This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131362e302f32322d3232203d3e20323633353336.roa
File:                     3230312e33332e3131362e302f32322d3232203d3e20323633353336.roa (raw, json)
Hash identifier:          XEY3DsxmH7ZnffsaaV031ANkdthcNPa8IIdGHun8gVY=
Subject key identifier:   88:E3:94:A0:F7:BB:36:3A:24:53:23:5F:22:2C:F1:E0:98:3D:DC:A7
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       664B3EBBC8D0B10C84D5DD72FFF8FE90F9FB4379
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131362e302f32322d3232203d3e20323633353336.roa
Signing time:             Mon 15 Dec 2025 14:31:20 +0000
ROA not before:           Mon 15 Dec 2025 14:26:20 +0000
ROA not after:            Mon 14 Dec 2026 14:31:20 +0000
asID:                     263536
IP address blocks:        201.33.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4b:3e:bb:c8:d0:b1:0c:84:d5:dd:72:ff:f8:fe:90:f9:fb:43:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Dec 15 14:26:20 2025 GMT
            Not After : Dec 14 14:31:20 2026 GMT
        Subject: CN=88E394A0F7BB363A2453235F222CF1E0983DDCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:8b:9e:70:b5:3f:53:22:af:38:77:d4:be:
                    01:e1:29:4e:e0:28:05:5b:e1:87:e9:f4:65:81:6a:
                    12:8a:6c:a8:7c:56:c5:43:48:d2:bf:e4:18:92:15:
                    25:f7:1c:5f:95:b3:de:81:00:f3:c7:70:d4:8d:88:
                    fc:97:03:f1:37:78:72:b5:b8:7c:00:b1:2f:43:c6:
                    00:a0:a0:7a:87:5c:9c:c2:9f:8b:9c:0c:41:ec:df:
                    f6:bf:a6:4a:d1:e1:a2:0e:7d:4a:c4:d8:2b:43:0a:
                    86:77:93:ed:ef:10:51:65:93:9a:04:97:80:15:37:
                    4a:09:cd:b7:8d:11:cc:a7:fa:06:4a:ad:c5:ed:04:
                    cc:b6:ad:8c:3e:1d:de:ba:4e:6d:01:1a:04:02:4f:
                    33:bc:e5:e2:93:d2:5b:cf:8f:43:04:9d:f0:42:31:
                    d7:81:b1:22:e8:68:c5:3f:4d:7a:96:b1:1f:09:26:
                    0f:34:1d:76:fb:7b:45:96:ca:c2:f6:61:b1:9e:c6:
                    8c:27:2e:b3:a9:6c:4a:0d:ed:b6:4f:ba:8d:54:8f:
                    ca:50:ff:64:e8:cb:83:6c:30:81:01:42:29:1b:c9:
                    82:69:16:70:0b:5e:d7:85:36:0a:6c:e2:89:a2:91:
                    70:02:e9:0d:4d:b2:40:25:dd:51:01:81:42:3d:95:
                    66:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E3:94:A0:F7:BB:36:3A:24:53:23:5F:22:2C:F1:E0:98:3D:DC:A7
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131362e302f32322d3232203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:37:2f:6d:f6:1b:49:31:68:c0:92:da:7d:c6:1f:61:03:2c:
         46:5d:ba:a7:5b:bd:aa:40:d8:6b:e1:f9:c6:2d:8a:48:9b:21:
         2e:42:0c:fa:14:3b:28:af:6d:1b:e6:55:2a:32:71:e2:01:ad:
         01:27:ff:87:f3:74:ce:a5:c9:d8:87:5e:5e:06:84:30:cd:00:
         38:b9:d1:75:01:e5:3a:ea:dc:bc:6c:ec:b7:29:0a:bd:be:1b:
         4f:4d:5b:9e:9b:d0:46:58:b8:38:08:66:29:5c:69:ac:42:d3:
         31:2e:f5:0d:91:5c:06:1f:0e:f0:07:91:77:de:ab:7f:42:6c:
         ec:bb:d8:00:d7:a8:49:ba:df:ef:64:2e:a3:1b:be:a6:4e:7c:
         55:08:33:b2:0d:93:5b:87:d1:41:76:f8:95:12:64:12:40:c7:
         5f:28:1d:b7:c3:e2:00:6c:e5:61:8f:23:e4:5c:c4:97:44:1e:
         a3:4a:a0:2a:86:64:26:9c:c8:ce:6d:e1:75:86:23:bb:a3:9c:
         14:69:c2:f0:a5:7f:57:28:2c:36:b1:80:47:ba:db:4a:41:85:
         92:30:9f:ec:21:7f:6a:df:cb:69:f6:95:36:b8:4f:e7:41:ab:
         a7:99:a5:25:a3:4d:bb:d3:30:49:76:7a:ac:41:98:47:19:b8:
         ed:fa:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:45:31 2025 by rpki-client