This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235302e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3235302e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          jY1mrVKEmaUKyYlZaPPoMju3dMb6YB5i+vY2+Eh9lh4=
Subject key identifier:   DC:3A:57:AC:1F:97:52:A1:D1:6D:52:0C:BB:07:62:D1:8A:01:88:8C
Certificate issuer:       /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial:       2D64820AA6FA1604874EC4E4F4D923EDD2950E24
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235302e302f32332d3233203d3e203238353934.roa
Signing time:             Mon 08 Dec 2025 01:35:28 +0000
ROA not before:           Mon 08 Dec 2025 01:30:28 +0000
ROA not after:            Mon 07 Dec 2026 01:35:28 +0000
asID:                     28594
IP address blocks:        200.218.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:64:82:0a:a6:fa:16:04:87:4e:c4:e4:f4:d9:23:ed:d2:95:0e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
        Validity
            Not Before: Dec  8 01:30:28 2025 GMT
            Not After : Dec  7 01:35:28 2026 GMT
        Subject: CN=DC3A57AC1F9752A1D16D520CBB0762D18A01888C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:b2:8d:40:61:32:53:f0:aa:4e:85:b9:e6:
                    47:af:c0:cd:85:3c:0c:de:f7:dc:eb:14:c8:b2:f3:
                    bf:15:3f:36:ed:cf:cd:60:ab:e2:0d:46:b5:38:01:
                    cc:4e:47:00:00:ed:34:0b:c3:9c:28:56:af:a4:98:
                    5e:11:1a:35:50:ac:43:39:3f:c7:3a:c7:40:bb:e3:
                    0f:f6:79:b2:e4:88:31:4b:5c:eb:7d:8a:24:e2:91:
                    70:a5:95:e4:e7:de:ff:a4:40:76:86:23:11:f5:88:
                    98:f6:d7:ef:36:61:08:41:d7:c1:ea:8a:b2:f3:bf:
                    75:b3:08:38:1a:c7:5e:a7:e3:62:c7:bc:d4:22:13:
                    7b:9d:2c:73:e0:2e:70:b4:aa:fd:a8:c9:91:b3:13:
                    3e:f7:dd:f6:db:26:a0:eb:97:e4:66:39:e9:ae:27:
                    7d:05:9c:3a:3a:00:b9:6e:11:45:64:90:8c:11:28:
                    b8:27:bf:2e:97:38:6d:3c:63:7c:57:c4:b1:7b:e7:
                    e7:9a:9f:3f:df:3a:3d:f3:a2:f9:30:ae:15:4a:30:
                    18:48:3c:24:74:95:84:d2:25:38:85:3e:e0:06:45:
                    3e:e1:a3:0e:d1:c9:f4:c8:5c:8b:74:fe:7b:f4:d2:
                    db:6b:f5:64:05:4f:ac:6c:69:66:32:9e:2e:db:ef:
                    7d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3A:57:AC:1F:97:52:A1:D1:6D:52:0C:BB:07:62:D1:8A:01:88:8C
            X509v3 Authority Key Identifier:
                keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235302e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:a8:e8:f1:aa:46:dc:ee:c0:dd:95:63:ab:51:f4:a6:4b:
         91:e4:01:fd:00:ee:8e:c8:a0:ee:91:7f:9e:6f:26:79:f6:ef:
         d8:0f:b9:95:d0:6d:d7:0f:69:60:de:b0:cf:06:c6:cb:30:8d:
         ae:dc:78:a1:2b:5b:a6:3d:2a:10:ca:23:e2:b0:5c:bb:ec:de:
         d7:ec:a7:00:a1:f2:21:2d:ad:58:ad:c7:f6:88:55:52:81:d3:
         24:b0:9a:f7:76:20:86:58:9f:1c:3b:c5:19:77:82:85:bc:ac:
         e9:6c:cb:73:b6:81:c9:70:e6:e3:38:4a:2f:93:7d:d2:40:15:
         89:04:71:bc:fe:99:15:7b:24:ef:96:74:32:6c:dc:aa:e1:dc:
         77:62:87:f0:ff:1a:75:30:e7:0e:0e:ad:bc:db:6b:cd:20:f5:
         49:41:a2:29:0d:5c:18:8c:49:04:e8:fc:16:cf:0e:8c:34:36:
         0c:76:b7:8a:bb:95:74:0c:e3:0a:79:7e:05:6f:6b:3f:d4:a2:
         31:d4:2f:c7:52:fd:5d:1c:4d:31:e8:15:fa:2a:28:8f:3d:e0:
         a5:9c:db:a2:d4:90:10:07:eb:5e:56:3f:1e:76:14:39:e4:c4:
         f0:a0:05:06:5f:ef:ed:82:56:4f:6a:2e:b1:fb:54:ec:a8:09:
         82:72:bc:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULWSCCqb6FgSHTsTk9Nkj7dKVDiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI5RDJBNkEwOUI4MkUyNEY2RUM2QkRCNkZFQzJFRUNF
QjU1Q0U1RDAeFw0yNTEyMDgwMTMwMjhaFw0yNjEyMDcwMTM1MjhaMDMxMTAvBgNV
BAMTKERDM0E1N0FDMUY5NzUyQTFEMTZENTIwQ0JCMDc2MkQxOEEwMTg4OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nrKNQGEyU/CqToW55kevwM2F
PAze99zrFMiy878VPzbtz81gq+INRrU4AcxORwAA7TQLw5woVq+kmF4RGjVQrEM5
P8c6x0C74w/2ebLkiDFLXOt9iiTikXClleTn3v+kQHaGIxH1iJj21+82YQhB18Hq
irLzv3WzCDgax16n42LHvNQiE3udLHPgLnC0qv2oyZGzEz733fbbJqDrl+RmOemu
J30FnDo6ALluEUVkkIwRKLgnvy6XOG08Y3xXxLF75+eanz/fOj3zovkwrhVKMBhI
PCR0lYTSJTiFPuAGRT7how7RyfTIXIt0/nv00ttr9WQFT6xsaWYyni7b731bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3DpXrB+XUqHRbVIMuwdi0YoBiIwwHwYDVR0j
BBgwFoAUop0qagm4LiT27Gvbb+wu7OtVzl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMC9BMjlEMkE2QTA5QjgyRTI0RjZFQzZCREI2RkVDMkVFQ0VCNTVDRTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyOUQyQTZBMDlCODJFMjRG
NkVDNkJEQjZGRUMyRUVDRUI1NUNFNUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzAv
MzIzMDMwMmUzMjMxMzgyZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHI2vowDQYJKoZIhvcNAQELBQADggEBADf/qOjx
qkbc7sDdlWOrUfSmS5HkAf0A7o7IoO6Rf55vJnn279gPuZXQbdcPaWDesM8Gxssw
ja7ceKErW6Y9KhDKI+KwXLvs3tfspwCh8iEtrVitx/aIVVKB0ySwmvd2IIZYnxw7
xRl3goW8rOlsy3O2gclw5uM4Si+TfdJAFYkEcbz+mRV7JO+WdDJs3Krh3Hdih/D/
GnUw5w4Orbzba80g9UlBoikNXBiMSQTo/BbPDow0Ngx2t4q7lXQM4wp5fgVvaz/U
ojHUL8dS/V0cTTHoFfoqKI894KWc26LUkBAH615WPx52FDnkxPCgBQZf7+2CVk9q
LrH7VOyoCYJyvLw=
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:25:20 2025 by rpki-client