This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3230302e39352e3139342e302f32342d3234203d3e203631393337.roa
File:                     3230302e39352e3139342e302f32342d3234203d3e203631393337.roa (raw, json)
Hash identifier:          ghOz6AFVFupSvd8eM1xM1jMuu246JL8exxK4YjbTOU4=
Subject key identifier:   46:B7:D2:21:92:91:8A:DB:63:DE:54:DD:30:94:7F:FE:1B:68:D2:08
Certificate issuer:       /CN=DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303
Certificate serial:       5DB0F2BA928CB8AF4C5E97477AD55A370EF88705
Authority key identifier: DA:2E:3A:87:70:ED:AF:BB:8A:09:0C:D7:35:FE:54:86:A4:CF:33:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3230302e39352e3139342e302f32342d3234203d3e203631393337.roa
Signing time:             Mon 29 Dec 2025 20:09:42 +0000
ROA not before:           Mon 29 Dec 2025 20:04:42 +0000
ROA not after:            Mon 28 Dec 2026 20:09:42 +0000
asID:                     61937
IP address blocks:        200.95.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 18:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b0:f2:ba:92:8c:b8:af:4c:5e:97:47:7a:d5:5a:37:0e:f8:87:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303
        Validity
            Not Before: Dec 29 20:04:42 2025 GMT
            Not After : Dec 28 20:09:42 2026 GMT
        Subject: CN=46B7D22192918ADB63DE54DD30947FFE1B68D208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:bb:40:b5:d4:9c:bc:a0:c6:41:47:f4:77:
                    6d:74:05:ba:9e:01:b9:c1:e9:bb:31:91:6f:63:8d:
                    d7:08:fa:c1:48:ec:f7:3b:96:4b:2f:90:83:a7:ad:
                    27:de:c1:2a:f0:33:3c:fb:71:7b:72:a6:c5:11:b2:
                    2f:84:e0:9b:d3:6f:70:f0:25:60:6a:dc:40:28:62:
                    de:0d:36:2d:5e:ea:27:0a:07:2a:4b:31:55:0f:9b:
                    18:be:1e:0b:1c:51:e8:d9:76:b2:ee:50:de:43:36:
                    3c:c5:33:9b:aa:9d:39:7f:c1:14:7a:0e:b8:a3:13:
                    51:f1:70:d6:ea:17:a2:29:eb:0d:af:2b:54:20:a6:
                    c2:b3:aa:7b:ee:91:b8:34:5c:18:d1:fd:39:1b:f3:
                    54:69:5f:75:24:b3:26:b4:2e:e9:92:b3:17:4f:c4:
                    d1:c6:f0:55:dc:7d:75:78:b9:f4:bb:0f:53:37:84:
                    42:c6:af:f9:cc:4c:12:2d:01:54:ac:44:d1:7a:d9:
                    fc:b1:40:1f:0b:79:d7:a8:2c:45:c3:a2:a0:92:8b:
                    dc:61:24:cf:99:56:28:e1:e1:f9:fc:4b:4a:ad:79:
                    56:ec:63:5c:ce:6d:09:d4:11:3d:3e:03:1a:c1:fc:
                    90:fd:63:0d:99:73:f2:b0:a1:bc:1b:68:3b:b6:57:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B7:D2:21:92:91:8A:DB:63:DE:54:DD:30:94:7F:FE:1B:68:D2:08
            X509v3 Authority Key Identifier:
                keyid:DA:2E:3A:87:70:ED:AF:BB:8A:09:0C:D7:35:FE:54:86:A4:CF:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3230302e39352e3139342e302f32342d3234203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:71:d1:1c:95:21:df:9c:7c:99:58:17:2e:7e:90:d6:ea:
         bd:e1:81:39:ef:c3:86:a3:15:44:f3:6e:d3:2a:43:43:5e:57:
         e6:7f:f3:36:98:db:4d:f2:9d:5a:65:3f:83:b6:e1:d1:4b:98:
         91:ad:0c:73:70:54:82:c6:52:c5:9a:f5:e2:24:85:42:8c:d4:
         99:94:c5:b5:51:a0:1a:e0:38:10:47:e6:ac:8b:da:90:5a:21:
         8f:c1:11:71:18:7a:f0:53:da:a6:ff:31:f6:c0:0f:98:6f:b3:
         d1:ef:4e:67:77:b7:bb:b7:be:b4:ea:dd:2b:61:bd:fb:db:e5:
         3c:6a:81:67:ec:c9:81:af:9a:f7:06:33:da:eb:80:3a:e6:b6:
         0f:ba:59:71:af:35:02:13:27:0a:e7:ad:9c:f3:0c:95:ea:ad:
         da:bf:8a:83:50:a4:58:c9:5b:bd:d5:16:49:75:a6:a1:56:e9:
         70:40:4a:cd:6a:c9:a4:0e:50:44:ff:cc:07:be:a2:04:19:92:
         c2:93:c6:28:ad:71:b7:48:67:f7:21:3c:0a:07:64:5a:f5:82:
         1e:9f:69:8a:e8:25:e1:f2:62:1b:70:3e:83:d7:75:5c:40:4d:
         c1:f0:a4:59:b5:af:5e:ad:63:8a:7c:56:e9:5c:37:80:e1:a6:
         3c:9a:0a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:01:59 2026 by rpki-client