This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36362e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          KA1KNPFQkUojm4H6ZV0JgSiCCOE82vaojjH41qgEBv0=
Subject key identifier:   8E:9E:29:EF:ED:55:B7:F5:9D:D4:D1:BF:F0:47:3D:14:E4:58:4C:A9
Certificate issuer:       /CN=DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C
Certificate serial:       7A43868EB2812AB96F3E9B2C017DA12D9FE20F24
Authority key identifier: DB:49:BF:A6:AC:14:96:5D:7D:3B:14:53:23:EF:F6:A9:9C:3F:D0:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32342d3234203d3e20323731353034.roa
Signing time:             Tue 16 Dec 2025 20:18:03 +0000
ROA not before:           Tue 16 Dec 2025 20:13:03 +0000
ROA not after:            Tue 15 Dec 2026 20:18:03 +0000
asID:                     271504
IP address blocks:        200.53.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.crl
                          rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 09:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:43:86:8e:b2:81:2a:b9:6f:3e:9b:2c:01:7d:a1:2d:9f:e2:0f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C
        Validity
            Not Before: Dec 16 20:13:03 2025 GMT
            Not After : Dec 15 20:18:03 2026 GMT
        Subject: CN=8E9E29EFED55B7F59DD4D1BFF0473D14E4584CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3f:31:55:7e:55:79:bf:84:58:26:19:6f:2d:
                    89:81:9b:a4:bf:de:64:9c:50:96:5a:95:ed:57:f9:
                    4a:47:42:6d:06:cb:f4:d0:80:f5:11:ea:66:d6:57:
                    a2:d8:bf:75:0a:d3:ef:8a:07:30:bc:28:c8:6d:46:
                    a9:15:f9:c9:35:4a:92:78:ad:4c:50:82:f0:9f:02:
                    34:a7:b1:ae:6e:3b:6f:e2:06:a1:d6:4b:17:52:b9:
                    47:45:27:ee:27:5b:99:8d:35:53:d3:96:68:35:c9:
                    71:e5:97:15:cb:85:78:0b:99:b4:bb:8f:59:78:17:
                    41:92:fe:6a:a4:be:14:a1:37:27:ec:07:29:33:3b:
                    ab:43:bd:7a:3b:35:6e:42:51:fd:9f:18:ae:34:69:
                    c9:86:80:c9:6a:d4:43:ac:2e:df:61:7c:b6:e8:8d:
                    28:f1:59:8d:9c:99:52:27:3d:d7:3b:b4:36:5d:b3:
                    aa:56:97:50:52:c9:68:d0:bc:24:7a:80:49:5b:d8:
                    d6:3a:79:05:7a:25:f7:97:a6:04:7e:da:c6:37:c3:
                    97:f0:71:2a:f2:1e:43:cd:56:79:ca:9e:16:a3:0f:
                    25:e2:24:59:a0:13:b0:19:bf:69:38:a6:ed:d5:13:
                    1c:24:a9:c0:42:09:b0:31:2a:8d:6b:fe:3f:91:50:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:29:EF:ED:55:B7:F5:9D:D4:D1:BF:F0:47:3D:14:E4:58:4C:A9
            X509v3 Authority Key Identifier:
                keyid:DB:49:BF:A6:AC:14:96:5D:7D:3B:14:53:23:EF:F6:A9:9C:3F:D0:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36362e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:47:a9:2d:b3:e6:da:0c:74:54:24:f4:75:67:ef:28:05:9f:
         07:9b:53:d9:5c:89:bb:22:67:53:d8:d5:09:59:d8:32:42:1a:
         b7:51:1e:50:32:f2:47:ae:59:bb:3b:36:db:91:64:c1:19:c4:
         2d:7e:99:f1:ca:d7:9d:43:bd:f3:9a:17:55:1e:eb:ae:4d:a8:
         c1:63:d6:bc:8e:05:09:a3:9b:06:19:45:06:22:86:7b:e1:01:
         d9:fb:fb:83:91:fb:45:49:a1:15:92:21:ff:53:68:6a:e7:fd:
         78:a7:9d:c4:10:ec:d1:e4:4d:e8:5c:71:09:88:1b:db:9b:31:
         f4:13:d7:3b:68:ee:b2:76:ec:31:0f:22:41:93:47:ca:1b:4f:
         80:6d:75:34:18:30:e2:0c:8c:d8:fa:df:c7:d3:b1:90:11:9c:
         3a:ef:fd:e0:a2:f2:f3:a1:9c:ee:55:11:17:63:53:37:ea:e6:
         a0:d0:cb:e5:4e:5d:32:de:97:f5:42:f7:f8:d8:be:42:55:ea:
         fb:6d:0e:fc:71:1b:47:70:e6:1a:b4:ca:0e:32:8e:56:7e:ce:
         ce:03:dc:b1:a2:9b:35:79:f6:99:49:0b:64:61:da:ae:8f:82:
         69:b4:00:94:fa:6b:07:ea:26:55:a9:03:57:06:75:85:00:26:
         c8:29:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:25:34 2025 by rpki-client