This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          7gsLqpxIAS20Z79YKVCBQKJ2I32XRQm1n6zj2KyAd7Y=
Subject key identifier:   BB:49:FA:B4:52:88:6B:43:E2:1D:EA:82:49:8B:A2:24:76:02:27:FD
Certificate issuer:       /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial:       4EFB2D53145CE1321AC32F4C1D160BF86DA149F2
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa
Signing time:             Mon 08 Dec 2025 01:35:29 +0000
ROA not before:           Mon 08 Dec 2025 01:30:29 +0000
ROA not after:            Mon 07 Dec 2026 01:35:29 +0000
asID:                     28594
IP address blocks:        200.218.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fb:2d:53:14:5c:e1:32:1a:c3:2f:4c:1d:16:0b:f8:6d:a1:49:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
        Validity
            Not Before: Dec  8 01:30:29 2025 GMT
            Not After : Dec  7 01:35:29 2026 GMT
        Subject: CN=BB49FAB452886B43E21DEA82498BA224760227FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3d:aa:d6:46:a2:7f:d3:db:9a:7e:8d:fa:61:
                    ae:b1:54:9e:f9:f8:8c:0f:b1:96:69:2c:86:2c:b8:
                    26:a8:1d:bd:79:c5:b0:72:5f:68:3c:0f:90:2b:9c:
                    84:69:8e:99:f8:c3:80:06:8f:1f:6c:2d:2f:b4:40:
                    32:f5:e9:f3:2a:c0:fa:43:38:10:75:de:dd:16:54:
                    8c:99:a2:e5:b3:9b:bf:47:5f:80:56:9d:52:c2:64:
                    a8:af:6d:da:62:62:4c:0d:53:af:5a:48:9d:34:8a:
                    a8:35:81:e4:4d:63:06:5b:d7:5a:6a:f5:44:0b:42:
                    40:03:59:35:4a:14:81:d2:d1:d0:8d:39:35:39:d8:
                    32:a8:2f:34:5c:40:6b:d7:f2:dc:35:97:0b:36:a9:
                    c8:32:73:c9:78:8c:f3:fa:a0:f9:fe:4d:54:47:9e:
                    3d:aa:31:fe:29:f5:40:55:ae:e3:d2:55:44:9f:b0:
                    d5:13:5d:22:5c:85:1e:6a:d2:b5:f0:2a:98:68:16:
                    81:46:92:23:46:88:28:5f:4b:bd:f6:88:3e:9d:06:
                    e5:c2:f9:fe:7d:ef:dd:08:df:b4:f5:dc:57:03:f7:
                    88:75:5e:7f:a0:4c:b6:c5:ea:85:a1:09:e2:5d:05:
                    02:11:ee:2d:52:fc:cc:6e:00:96:af:bc:1b:c1:d9:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:49:FA:B4:52:88:6B:43:E2:1D:EA:82:49:8B:A2:24:76:02:27:FD
            X509v3 Authority Key Identifier:
                keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:14:55:60:a2:2c:c9:74:65:65:87:5e:bf:5e:02:9e:b5:e0:
         bf:db:d2:b1:cb:a2:41:da:47:94:43:32:8a:96:48:a5:0d:e7:
         12:e1:62:04:65:ad:83:71:21:0b:1f:de:2e:c8:98:73:5d:84:
         28:ea:82:55:ea:97:12:1f:b2:b6:19:c2:ee:ea:05:fa:20:6d:
         16:f4:13:a5:b3:4e:2f:94:9d:d4:aa:1e:44:77:32:73:77:fd:
         a2:8c:59:5b:e8:d2:30:07:ee:cb:2d:18:7d:14:78:e9:bf:9d:
         b4:bf:63:18:42:0a:3b:d2:6f:59:f8:eb:f2:90:3b:0b:89:e0:
         20:67:f8:8c:76:dc:17:5a:80:9a:0d:27:0c:9a:ed:0f:b9:6d:
         65:14:c6:d9:74:6d:62:06:99:1f:e3:75:18:1c:f5:c9:90:39:
         b3:c9:3f:28:20:bb:a8:31:89:0d:6c:69:b5:2e:74:dc:37:7d:
         fb:cc:c9:45:26:bd:e7:66:62:ac:37:bb:60:7b:2e:91:37:f3:
         92:a2:c6:a4:0a:65:0f:ce:58:e0:10:f2:cd:0e:c8:09:2e:8e:
         0a:93:f1:c8:16:1b:8a:ba:b0:54:f0:26:e1:42:d5:09:52:e4:
         77:69:e6:49:37:bf:58:a6:c0:53:f4:25:39:52:25:8b:e2:58:
         ca:f2:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:25:16 2025 by rpki-client