This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133332e302f32342d3234203d3e20323635333030.roa
File:                     3230302e3130362e3133332e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          jYZNWcMsBeT2PkOiKkuNNnqu/DuplwDEu2flOEsGics=
Subject key identifier:   4E:29:A3:AB:13:A4:90:24:84:44:7B:A8:F5:DD:2E:56:29:73:BD:90
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       57464E89D4A44A979959EEEBECD4853BD8835733
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133332e302f32342d3234203d3e20323635333030.roa
Signing time:             Fri 12 Dec 2025 15:27:43 +0000
ROA not before:           Fri 12 Dec 2025 15:22:43 +0000
ROA not after:            Fri 11 Dec 2026 15:27:43 +0000
asID:                     265300
IP address blocks:        200.106.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 02:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:46:4e:89:d4:a4:4a:97:99:59:ee:eb:ec:d4:85:3b:d8:83:57:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Dec 12 15:22:43 2025 GMT
            Not After : Dec 11 15:27:43 2026 GMT
        Subject: CN=4E29A3AB13A4902484447BA8F5DD2E562973BD90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:29:f5:64:fb:23:b4:e4:13:99:c9:f3:2a:
                    55:b9:b8:cc:76:a8:19:28:1c:39:a6:00:18:69:0c:
                    4b:9a:64:25:e2:8e:25:43:f5:bf:b8:40:38:b3:b0:
                    c8:26:58:fb:e2:c1:a6:34:62:4b:b0:37:a2:76:85:
                    a7:95:df:5d:5c:53:d0:3c:7b:3a:b1:c9:5f:18:5f:
                    7f:06:37:12:a2:f3:df:ab:3b:89:90:4b:c1:f8:9b:
                    f2:63:d4:56:a9:ce:31:92:bd:3f:46:23:b3:36:ed:
                    c1:2d:25:af:49:1a:d6:87:9e:24:3d:43:9d:6b:da:
                    c1:35:4a:49:72:26:3b:9b:b9:ab:89:09:fe:89:fa:
                    e2:ee:44:36:55:0e:a6:aa:b9:4a:65:59:84:d5:85:
                    b0:d0:4c:7b:ab:4a:a3:20:0d:fe:65:da:52:05:90:
                    2c:85:76:e4:2a:7d:2d:01:aa:bf:49:b1:c5:a5:df:
                    d7:e3:f5:65:98:73:33:95:7d:fd:fd:6e:c6:56:4c:
                    48:e4:f9:b2:e9:ee:f1:81:44:8a:74:6e:57:20:ff:
                    02:b0:83:b2:a5:b6:f5:72:8a:fe:ab:9c:2a:d4:4e:
                    c8:e6:cf:b8:19:43:f4:df:74:c2:b9:d4:a6:d4:51:
                    0b:76:c5:3c:08:ad:ef:d6:49:bf:02:08:1e:44:09:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:29:A3:AB:13:A4:90:24:84:44:7B:A8:F5:DD:2E:56:29:73:BD:90
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133332e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:0d:54:4b:8a:ac:7d:98:34:4e:4c:f8:58:06:7b:b1:31:75:
         41:6a:ad:89:3d:6a:b4:1e:d7:d6:64:58:4a:56:27:5c:7c:57:
         a6:32:d7:91:4e:8c:bd:d1:06:43:37:d0:e7:55:10:e8:72:57:
         7a:dc:3d:ee:92:dd:ac:cf:e7:12:3f:4e:cd:aa:dd:2a:b0:68:
         5d:91:9a:33:02:89:9a:be:4c:f4:ea:01:ca:63:31:9a:ec:4c:
         ee:71:93:95:4c:54:94:ff:82:00:c6:e1:a5:2f:ca:85:27:63:
         09:78:4d:d4:b1:c5:b5:0a:b5:82:dd:a2:5b:ea:94:f5:50:db:
         68:4f:a8:88:17:b7:0d:ea:54:a0:df:b0:44:fd:49:e3:25:6c:
         70:d5:ab:75:32:dc:3b:9a:2f:57:a7:f6:60:a4:67:67:86:b3:
         04:2a:5b:19:83:3e:e0:28:72:8e:ef:0e:a7:4c:32:bb:45:23:
         46:44:17:26:ed:2c:b5:6d:62:ad:83:47:af:1a:6d:a3:17:b4:
         92:46:97:e3:36:6a:67:00:66:36:d9:8f:99:76:03:1e:c6:fb:
         a9:99:cf:a2:f3:72:bd:ef:ba:7c:d7:ae:b2:a3:13:8d:96:32:
         4d:a1:b2:af:3c:ec:03:9f:53:c7:60:67:b0:08:d4:79:01:2c:
         1e:4d:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 08:43:06 2025 by rpki-client