This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134302e302f32332d3332203d3e2030.roa
File:                     3230302e3231392e3134302e302f32332d3332203d3e2030.roa (raw, json)
Hash identifier:          9FrjQFP8qN26k4ecS4R/bftamJVQenvx0DppLSqDJk0=
Subject key identifier:   B2:95:17:15:0C:5B:FB:0A:B6:26:E0:8A:C5:9A:32:B9:AB:9F:56:40
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       72A8EBE9BE306C35CE5B5AE220FCC20D00CAF700
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134302e302f32332d3332203d3e2030.roa
Signing time:             Tue 09 Dec 2025 20:01:53 +0000
ROA not before:           Tue 09 Dec 2025 19:56:53 +0000
ROA not after:            Tue 08 Dec 2026 20:01:53 +0000
asID:                     0
IP address blocks:        200.219.140.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a8:eb:e9:be:30:6c:35:ce:5b:5a:e2:20:fc:c2:0d:00:ca:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:53 2025 GMT
            Not After : Dec  8 20:01:53 2026 GMT
        Subject: CN=B29517150C5BFB0AB626E08AC59A32B9AB9F5640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:31:28:a1:e3:d8:30:df:89:04:2a:01:56:
                    c5:f7:9f:a1:b2:be:cd:c3:72:99:fb:62:70:f6:cb:
                    76:3f:96:6c:f8:c1:5e:e4:b0:3d:fa:8a:da:2e:ac:
                    dc:26:41:99:7b:d9:d6:fa:67:4a:f6:04:b3:56:79:
                    5d:80:c2:b1:96:8a:a7:79:27:e9:d9:8c:08:60:86:
                    9a:1a:ff:f2:7c:8b:c8:be:e3:8d:00:bf:b6:8a:fd:
                    66:06:45:ff:95:96:c3:d8:a0:4c:dd:68:06:a9:08:
                    f4:ef:8a:6c:aa:dd:c8:9d:d3:b8:79:d0:96:00:5f:
                    a2:66:c6:67:4a:23:4b:a6:16:9a:17:ba:da:94:fc:
                    ab:b6:3b:41:ba:1e:30:9d:eb:fb:b3:7a:56:69:80:
                    8d:d6:ab:1e:35:37:05:0e:16:08:7a:19:06:6a:1c:
                    77:f2:61:3a:93:8d:0c:f1:c5:d0:aa:48:1c:f6:03:
                    41:44:fe:10:77:54:de:c8:56:5d:c7:17:16:aa:45:
                    26:d2:b9:3d:eb:1c:16:9b:30:26:3f:32:bc:54:c9:
                    3a:6f:c4:72:ab:74:20:7e:f6:b3:bc:01:21:a6:ca:
                    55:b0:8e:c4:29:9a:93:43:68:66:69:75:8a:18:7f:
                    04:06:73:65:0e:57:b2:52:3c:53:34:30:03:64:1c:
                    70:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:95:17:15:0C:5B:FB:0A:B6:26:E0:8A:C5:9A:32:B9:AB:9F:56:40
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134302e302f32332d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:59:15:e8:f9:8b:33:fd:4e:0c:35:68:34:01:2a:44:45:6e:
         af:c0:6d:00:fb:1f:8e:3e:06:d7:86:dd:55:56:72:3b:3e:7d:
         07:73:4e:4f:ba:8a:8e:b4:56:fe:5b:96:0d:0b:b7:20:90:2a:
         d8:6a:8f:bf:6d:f6:2c:78:83:5b:7a:e5:de:7b:23:17:62:7a:
         6e:5f:25:74:ba:0e:3c:5e:fb:ad:40:67:90:cc:62:a6:94:58:
         29:b0:91:b1:c7:8b:75:3a:68:a7:63:ed:5e:19:6f:09:ba:3b:
         15:2e:62:47:db:9d:69:46:dc:6a:ec:68:2c:45:85:55:28:8b:
         bb:b5:e9:8f:20:b9:e3:c6:6d:6b:43:0c:82:ec:06:89:65:1e:
         0f:2a:0b:db:ba:51:b6:96:33:6b:17:06:da:21:d8:68:76:c1:
         91:aa:da:5b:de:d8:26:6a:52:6a:0f:54:1b:bd:5f:57:5b:3d:
         14:db:b8:3a:42:bc:43:73:72:21:3f:63:b4:6f:5d:e6:c3:13:
         d4:86:63:a7:d6:84:6f:1a:19:ae:42:5d:ff:aa:87:82:1f:47:
         f6:8b:35:0f:f5:61:92:24:49:e3:8e:64:56:ab:d7:ec:12:40:
         59:fc:eb:d3:33:e3:54:eb:b0:bd:ee:66:77:fb:e7:ce:23:5a:
         0a:9f:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:40:31 2025 by rpki-client