This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa
File:                     3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa (raw, json)
Hash identifier:          seOef9NW89j1IL2/t8Ibsw6pheCDikQdCsR06ZCcFxc=
Subject key identifier:   D6:A3:4B:87:EA:A0:0B:C6:52:28:E6:11:3B:DE:6F:07:64:CB:3F:5E
Certificate issuer:       /CN=33B5534F9EC51CE84AFB461BED294ABBE0B81544
Certificate serial:       3409A40F4B8296DF8D8E729A618A3FB7C9AECAEE
Authority key identifier: 33:B5:53:4F:9E:C5:1C:E8:4A:FB:46:1B:ED:29:4A:BB:E0:B8:15:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa
Signing time:             Mon 22 Dec 2025 13:29:42 +0000
ROA not before:           Mon 22 Dec 2025 13:24:42 +0000
ROA not after:            Mon 21 Dec 2026 13:29:42 +0000
asID:                     273360
IP address blocks:        201.54.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.crl
                          rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:09:a4:0f:4b:82:96:df:8d:8e:72:9a:61:8a:3f:b7:c9:ae:ca:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33B5534F9EC51CE84AFB461BED294ABBE0B81544
        Validity
            Not Before: Dec 22 13:24:42 2025 GMT
            Not After : Dec 21 13:29:42 2026 GMT
        Subject: CN=D6A34B87EAA00BC65228E6113BDE6F0764CB3F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a7:63:00:85:47:7e:24:2b:fb:56:a3:51:d9:
                    0f:f7:57:22:e4:2b:bd:09:5c:e1:fa:52:60:40:60:
                    bc:e2:c3:dc:e4:fc:ba:a3:a1:ff:38:4e:da:61:cf:
                    2c:5b:e9:e7:4e:1d:1d:09:a1:49:7a:65:6d:7d:5c:
                    8a:53:c4:6d:41:7d:8f:db:1d:60:38:ce:44:92:92:
                    6c:7e:f2:70:b9:70:43:26:1b:85:28:36:d1:4c:04:
                    fa:5e:50:90:5f:77:e5:01:37:da:33:cf:c1:14:99:
                    f5:67:42:29:0e:1a:56:de:dc:7a:a8:93:4d:e9:2f:
                    27:2b:97:ab:9b:72:f1:83:9b:cf:10:c9:3e:c4:92:
                    e5:74:9b:e6:ad:cd:cc:a0:77:ae:64:fe:5a:f1:6a:
                    78:98:66:ff:41:a7:fc:05:c7:3b:64:52:23:a5:da:
                    1f:71:f4:c2:5b:60:b6:17:68:c7:4a:af:90:c0:ff:
                    dc:0b:7a:4c:a8:0d:6c:e5:bd:ef:df:33:ea:6e:61:
                    de:43:79:a2:5f:54:b6:14:78:a8:3f:aa:30:7e:a0:
                    2f:07:75:94:b1:3b:25:1d:de:60:59:2f:3c:0a:54:
                    bc:59:18:15:e8:8f:77:a6:96:83:56:3a:32:2f:85:
                    7a:1d:f6:a2:94:00:ef:4a:6c:7f:62:48:53:42:00:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A3:4B:87:EA:A0:0B:C6:52:28:E6:11:3B:DE:6F:07:64:CB:3F:5E
            X509v3 Authority Key Identifier:
                keyid:33:B5:53:4F:9E:C5:1C:E8:4A:FB:46:1B:ED:29:4A:BB:E0:B8:15:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:46:35:2c:13:15:24:45:bc:9f:cd:14:9c:c7:08:b8:d2:9c:
         22:71:70:6f:29:da:9d:68:d3:9c:7f:20:02:ad:76:c1:28:31:
         1b:33:69:ed:d4:e5:da:2d:4c:8b:8b:d6:af:29:af:ca:bf:ca:
         d7:e9:d2:80:1a:13:86:dd:be:46:e9:2c:85:e8:a3:1d:b2:b8:
         0b:1e:9c:df:bb:36:6c:72:a1:19:ed:ef:6d:79:4c:fa:05:73:
         80:a2:ec:30:5d:0c:2b:78:09:65:aa:62:a2:6c:67:e4:1b:8d:
         07:52:b4:d4:a1:b0:e7:e1:75:42:e1:8a:5c:08:70:66:bc:96:
         c0:5f:3b:fb:22:34:69:ac:54:d7:01:4e:09:c7:f5:5f:30:f2:
         3a:e7:9f:7e:4a:8a:ff:68:08:e4:cb:1b:94:c2:28:72:b6:ae:
         6e:37:85:b1:fa:ab:a5:a2:31:ff:97:34:64:65:87:64:38:f1:
         53:f8:d0:08:d9:81:1a:1e:37:8d:03:af:3c:8d:1a:e2:ac:bc:
         0a:03:56:e6:43:77:c0:47:aa:eb:b0:9c:45:94:e8:e6:73:10:
         9b:7d:70:5d:87:0d:cb:05:92:f4:97:27:4a:6d:15:38:8f:a8:
         b2:b1:0b:98:0d:d9:3b:cb:76:51:25:4b:8b:25:b0:a0:10:a1:
         f8:86:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 18:45:07 2025 by rpki-client