This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/3230312e33332e3134342e302f32302d3234203d3e20313938393439.roa
File:                     3230312e33332e3134342e302f32302d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          lI2E/VYVJ+2wUZmeC41kZFySZrgdHxD6/s3ruqb3rk4=
Subject key identifier:   B2:82:F1:5D:DF:FC:AC:9B:43:06:B7:18:92:76:6F:74:C9:09:D6:6C
Certificate issuer:       /CN=6321913B8F265DB266263684C1BC420640061E1A
Certificate serial:       6F7E979075BF4F6619CAD8D0821AEDC84611A9B3
Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/3230312e33332e3134342e302f32302d3234203d3e20313938393439.roa
Signing time:             Fri 26 Dec 2025 11:06:54 +0000
ROA not before:           Fri 26 Dec 2025 11:01:54 +0000
ROA not after:            Fri 25 Dec 2026 11:06:54 +0000
asID:                     198949
IP address blocks:        201.33.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
                          rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Jan 2026 10:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7e:97:90:75:bf:4f:66:19:ca:d8:d0:82:1a:ed:c8:46:11:a9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A
        Validity
            Not Before: Dec 26 11:01:54 2025 GMT
            Not After : Dec 25 11:06:54 2026 GMT
        Subject: CN=B282F15DDFFCAC9B4306B71892766F74C909D66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:36:9d:c0:e1:d9:c0:e8:d9:d8:74:48:0f:
                    86:04:a3:37:50:46:9e:4e:06:18:f1:53:ad:79:fa:
                    92:a4:5f:fd:91:05:74:ea:7c:4c:8b:15:40:9f:61:
                    60:13:88:5f:52:ea:09:ff:3e:39:c7:27:39:42:77:
                    2f:90:65:ae:cd:7b:2a:88:17:63:66:b6:6f:3e:bd:
                    90:6f:f0:88:96:56:9f:c3:f9:fd:bd:ab:7c:62:55:
                    c8:35:c9:16:b5:cf:04:aa:cc:df:3f:ca:5a:fc:61:
                    3f:5d:1a:c9:30:b3:f0:cf:07:3b:40:be:b9:09:36:
                    d9:7e:ee:04:de:20:d6:dd:c9:ae:73:8b:41:d4:43:
                    6f:78:58:66:fe:cd:49:4b:d8:bc:1d:bc:56:dd:6a:
                    c4:4e:67:37:59:07:1b:c3:9e:2e:b9:e5:cc:58:46:
                    75:b9:ce:42:d5:f0:b7:f9:f5:6a:fc:5f:19:c9:41:
                    0c:8e:31:0e:9e:79:70:17:03:05:43:00:01:8d:73:
                    da:05:64:16:97:69:10:06:f4:bc:61:4e:ea:0d:5b:
                    c1:49:99:f0:64:e6:f1:a0:21:a1:bd:18:5b:bc:a7:
                    ce:16:34:c0:8d:b5:af:ec:1f:b4:d0:7f:00:52:89:
                    7f:df:28:39:b8:d1:8f:6e:27:a8:1c:af:62:af:68:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:82:F1:5D:DF:FC:AC:9B:43:06:B7:18:92:76:6F:74:C9:09:D6:6C
            X509v3 Authority Key Identifier:
                keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/3230312e33332e3134342e302f32302d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:02:97:f5:dc:4d:b9:64:c4:5d:83:ba:f5:da:62:be:0a:9c:
         c9:68:a4:0d:b7:d3:ac:5f:ca:48:cb:bd:a6:69:68:c7:13:9f:
         93:dd:3d:9a:fd:26:4b:8a:fe:dc:91:74:f7:9e:a8:69:ee:9a:
         2c:06:89:4b:c0:84:60:3c:72:45:78:c8:af:2a:62:49:00:27:
         0b:70:bb:88:86:7e:10:38:ea:77:96:9a:4a:f7:62:70:9b:f6:
         9d:28:df:52:1b:5b:b8:25:c6:22:5e:b5:98:47:12:d1:55:55:
         bf:7b:4a:03:eb:1e:b7:1b:b1:6c:90:86:c3:ee:6e:4a:8b:aa:
         5c:4a:07:88:c7:b2:82:ce:8f:5a:50:f8:f8:fb:34:3b:75:21:
         32:b6:89:7f:7a:69:99:ca:70:b9:2e:9e:04:da:ee:11:fc:2e:
         b8:42:5c:04:17:dc:09:f9:13:de:a3:19:99:cf:31:e2:24:8d:
         17:5c:90:55:b0:14:00:c6:5e:04:d0:b6:65:6a:b6:c5:8c:de:
         e4:93:a7:da:21:9e:0c:1f:a0:1b:c0:d9:e3:89:14:31:10:af:
         bd:04:5e:e9:1c:c5:6c:d1:29:bf:bc:5f:d3:4f:6f:fc:7f:c0:
         7b:a6:e2:8b:dd:69:9d:95:ae:3a:b7:0d:95:bb:d4:6e:0e:77:
         6f:1a:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:33:18 2026 by rpki-client