This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/3230302e392e3132342e302f32322d3234203d3e203631393239.roa
File:                     3230302e392e3132342e302f32322d3234203d3e203631393239.roa (raw, json)
Hash identifier:          4bcn+5k2AYiO9wK+lzZtFcjSfEB/C8pDbhQRikO7N1c=
Subject key identifier:   9E:3B:EE:13:D0:83:91:82:CE:16:4F:52:21:F3:4D:40:2D:C7:3D:F0
Certificate issuer:       /CN=A39AB07F573D04E5845A8A1E723EAE291A21091A
Certificate serial:       5D7E5D7DAB9A1F7FB97A27915E6164EA7B789C27
Authority key identifier: A3:9A:B0:7F:57:3D:04:E5:84:5A:8A:1E:72:3E:AE:29:1A:21:09:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AB07F573D04E5845A8A1E723EAE291A21091A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/3230302e392e3132342e302f32322d3234203d3e203631393239.roa
Signing time:             Thu 18 Dec 2025 22:02:34 +0000
ROA not before:           Thu 18 Dec 2025 21:57:34 +0000
ROA not after:            Thu 17 Dec 2026 22:02:34 +0000
asID:                     61929
IP address blocks:        200.9.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.crl
                          rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AB07F573D04E5845A8A1E723EAE291A21091A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7e:5d:7d:ab:9a:1f:7f:b9:7a:27:91:5e:61:64:ea:7b:78:9c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A39AB07F573D04E5845A8A1E723EAE291A21091A
        Validity
            Not Before: Dec 18 21:57:34 2025 GMT
            Not After : Dec 17 22:02:34 2026 GMT
        Subject: CN=9E3BEE13D0839182CE164F5221F34D402DC73DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:ed:6d:f6:ab:0b:17:bc:36:6e:a9:70:05:
                    ba:09:fd:84:d2:09:d6:90:5c:14:1e:5c:e9:17:ac:
                    55:ba:5d:90:04:87:33:a0:3c:71:8f:6f:99:12:3d:
                    98:97:40:6c:43:4f:49:af:61:a2:3b:ce:ab:d3:79:
                    c1:7c:15:ed:f8:bb:0d:c1:3f:ee:9f:fd:8e:c5:ca:
                    fd:d1:b8:25:38:4d:cd:68:58:85:9e:5d:3f:ca:13:
                    43:a2:f3:ff:29:cc:e5:79:67:a9:94:b4:ff:6b:98:
                    16:22:3f:77:dc:cf:9c:ad:dd:d7:d2:17:fd:ee:fb:
                    51:76:e2:0b:12:bb:b1:e2:b3:7f:a5:ab:7d:d9:1c:
                    56:5e:b4:fb:b2:54:e6:29:68:bf:cc:59:90:5a:11:
                    8a:14:13:c2:29:74:43:4a:4a:98:dd:91:53:d8:0a:
                    18:bf:00:ba:17:86:cc:26:bf:ff:cd:d6:c7:df:cc:
                    b5:89:1d:ae:fa:06:c1:3e:4b:18:6a:35:b7:6d:83:
                    06:e0:89:3d:91:32:99:8e:0a:7c:7d:23:77:89:a2:
                    4e:08:48:e4:c4:9f:a9:4b:66:bb:e5:ad:ee:81:9f:
                    ac:e7:b7:b6:34:55:b9:39:37:bb:d0:94:ce:fa:f8:
                    da:d6:9b:36:bf:16:78:5a:95:fc:de:d7:30:77:b5:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3B:EE:13:D0:83:91:82:CE:16:4F:52:21:F3:4D:40:2D:C7:3D:F0
            X509v3 Authority Key Identifier:
                keyid:A3:9A:B0:7F:57:3D:04:E5:84:5A:8A:1E:72:3E:AE:29:1A:21:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AB07F573D04E5845A8A1E723EAE291A21091A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/3230302e392e3132342e302f32322d3234203d3e203631393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:97:2b:ca:27:d0:e2:3d:09:26:be:74:c1:86:e6:66:70:e2:
         4f:e4:28:4c:21:cb:30:07:37:9b:eb:e0:63:fc:84:53:8b:c7:
         f7:36:e5:dd:1d:71:dc:37:39:85:d9:a2:09:57:ec:be:20:52:
         bf:d5:52:d1:a5:f7:0b:f8:ba:1b:94:4f:ad:76:f5:a3:5d:a2:
         bb:c8:e9:b2:e9:59:b6:8e:c5:c5:c8:fd:bc:de:09:87:c6:74:
         ac:dc:15:3e:a3:51:c5:27:ee:1a:b9:66:4a:fb:5d:8b:a7:3d:
         3f:2a:8c:36:8f:08:96:f3:6e:13:2d:26:c4:41:88:11:76:e8:
         dd:77:4c:2b:db:1e:7e:95:9e:40:df:ba:b7:94:57:f4:7e:87:
         d8:77:94:ab:bf:e4:93:59:b4:68:ad:cd:69:98:d9:6e:a5:7a:
         5d:a9:52:5c:a5:34:c9:e3:48:05:a4:9f:12:13:05:09:a8:cd:
         a7:6d:25:04:ea:67:7d:1d:ad:af:16:ee:55:29:0b:b8:53:bc:
         ff:24:69:98:9a:82:cf:39:f6:5d:1a:10:fb:26:b8:59:c3:83:
         cc:dd:71:b5:7e:68:07:e3:8c:48:6a:f6:12:76:c9:ca:6f:c5:
         b0:84:3e:d9:a1:ec:16:ff:9d:46:27:90:31:ea:4b:a5:e7:c4:
         34:ba:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:36:31 2025 by rpki-client