:e0:bb:8e:ba:
         ef:e1:0e:89:08:36:24:09:ce:cf:62:7d:26:39:03:71:fd:0f:
         7c:81:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:18:11 2025 by rpki-client