This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          S4JOn3lsWnjL0OMg+TrAQJ9fb16DO5pbY+nujm68IoE=
Subject key identifier:   A1:50:DB:00:3F:AB:4C:70:B0:CF:30:4E:7F:0F:26:53:D3:93:F2:31
Certificate issuer:       /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial:       77BE72E0138E0C303CB4FA576E6E4C4487594EA1
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa
Signing time:             Mon 08 Dec 2025 01:35:27 +0000
ROA not before:           Mon 08 Dec 2025 01:30:27 +0000
ROA not after:            Mon 07 Dec 2026 01:35:27 +0000
asID:                     28594
IP address blocks:        200.218.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:be:72:e0:13:8e:0c:30:3c:b4:fa:57:6e:6e:4c:44:87:59:4e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
        Validity
            Not Before: Dec  8 01:30:27 2025 GMT
            Not After : Dec  7 01:35:27 2026 GMT
        Subject: CN=A150DB003FAB4C70B0CF304E7F0F2653D393F231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:fd:97:ea:af:8e:22:61:64:0d:4f:f6:f7:
                    1b:fa:2b:e2:b3:35:fd:d4:40:d7:36:3f:cd:37:fb:
                    7b:68:32:56:58:fa:50:e2:d0:23:af:24:93:fe:cf:
                    c5:1a:cd:49:0c:f3:a8:1b:de:7e:39:85:89:68:25:
                    c0:e3:f6:fc:0e:6d:4b:76:5f:41:5f:af:8f:3b:97:
                    57:5b:9c:d2:13:96:93:6a:bc:2f:a4:e2:71:f6:37:
                    a9:69:11:98:d5:0f:f0:00:28:6a:25:4e:f4:bb:d3:
                    df:5b:18:cb:37:52:77:2f:3c:f1:3b:ac:88:15:e6:
                    d5:67:13:ae:45:ad:4c:59:f9:4c:f9:0e:cf:93:89:
                    05:74:1e:01:12:32:42:eb:4e:0a:99:1d:91:e9:71:
                    e9:b9:c8:d3:b7:68:c5:b1:64:9f:25:b8:d1:aa:0b:
                    25:32:bf:a6:ba:22:ac:be:19:ed:44:09:0c:b2:22:
                    51:cc:e0:75:06:b6:74:9a:4f:f4:27:ce:56:12:9a:
                    57:5c:88:33:72:64:45:fe:86:1e:84:ed:7a:a3:65:
                    37:33:6d:92:d8:49:a6:49:a0:97:9d:41:b8:b1:71:
                    24:32:cf:a9:94:90:58:b6:90:97:f8:34:35:5b:99:
                    73:4b:e9:a2:fa:a3:58:ef:ea:ed:5b:b9:ff:3e:07:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:50:DB:00:3F:AB:4C:70:B0:CF:30:4E:7F:0F:26:53:D3:93:F2:31
            X509v3 Authority Key Identifier:
                keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:42:ba:06:23:a7:59:a7:ae:72:e3:de:02:50:07:47:08:1b:
         2f:ef:b9:fb:3e:09:1e:26:20:78:67:b1:26:7b:ec:3b:2e:09:
         e1:3b:ab:c1:47:e2:85:7c:69:06:fb:2d:2e:bc:46:48:17:49:
         75:5b:62:62:f4:e5:53:9b:7b:d5:d9:fe:e7:45:89:c9:f9:10:
         e1:48:1d:42:e5:3d:58:b7:83:3f:10:59:45:a6:f2:70:d6:70:
         c7:42:92:78:ec:75:d4:3c:5b:7a:35:e6:a9:2f:76:5d:76:70:
         0e:60:d2:72:72:ca:05:8c:1d:dc:c0:28:3f:ba:cc:fa:fb:84:
         57:ee:05:ee:4f:e9:40:82:83:59:1d:51:49:f4:50:80:8b:42:
         46:48:92:7e:b2:5e:12:f3:5c:d2:66:f7:8a:a0:10:eb:ac:98:
         ee:38:3c:13:68:5a:9c:01:cc:6f:d0:09:06:fb:95:16:e4:6a:
         ee:28:e6:0f:1b:f5:e9:4a:11:3e:1c:cb:f4:3a:5e:7b:98:ae:
         bc:31:e0:4a:91:75:bf:8b:dc:c6:7a:5b:d6:db:b5:4a:20:a3:
         39:1c:ad:e6:89:c8:e7:81:a3:8a:8c:22:95:a9:65:cc:e4:d3:
         d3:b0:91:6f:5f:0a:4c:e7:6b:1a:1e:66:af:ee:9c:66:ea:79:
         9b:71:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:25:19 2025 by rpki-client