This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa
File:                     3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa (raw, json)
Hash identifier:          bfoKEoSlM6Rnn2tocbLNz+KcgxNbX0QuHQVAYiM5ZoY=
Subject key identifier:   28:AC:8B:B5:C0:39:85:1F:23:5F:12:1F:64:8E:44:9D:D0:2B:89:03
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       3361A865F453D525963E868105D03C8D6E819746
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa
Signing time:             Tue 09 Dec 2025 20:01:48 +0000
ROA not before:           Tue 09 Dec 2025 19:56:48 +0000
ROA not after:            Tue 08 Dec 2026 20:01:48 +0000
asID:                     12136
IP address blocks:        200.229.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:61:a8:65:f4:53:d5:25:96:3e:86:81:05:d0:3c:8d:6e:81:97:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:48 2025 GMT
            Not After : Dec  8 20:01:48 2026 GMT
        Subject: CN=28AC8BB5C039851F235F121F648E449DD02B8903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:47:50:b4:5c:d5:4a:51:01:a0:c3:80:72:bf:
                    ad:4a:c2:52:95:3f:47:8c:c9:08:1c:e3:bc:19:a9:
                    92:ac:be:89:86:7f:81:af:1a:40:bf:f5:2e:19:ca:
                    28:50:fe:e4:c1:a5:9a:ef:97:44:40:5e:75:8d:cf:
                    8d:f1:97:06:43:3d:76:c7:3e:58:ea:70:c9:59:01:
                    08:fc:ae:d6:e1:e2:05:6a:04:bc:d8:31:39:12:fc:
                    69:bb:f2:34:41:fc:8c:7b:71:89:3b:16:49:52:ed:
                    be:db:83:53:85:9a:34:68:35:f7:b8:9f:8d:8c:77:
                    e9:28:7f:1b:87:75:de:b8:86:f5:38:69:c0:f5:75:
                    fb:2e:eb:07:d0:f4:1f:ff:8e:84:5e:12:58:b6:e3:
                    39:8f:bf:cb:3b:3c:35:16:b0:86:7c:ca:a1:4d:a7:
                    3d:78:81:8d:bc:3a:80:a1:57:27:70:30:71:b3:2d:
                    7f:5b:f4:e4:34:cb:36:03:b9:c0:da:1d:93:ad:7f:
                    c2:ab:97:7b:6c:0a:1b:58:ee:f3:5f:1f:82:65:a0:
                    52:e9:09:9e:15:ab:10:cf:f6:e1:b9:62:94:6c:eb:
                    77:6a:af:47:c7:b4:0d:7e:7c:5d:8d:fb:a9:f8:b2:
                    38:eb:0b:cb:69:84:c2:94:ef:09:d3:a3:61:67:6c:
                    28:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AC:8B:B5:C0:39:85:1F:23:5F:12:1F:64:8E:44:9D:D0:2B:89:03
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:08:fa:73:d5:b1:f3:98:35:9b:16:25:f5:63:a3:8e:b6:
         d6:ca:86:44:f2:dc:65:97:a7:43:d7:29:22:17:0b:84:ff:80:
         cd:2d:be:cb:53:67:b4:05:42:55:e2:82:db:eb:e4:40:b8:60:
         3d:c7:e8:cf:b1:22:1d:80:ed:42:96:2a:1f:30:69:d1:03:94:
         7f:f6:3c:84:47:59:3f:3c:9b:5f:30:fa:63:43:fd:cd:7d:76:
         a3:bf:b6:76:52:88:12:9b:b1:e7:83:5c:2a:eb:c8:15:8f:71:
         30:13:ac:67:62:b1:74:d7:28:e1:89:71:aa:ef:48:da:a5:85:
         71:03:23:99:60:b4:e1:92:dd:4e:1f:8f:22:c3:b7:30:68:4b:
         20:bf:dd:17:b8:2e:29:f8:87:2b:2a:fa:2d:29:96:d1:c1:d4:
         aa:55:af:95:52:2a:49:85:52:80:07:c1:a1:fe:2d:08:a5:23:
         e1:ab:1a:8b:52:27:60:05:46:35:1f:c3:36:d1:e3:41:53:0c:
         c6:66:af:46:7d:e8:4b:21:41:4e:e8:5d:db:a0:ce:52:20:5f:
         32:b0:6b:04:82:54:4e:08:b9:17:6b:8e:f9:6a:0c:5f:27:50:
         8e:81:3c:de:f6:53:ff:0e:d9:11:e2:7c:54:32:41:8d:47:bd:
         c6:a6:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:18:12 2025 by rpki-client