This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234322e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234322e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          6byx4Fa96846Y5dEryqOrUlsIJkytzjCr4gk+hnYxT0=
Subject key identifier:   7C:F9:4C:A1:59:94:28:2B:BD:8A:05:0D:E6:CD:E7:31:4B:78:AD:88
Certificate issuer:       /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial:       55BC3CB1ED1C091A4F2BC73BC65B88E4CF96E254
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234322e302f32342d3234203d3e203238353934.roa
Signing time:             Mon 08 Dec 2025 01:35:27 +0000
ROA not before:           Mon 08 Dec 2025 01:30:27 +0000
ROA not after:            Mon 07 Dec 2026 01:35:27 +0000
asID:                     28594
IP address blocks:        200.218.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bc:3c:b1:ed:1c:09:1a:4f:2b:c7:3b:c6:5b:88:e4:cf:96:e2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
        Validity
            Not Before: Dec  8 01:30:27 2025 GMT
            Not After : Dec  7 01:35:27 2026 GMT
        Subject: CN=7CF94CA15994282BBD8A050DE6CDE7314B78AD88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:7e:63:b7:bf:29:d1:a0:5d:b4:a4:96:55:
                    3c:54:02:0e:85:33:19:6b:ca:9c:33:8b:12:1a:8e:
                    5d:d8:e2:e3:a6:0e:59:13:21:92:2b:48:94:3d:a3:
                    46:75:90:9a:45:66:b0:be:9e:c1:66:36:76:3c:66:
                    d6:ac:1f:80:6e:58:27:8d:45:13:cb:2e:b9:e1:70:
                    fe:ae:32:d9:c5:f3:3b:6d:2e:ee:f8:12:bd:c1:95:
                    1a:ad:10:0f:a8:00:9c:05:8f:f8:ca:51:b4:6c:76:
                    da:ca:e6:e4:b1:5d:33:7e:ab:1c:e3:44:4a:a4:98:
                    2e:3f:46:1f:b8:76:61:b9:79:24:83:db:0a:91:07:
                    7f:00:be:23:c0:bb:f1:21:75:67:ef:5f:09:c1:52:
                    4c:a6:ef:80:61:68:15:16:86:97:de:56:43:0f:c2:
                    40:7b:80:47:a0:6a:56:c4:64:b1:0d:59:4f:38:47:
                    fa:ea:45:e2:7c:d9:23:54:7b:17:37:21:89:55:f2:
                    8e:02:2b:a5:29:6b:e2:00:a8:cb:c3:8b:e3:b1:54:
                    04:09:04:b2:93:8f:82:fe:41:df:34:9a:36:20:dd:
                    9d:4f:d1:79:83:64:3e:8a:b8:2a:86:51:2c:e1:68:
                    6c:ac:20:26:ed:c5:22:cc:db:61:26:cf:46:08:9e:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F9:4C:A1:59:94:28:2B:BD:8A:05:0D:E6:CD:E7:31:4B:78:AD:88
            X509v3 Authority Key Identifier:
                keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234322e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:3a:5b:70:63:35:aa:9f:74:dd:c5:f7:30:31:50:9f:01:9a:
         a4:c5:4a:1f:76:2b:e6:1e:d8:0d:48:d0:44:d3:73:80:81:95:
         5b:77:a8:3e:b5:a1:91:5b:fd:32:35:d9:b0:dc:51:e2:04:07:
         88:21:79:1f:77:5e:bc:e4:e0:82:75:8b:12:60:20:d5:52:a1:
         f3:c3:92:ff:0f:18:8a:ff:bc:a8:9b:66:d5:6b:7e:54:70:5e:
         91:e0:f5:f9:2d:64:99:5e:e6:69:6e:1a:b4:39:45:b2:85:c9:
         e0:1b:db:7a:7f:6f:cf:29:aa:73:12:3f:5e:13:34:ee:f7:e0:
         9c:5a:21:2e:d7:9e:21:d1:a1:90:38:5d:00:94:a8:fb:02:39:
         33:f7:12:53:f5:ea:03:8b:57:90:97:a9:e3:81:95:bd:19:2b:
         10:f2:50:51:6c:81:af:f5:46:41:a9:e6:3f:77:50:76:43:56:
         a6:8e:6c:a0:5d:6f:c4:2e:7e:a3:7f:c7:30:91:3c:ad:71:c2:
         d4:0b:75:bf:56:55:fa:d9:bd:f2:53:53:21:13:be:c9:23:98:
         33:6f:d3:fc:c6:f4:6a:ca:ca:6b:e2:09:5c:dd:7e:77:6d:31:
         93:39:0d:27:af:30:c4:91:d4:9b:0c:51:f1:bf:4a:92:c8:04:
         bd:c3:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:25:17 2025 by rpki-client