This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          896YYhGe1ZOhHGdKfoyDIXDSBMwjzQ9E1l8+si2PNgc=
Subject key identifier:   AF:0A:59:83:7B:B3:A2:1B:67:45:AC:28:F3:F6:DD:DA:F9:EA:AE:8B
Certificate issuer:       /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial:       5B3FED91F73A22D1B4E90F308AA9B67E04C8BA93
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa
Signing time:             Mon 08 Dec 2025 01:35:28 +0000
ROA not before:           Mon 08 Dec 2025 01:30:28 +0000
ROA not after:            Mon 07 Dec 2026 01:35:28 +0000
asID:                     28594
IP address blocks:        200.218.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3f:ed:91:f7:3a:22:d1:b4:e9:0f:30:8a:a9:b6:7e:04:c8:ba:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
        Validity
            Not Before: Dec  8 01:30:28 2025 GMT
            Not After : Dec  7 01:35:28 2026 GMT
        Subject: CN=AF0A59837BB3A21B6745AC28F3F6DDDAF9EAAE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:65:a2:cf:7f:de:03:f7:f0:e1:32:96:4f:
                    28:17:6c:27:f5:9e:f8:72:d5:fc:de:b9:6f:0b:1b:
                    10:58:bd:f1:dd:e7:ea:f8:97:23:66:c5:d7:37:0d:
                    56:40:8d:2c:e5:9d:c4:da:54:d5:c0:01:8b:42:cf:
                    86:8f:f5:a1:15:b1:8f:bd:60:29:2d:f0:39:ec:2c:
                    18:95:a8:67:1c:ae:2f:2d:f2:f2:00:01:0e:60:64:
                    9c:a7:a7:83:2b:c3:ed:cb:ed:86:eb:3e:d2:6c:df:
                    51:e0:99:d7:05:20:65:e2:74:cc:56:0e:d5:17:21:
                    e1:6b:4e:3a:3d:59:1d:bd:02:f2:cd:95:d3:2d:12:
                    0a:83:ac:23:da:0a:58:6b:0e:9d:fb:64:37:10:47:
                    fe:16:c2:57:90:bd:e7:76:fd:fe:86:f0:b1:05:a0:
                    ae:56:18:e4:c2:68:32:80:ae:fe:54:f7:71:68:fd:
                    1c:d2:b0:b5:7a:63:51:b7:c3:86:1a:74:66:0e:5b:
                    7c:da:4e:d9:a7:79:ab:8f:9a:1f:ee:b3:45:0e:35:
                    87:18:f4:e4:2b:5a:1a:65:a8:57:cd:27:4f:4d:06:
                    34:39:53:4c:3a:1e:cb:90:3f:a7:ee:ee:2e:c7:6f:
                    a5:77:d6:8d:cf:b8:75:77:e5:dc:b9:3e:36:b0:c5:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0A:59:83:7B:B3:A2:1B:67:45:AC:28:F3:F6:DD:DA:F9:EA:AE:8B
            X509v3 Authority Key Identifier:
                keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234342e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:19:85:a6:f5:a2:27:59:98:bd:ac:6e:6d:8e:5d:d0:af:ef:
         d7:60:bc:c6:fe:5b:de:aa:06:67:06:f6:ee:d6:f6:f7:58:7c:
         1d:db:d3:57:69:1e:14:b5:11:56:3e:1b:46:2b:8c:5e:4a:d6:
         48:26:0a:05:ef:94:9b:3c:52:13:7e:f0:28:54:14:af:e6:fb:
         ad:e6:10:9b:41:fa:f6:51:37:68:80:5c:ed:4b:6b:4f:08:cc:
         22:37:51:93:f7:b1:88:26:b8:bb:cb:e6:46:b3:f5:d0:69:63:
         95:48:7c:45:e7:b0:e3:82:b1:42:49:9d:0b:e3:b9:fe:ed:48:
         d0:3b:0d:10:79:9e:59:03:bc:3e:44:e5:f1:36:03:42:15:af:
         3e:86:36:36:78:89:2e:bd:77:fc:fb:21:b0:b3:a4:c0:9d:ef:
         63:46:d1:31:e8:ea:d6:27:b6:b8:b7:96:ad:19:e6:13:90:41:
         db:a2:8c:01:6e:f7:d6:7f:d8:dc:86:09:ba:6d:30:fe:0c:aa:
         32:a6:1b:9d:b1:2e:e9:65:73:83:a3:46:a8:55:25:8a:0d:20:
         42:b1:5b:67:4d:49:3f:3a:d2:c0:d5:6c:43:77:87:a3:6b:ee:
         d3:c9:f8:79:37:fe:53:e4:d0:4a:1b:f4:93:80:f1:94:d7:9b:
         bd:e7:24:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:23:17 2025 by rpki-client