This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          yKLBXAITVV3fWDuiz+hOrngJBzaE/HibNijZ8O7Ozt8=
Subject key identifier:   95:EB:46:80:E8:E2:40:EC:18:B5:00:2C:81:58:D1:D7:38:E8:78:AF
Certificate issuer:       /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial:       038861C84864D13AEF200F6B2970833A1DAE765D
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa
Signing time:             Mon 08 Dec 2025 01:35:27 +0000
ROA not before:           Mon 08 Dec 2025 01:30:27 +0000
ROA not after:            Mon 07 Dec 2026 01:35:27 +0000
asID:                     28594
IP address blocks:        200.218.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:88:61:c8:48:64:d1:3a:ef:20:0f:6b:29:70:83:3a:1d:ae:76:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
        Validity
            Not Before: Dec  8 01:30:27 2025 GMT
            Not After : Dec  7 01:35:27 2026 GMT
        Subject: CN=95EB4680E8E240EC18B5002C8158D1D738E878AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:28:dd:ac:b3:d2:d4:33:1e:c8:96:7a:39:
                    e8:ce:84:58:78:36:6a:20:9e:f0:81:b8:f4:7e:ba:
                    05:a0:c3:7b:dc:6b:3a:4e:a7:76:dc:c5:8d:71:c4:
                    c2:f7:13:fa:98:6b:8d:ef:1d:8f:9d:b2:f7:90:32:
                    03:36:9d:1b:56:78:f1:97:63:cb:90:82:db:34:69:
                    6c:97:d2:df:8c:10:35:07:6a:f5:ba:13:d7:32:e3:
                    e4:e2:67:01:d8:89:b7:24:40:86:82:3a:ae:a7:25:
                    36:2c:96:2d:70:bd:87:46:ef:a8:f5:a0:47:4e:a1:
                    21:39:90:cf:0d:4e:79:f8:17:7b:f8:62:ef:3a:6b:
                    a7:1d:b2:a4:c1:b3:3e:65:49:b5:69:e2:c0:e9:5a:
                    b7:9a:be:0c:7e:a7:a5:c7:45:fe:40:32:48:93:ba:
                    92:80:a7:43:4b:a5:7c:6e:6e:2a:f1:3d:15:60:b1:
                    a6:b4:00:e4:f7:9f:3a:7e:e8:e4:39:9a:44:11:9b:
                    55:7d:41:43:8a:92:27:64:e2:98:8e:51:08:d1:83:
                    cf:56:29:0f:46:5c:cf:0a:ce:59:b5:ae:9b:bd:45:
                    04:f9:12:69:7a:9f:28:49:73:f3:85:f5:f3:71:13:
                    26:3f:d8:52:e2:b7:1b:f8:df:04:9d:be:62:5c:5f:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EB:46:80:E8:E2:40:EC:18:B5:00:2C:81:58:D1:D7:38:E8:78:AF
            X509v3 Authority Key Identifier:
                keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:1d:2e:1b:c8:c8:0d:d4:84:80:00:08:9a:d4:f2:d6:a8:d1:
         cb:ad:2f:21:25:30:0f:dd:70:29:a3:26:12:bc:ae:0a:4a:4f:
         19:6b:ef:b0:29:28:85:64:01:b0:e6:7f:a7:2c:c7:9d:88:b0:
         7a:fc:0e:5c:ae:02:2b:fe:2c:65:13:c2:70:a0:11:60:ee:8c:
         cf:7e:2c:96:40:01:d2:2b:ee:a1:32:17:da:b2:72:82:3f:03:
         f3:3e:95:f9:93:b2:e7:8f:34:36:61:66:07:63:16:40:13:2c:
         d1:95:f5:aa:85:bc:34:20:17:99:1a:fb:98:da:4e:23:b0:76:
         76:5c:6e:d9:cf:54:b6:a1:69:5b:a4:9e:4f:56:bf:7f:ae:5f:
         58:49:37:b5:c8:d7:37:88:5f:b7:21:cc:5e:9f:52:57:b9:b6:
         4d:c8:62:c9:f8:5b:8a:6d:28:0b:79:2a:b5:35:66:0a:d4:94:
         65:5f:ce:59:00:c4:1c:66:da:6f:17:36:3d:fc:9b:94:2a:15:
         7d:d0:5f:39:3a:96:f6:08:21:26:ba:59:2c:11:e6:59:0d:80:
         0e:34:d1:42:55:c7:48:8d:57:ee:75:cf:46:ff:b6:3c:ee:c4:
         c9:57:5b:b9:82:6f:7c:ba:77:11:93:bb:4b:d1:7e:c2:1c:c9:
         f8:3d:2e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:23:17 2025 by rpki-client