This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa
File:                     3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa (raw, json)
Hash identifier:          wiiXUnWo63vzJhmrCkqVL1S+wH4snK2pQri85+frrR4=
Subject key identifier:   14:89:D6:68:CC:F6:A6:73:66:A0:DF:90:45:B8:70:E1:17:B5:6A:6F
Certificate issuer:       /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial:       2230A7D5C857A1FD2487515ABE98DD836463AADB
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa
Signing time:             Fri 19 Dec 2025 18:58:11 +0000
ROA not before:           Fri 19 Dec 2025 18:53:11 +0000
ROA not after:            Fri 18 Dec 2026 18:58:11 +0000
asID:                     271673
IP address blocks:        201.218.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
                          rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 17:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:30:a7:d5:c8:57:a1:fd:24:87:51:5a:be:98:dd:83:64:63:aa:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Validity
            Not Before: Dec 19 18:53:11 2025 GMT
            Not After : Dec 18 18:58:11 2026 GMT
        Subject: CN=1489D668CCF6A67366A0DF9045B870E117B56A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:4e:d4:4d:0a:37:08:44:9d:1b:1c:37:75:
                    22:d2:a3:42:a1:b8:a9:48:a9:02:e7:33:6b:a5:75:
                    4f:f6:01:4e:89:d0:ea:c5:f9:ef:07:e0:5e:cd:09:
                    4d:f4:59:76:d2:f5:4e:ec:2d:6a:0b:58:9b:f5:b4:
                    c9:4d:d5:d6:48:63:6c:99:fb:0c:d9:92:d2:53:ca:
                    b3:59:3d:cb:cf:c2:1a:47:72:4b:ab:ce:41:6c:1e:
                    23:74:5c:26:37:f3:98:b4:6d:7a:e7:67:8d:5d:27:
                    f2:f2:30:5e:fe:1c:29:cf:15:bc:88:6c:26:cf:0a:
                    38:54:2f:6d:72:25:01:e6:18:b3:8c:85:7a:0b:cf:
                    25:d5:3b:d6:a5:98:cd:b8:27:ea:1e:1b:6d:55:44:
                    8d:20:0b:16:32:66:cc:bf:2d:f9:5c:65:22:bb:b2:
                    0d:bc:25:ab:53:90:a4:46:4b:1e:6c:7a:e5:41:68:
                    fa:82:de:3a:63:f9:86:98:c7:dd:35:f7:ae:19:87:
                    ba:8f:6d:45:80:01:28:5a:93:a4:3a:da:d9:09:1e:
                    fe:a2:e4:51:49:fc:ea:d0:6a:03:86:23:88:99:ae:
                    d1:1b:2c:32:5a:14:6b:9f:0e:a6:48:2e:01:b4:bd:
                    67:07:7b:e5:7a:e3:3a:9b:d0:06:08:bf:c9:b1:60:
                    9d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:89:D6:68:CC:F6:A6:73:66:A0:DF:90:45:B8:70:E1:17:B5:6A:6F
            X509v3 Authority Key Identifier:
                keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:93:a6:9a:9d:5b:ec:5c:90:02:f2:4c:91:2d:aa:8d:b6:8f:
         82:77:93:da:c6:95:d9:bb:78:6f:f9:67:d2:b0:27:44:8e:97:
         b5:20:be:a4:a0:2d:49:c3:8e:ff:25:2b:cc:ed:d7:01:b8:46:
         87:57:77:a6:f2:97:81:45:e4:a4:2e:ff:6f:a4:51:68:eb:ae:
         17:28:56:c8:0e:1b:f2:f6:b1:97:e0:6c:d9:77:9f:c2:80:94:
         53:9b:70:56:94:ef:ff:f9:fb:85:66:cd:c7:16:37:f9:93:03:
         22:e3:d1:5f:de:55:d2:14:8e:d1:db:8e:fc:29:ea:23:7c:03:
         6b:8e:a1:b5:a4:b3:28:d5:45:0b:0f:c7:39:d7:df:7c:69:d9:
         08:ff:13:3c:e2:46:5d:29:46:4d:92:2a:ef:24:66:b7:73:c9:
         c2:2d:b5:0f:34:e1:77:64:46:79:85:2c:7c:4a:dc:8f:a7:d1:
         dc:62:89:48:66:85:95:61:94:ee:63:27:86:42:71:c8:83:d4:
         c7:44:6b:c6:33:1b:07:0c:a4:e5:5c:46:4c:3f:aa:dc:a5:d3:
         6b:fc:f3:a7:95:74:2d:5b:4c:ab:05:d1:c4:71:59:1f:fd:36:
         f6:39:23:60:d7:1f:ab:2a:33:be:20:ef:0e:61:b6:cc:ef:eb:
         95:04:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:30:58 2025 by rpki-client