This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
File:                     3230302e35332e36342e302f32322d3232203d3e20323731353034.roa (raw, json)
Hash identifier:          s2JOYOSWrAhGHhMdGDWy//WoHWKQlNkXmfQ+O/AxSDk=
Subject key identifier:   E9:0F:3E:C6:BE:8D:CC:E6:64:6A:5F:8E:6E:E2:73:72:67:DE:F0:68
Certificate issuer:       /CN=DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C
Certificate serial:       055DC212AD23D90522C64F3324C48B89C0FB6B19
Authority key identifier: DB:49:BF:A6:AC:14:96:5D:7D:3B:14:53:23:EF:F6:A9:9C:3F:D0:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
Signing time:             Tue 16 Dec 2025 20:18:06 +0000
ROA not before:           Tue 16 Dec 2025 20:13:06 +0000
ROA not after:            Tue 15 Dec 2026 20:18:06 +0000
asID:                     271504
IP address blocks:        200.53.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.crl
                          rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 09:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5d:c2:12:ad:23:d9:05:22:c6:4f:33:24:c4:8b:89:c0:fb:6b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C
        Validity
            Not Before: Dec 16 20:13:06 2025 GMT
            Not After : Dec 15 20:18:06 2026 GMT
        Subject: CN=E90F3EC6BE8DCCE6646A5F8E6EE2737267DEF068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:9d:bd:09:83:69:26:e8:49:6d:79:f2:7f:
                    24:ac:3f:34:4a:8c:95:b8:7d:b8:7c:7b:c0:f7:7d:
                    4d:0c:9d:71:46:ab:f4:57:d4:69:a9:38:93:2e:1a:
                    ee:ce:01:dc:46:72:7b:bf:f4:83:c7:48:74:74:63:
                    a2:48:63:29:20:73:03:b3:83:72:99:12:ff:6b:dd:
                    4e:44:db:6e:2b:a2:20:dd:4e:e1:7f:f6:29:bb:99:
                    59:f5:03:ab:d0:e2:fc:e8:2f:23:70:e6:25:ad:db:
                    e9:bb:3f:25:dc:32:16:a8:47:59:43:64:cf:f2:88:
                    d1:22:21:c1:42:c7:36:d9:15:b9:db:49:d6:92:6b:
                    55:53:80:c4:a7:61:65:7f:d8:22:29:29:c5:a3:fc:
                    a0:44:7b:1d:0b:e1:b0:69:e1:58:b0:e3:35:a0:62:
                    c9:82:f6:bc:d9:ba:dc:87:67:23:0f:a3:93:d0:dc:
                    c5:08:5a:a3:72:c6:19:c8:4d:f8:f0:f4:90:19:43:
                    86:f6:0f:93:5e:d1:a2:47:16:d7:6c:da:29:24:a8:
                    3f:2a:98:2c:21:64:98:df:73:be:69:05:39:34:74:
                    df:d6:df:f2:ac:06:52:50:b8:37:5c:52:3f:2b:a2:
                    0c:4a:25:32:9f:d3:5d:a9:18:f2:6d:b0:f6:67:2a:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0F:3E:C6:BE:8D:CC:E6:64:6A:5F:8E:6E:E2:73:72:67:DE:F0:68
            X509v3 Authority Key Identifier:
                keyid:DB:49:BF:A6:AC:14:96:5D:7D:3B:14:53:23:EF:F6:A9:9C:3F:D0:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:ba:0e:ff:9b:99:33:66:0d:7c:19:2b:ae:7c:35:ce:39:16:
         75:07:a7:76:a8:a1:79:61:61:cd:24:c9:cc:c4:0b:5b:df:74:
         d9:9a:1a:d8:6f:89:a2:cc:e4:4d:ec:4c:22:00:40:cb:9d:52:
         1c:b9:b2:c5:49:2b:8f:5b:f9:4a:43:81:ab:c2:38:f2:ef:22:
         0d:ef:85:c2:5f:48:74:0f:33:05:25:3d:92:cf:fc:61:0a:31:
         be:e6:1b:a9:da:38:bd:6a:8c:b1:8c:ec:e3:09:0e:73:a6:17:
         8a:e6:f5:5e:c7:0d:cf:ac:ec:9a:bf:ce:80:fb:0f:ad:5a:6a:
         ad:24:f4:f6:7b:62:71:9f:c9:8b:eb:1d:67:a9:56:53:5a:dc:
         8d:81:17:db:9a:66:e1:92:47:bb:c6:ed:dd:53:aa:ce:3c:b3:
         ae:d2:69:ce:e5:5d:81:bf:37:40:91:27:d8:48:be:85:55:f9:
         04:98:ba:fe:3d:78:7a:82:a4:26:d4:33:52:57:30:c7:39:fc:
         68:25:c8:ed:57:26:20:c4:a6:d7:9e:97:dc:55:d4:f8:19:3f:
         7b:49:0f:13:b1:e9:16:44:8b:3b:f4:27:64:b4:de:6c:f3:be:
         2a:fc:82:4c:2b:df:89:f4:e3:72:5b:23:39:de:bb:71:ca:38:
         ff:55:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:25:19 2025 by rpki-client