This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3230302e39352e3230302e302f32342d3234203d3e203631393337.roa
File:                     3230302e39352e3230302e302f32342d3234203d3e203631393337.roa (raw, json)
Hash identifier:          DP3q54OP0kzNxuCsLCGyzTcEBIcBEB2uf67JVfHyQwM=
Subject key identifier:   6F:9E:E3:B5:15:BD:56:A4:B4:BC:D0:9D:7E:CC:E3:BD:92:41:AB:56
Certificate issuer:       /CN=DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303
Certificate serial:       439BF8AB2110F0F5EFF3FA5ACBE8191DFCF06BAA
Authority key identifier: DA:2E:3A:87:70:ED:AF:BB:8A:09:0C:D7:35:FE:54:86:A4:CF:33:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3230302e39352e3230302e302f32342d3234203d3e203631393337.roa
Signing time:             Mon 29 Dec 2025 20:09:43 +0000
ROA not before:           Mon 29 Dec 2025 20:04:43 +0000
ROA not after:            Mon 28 Dec 2026 20:09:43 +0000
asID:                     61937
IP address blocks:        200.95.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 18:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9b:f8:ab:21:10:f0:f5:ef:f3:fa:5a:cb:e8:19:1d:fc:f0:6b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303
        Validity
            Not Before: Dec 29 20:04:43 2025 GMT
            Not After : Dec 28 20:09:43 2026 GMT
        Subject: CN=6F9EE3B515BD56A4B4BCD09D7ECCE3BD9241AB56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:a3:4f:7c:97:d6:49:58:28:6b:87:e7:3a:
                    26:76:e7:ed:01:85:7d:73:6e:a5:41:f6:10:96:13:
                    72:ce:3c:bf:b7:5b:bf:e9:39:df:9d:0a:0d:29:3a:
                    1b:93:83:61:78:a8:13:82:42:f2:91:1f:23:e1:7c:
                    bc:5c:06:9d:d3:88:8e:6b:f6:54:07:ba:42:62:3b:
                    7a:21:fc:c7:46:52:b8:20:f0:8e:4b:8e:70:63:9e:
                    1c:ba:91:2b:3c:21:47:b4:d3:4b:43:cc:62:07:d5:
                    4a:c2:ec:df:3c:e5:2c:28:d6:ff:e5:cb:52:6b:b8:
                    78:1b:f2:54:8a:27:77:fa:ca:25:aa:ca:ba:e3:47:
                    af:8f:c7:52:6b:03:a6:8e:ef:55:24:6e:b6:be:d1:
                    fe:9a:3a:bb:b3:74:c7:74:c3:b1:d2:8e:ec:d6:ab:
                    ed:cd:b4:ea:f9:1c:85:5f:64:39:0e:12:d9:fe:9f:
                    3a:34:7a:6f:90:e1:45:5e:f6:4c:4f:1e:ff:f0:54:
                    26:3a:6e:f8:16:72:42:46:2a:c7:9b:f7:2f:bb:ea:
                    a7:31:6d:35:d4:f9:a7:b4:09:b6:af:a0:60:32:6b:
                    49:76:dc:25:08:23:f1:86:35:7d:ca:8e:65:b6:a5:
                    6b:98:cf:d4:c8:db:63:83:17:a8:c4:a9:f4:de:0d:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9E:E3:B5:15:BD:56:A4:B4:BC:D0:9D:7E:CC:E3:BD:92:41:AB:56
            X509v3 Authority Key Identifier:
                keyid:DA:2E:3A:87:70:ED:AF:BB:8A:09:0C:D7:35:FE:54:86:A4:CF:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3230302e39352e3230302e302f32342d3234203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:23:72:f5:97:e1:52:cf:8c:54:7b:eb:21:be:a9:2f:71:c2:
         87:33:20:41:41:6b:51:29:d3:b6:22:ca:ae:e9:3e:a8:55:38:
         6d:f2:98:be:1b:23:a5:22:a5:f9:e5:19:e3:aa:34:47:5f:d2:
         69:fb:4d:55:8b:0e:80:fd:3c:08:f4:cb:0b:cd:26:42:0a:c2:
         a4:dd:cb:a7:94:11:c0:6d:8d:97:6d:ea:02:96:fd:a3:1f:bc:
         c9:49:6a:c5:c5:3a:a4:5a:d9:25:9f:8b:2f:d1:ea:89:3a:9b:
         a3:c4:18:cf:cc:fa:58:a1:db:45:49:2b:9e:17:ed:0d:70:51:
         b1:b7:1f:31:ae:c8:85:06:97:ee:9a:e4:b7:77:d1:04:6c:6e:
         a3:53:f3:a5:77:ef:75:94:20:eb:47:de:ac:83:f4:ee:31:d7:
         d6:d4:15:db:83:34:36:26:9f:8c:ef:1d:79:bb:d4:5d:ca:19:
         58:b3:ea:09:50:65:55:78:7f:6c:f8:c5:22:d6:d9:de:a8:03:
         d5:4c:f0:ff:48:35:6a:89:80:9e:43:95:1e:d0:5a:5c:c3:8d:
         8b:7e:46:37:82:6e:00:af:7e:a2:86:f3:ac:f1:9d:8e:f9:af:
         75:66:d1:c2:1f:9e:dd:3a:33:60:4d:e1:7c:66:ac:5e:d0:3e:
         10:cf:16:91
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ5v4qyEQ8PXv8/pay+gZHfzwa6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEyRTNBODc3MEVEQUZCQjhBMDkwQ0Q3MzVGRTU0ODZB
NENGMzMwMzAeFw0yNTEyMjkyMDA0NDNaFw0yNjEyMjgyMDA5NDNaMDMxMTAvBgNV
BAMTKDZGOUVFM0I1MTVCRDU2QTRCNEJDRDA5RDdFQ0NFM0JEOTI0MUFCNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlqNPfJfWSVgoa4fnOiZ25+0B
hX1zbqVB9hCWE3LOPL+3W7/pOd+dCg0pOhuTg2F4qBOCQvKRHyPhfLxcBp3TiI5r
9lQHukJiO3oh/MdGUrgg8I5LjnBjnhy6kSs8IUe000tDzGIH1UrC7N885Swo1v/l
y1JruHgb8lSKJ3f6yiWqyrrjR6+Px1JrA6aO71Ukbra+0f6aOruzdMd0w7HSjuzW
q+3NtOr5HIVfZDkOEtn+nzo0em+Q4UVe9kxPHv/wVCY6bvgWckJGKseb9y+76qcx
bTXU+ae0CbavoGAya0l23CUII/GGNX3KjmW2pWuYz9TI22ODF6jEqfTeDXELAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUb57jtRW9VqS0vNCdfszjvZJBq1YwHwYDVR0j
BBgwFoAU2i46h3Dtr7uKCQzXNf5UhqTPMwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRW
eVovMC9EQTJFM0E4NzcwRURBRkJCOEEwOTBDRDczNUZFNTQ4NkE0Q0YzMzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMkUzQTg3NzBFREFGQkI4
QTA5MENENzM1RkU1NDg2QTRDRjMzMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzllcmZ3TFlLcnFrUEVpcTFpVmg0VEUzeWVXU0NnV28xNXZiZTZ6RXc0VnlaLzAv
MzIzMDMwMmUzOTM1MmUzMjMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzkzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyF/IMA0GCSqGSIb3DQEBCwUAA4IBAQACI3L1l+FS
z4xUe+shvqkvccKHMyBBQWtRKdO2Isqu6T6oVTht8pi+GyOlIqX55RnjqjRHX9Jp
+01Viw6A/TwI9MsLzSZCCsKk3cunlBHAbY2XbeoClv2jH7zJSWrFxTqkWtkln4sv
0eqJOpujxBjPzPpYodtFSSueF+0NcFGxtx8xrsiFBpfumuS3d9EEbG6jU/Old+91
lCDrR96sg/TuMdfW1BXbgzQ2Jp+M7x15u9RdyhlYs+oJUGVVeH9s+MUi1tneqAPV
TPD/SDVqiYCeQ5Ue0Fpcw42LfkY3gm4Ar36ihvOs8Z2O+a91ZtHCH57dOjNgTeF8
Zqxe0D4QzxaR
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:01:47 2026 by rpki-client