This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/3230302e362e3133362e302f32312d3332203d3e20323633323632.roa
File:                     3230302e362e3133362e302f32312d3332203d3e20323633323632.roa (raw, json)
Hash identifier:          PZcVtr0PFn9IFIbJ343mP3Wjd0s9mjVitCdljaWVtNw=
Subject key identifier:   AB:2C:A5:FA:F4:62:D9:B8:AF:52:6E:C9:AF:E2:CC:69:71:71:88:23
Certificate issuer:       /CN=5F2DE0A8CE4D0F840F605AF2908B86F83674BEC4
Certificate serial:       010BFD860F169BA29796F1F6DDB43B0F6A40B366
Authority key identifier: 5F:2D:E0:A8:CE:4D:0F:84:0F:60:5A:F2:90:8B:86:F8:36:74:BE:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2DE0A8CE4D0F840F605AF2908B86F83674BEC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/3230302e362e3133362e302f32312d3332203d3e20323633323632.roa
Signing time:             Thu 11 Dec 2025 20:17:16 +0000
ROA not before:           Thu 11 Dec 2025 20:12:16 +0000
ROA not after:            Thu 10 Dec 2026 20:17:16 +0000
asID:                     263262
IP address blocks:        200.6.136.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/5F2DE0A8CE4D0F840F605AF2908B86F83674BEC4.crl
                          rsync://rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/5F2DE0A8CE4D0F840F605AF2908B86F83674BEC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2DE0A8CE4D0F840F605AF2908B86F83674BEC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:fd:86:0f:16:9b:a2:97:96:f1:f6:dd:b4:3b:0f:6a:40:b3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F2DE0A8CE4D0F840F605AF2908B86F83674BEC4
        Validity
            Not Before: Dec 11 20:12:16 2025 GMT
            Not After : Dec 10 20:17:16 2026 GMT
        Subject: CN=AB2CA5FAF462D9B8AF526EC9AFE2CC6971718823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:52:cc:aa:88:02:a9:ee:a1:88:81:ac:6f:
                    cb:02:94:5c:3c:c5:aa:fb:20:09:f7:d1:05:a5:2a:
                    63:63:c7:6b:fe:71:bd:88:62:05:c8:00:66:e1:ed:
                    d2:a3:63:5f:87:d8:b9:8f:9d:1e:c0:30:c2:05:58:
                    98:d3:09:f0:b1:9a:e1:5e:83:e4:b1:cb:17:03:02:
                    17:23:1a:f4:19:f6:02:34:cb:c0:5a:24:eb:47:83:
                    6b:64:72:e1:aa:6a:54:53:96:77:f7:57:ae:ff:ec:
                    b5:03:10:71:16:91:74:8e:5f:0e:62:8c:b3:95:d1:
                    62:84:b0:f2:8c:7c:de:21:76:da:a4:b8:7a:2d:73:
                    7f:1d:54:95:40:92:2c:f5:25:28:e5:69:f1:bf:25:
                    c8:6c:66:1d:c7:04:d2:00:ad:4f:b3:a4:d3:93:15:
                    9a:e9:87:a8:9f:a8:53:09:dc:fd:1b:41:fd:80:e8:
                    50:27:28:21:72:a0:53:55:48:13:58:31:25:a4:24:
                    ee:3e:4c:ce:5c:8e:07:f8:c8:b3:8e:01:a0:e4:36:
                    1f:5f:de:ce:f5:1c:89:cf:19:89:5c:f4:59:33:6e:
                    df:4a:41:31:dc:e5:bf:7f:99:b6:51:59:fd:ca:aa:
                    fd:99:f3:ac:6a:7e:ea:7e:16:cc:3a:1d:9b:58:a4:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2C:A5:FA:F4:62:D9:B8:AF:52:6E:C9:AF:E2:CC:69:71:71:88:23
            X509v3 Authority Key Identifier:
                keyid:5F:2D:E0:A8:CE:4D:0F:84:0F:60:5A:F2:90:8B:86:F8:36:74:BE:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/5F2DE0A8CE4D0F840F605AF2908B86F83674BEC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2DE0A8CE4D0F840F605AF2908B86F83674BEC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/3230302e362e3133362e302f32312d3332203d3e20323633323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:0a:92:60:b0:f9:55:64:15:bf:75:a3:d4:fe:0a:d3:cb:ce:
         77:18:21:8e:db:f6:e9:e6:b1:2c:2e:1f:b5:6c:20:eb:86:fc:
         77:04:53:b2:04:1a:bd:b4:8a:53:f6:ac:87:ae:e1:a1:1e:bd:
         8b:0b:68:48:81:8e:a0:a9:50:45:2a:73:9c:f1:33:84:84:09:
         fc:9f:14:19:e4:1f:20:63:d3:60:7e:15:5a:62:88:6b:f4:69:
         90:91:e9:92:8f:14:d3:8d:c1:ca:27:ae:61:6c:53:ef:ce:da:
         92:e0:40:a7:a7:7e:88:f4:2c:ef:3c:52:06:ba:58:f9:6d:13:
         9f:21:46:07:ad:cf:a0:91:a7:1a:f3:e9:ff:84:20:fe:77:26:
         73:0a:04:83:a7:25:e7:f4:b5:35:0b:9d:bc:37:9e:fc:56:d1:
         0e:b0:89:be:62:e4:27:3e:3c:98:4d:3e:b9:4d:6d:bb:dd:48:
         82:93:60:ae:ca:0b:c4:25:1e:c6:ef:a0:45:54:bb:07:14:d4:
         ef:b3:7f:fb:fb:c4:21:6f:5d:cc:78:a7:8a:14:e7:66:24:d4:
         94:04:b4:54:95:9e:51:6b:72:cc:f7:4d:5c:a2:ca:13:19:ae:
         36:81:f3:36:24:88:37:64:6f:92:28:21:d4:fb:8c:ea:2c:d9:
         1b:31:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:35 2025 by rpki-client