This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e39392e302f32342d3234203d3e203134363138.roa
File:                     3230302e3133302e39392e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          lCwuknqf6otaIs4IEWOwaHe+chfpPgN8OAAoeeY6pUE=
Subject key identifier:   C4:61:02:22:20:02:BD:04:FC:D1:5E:57:0E:9D:C5:41:CC:EF:A7:EE
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       7D62DFB8A6ECC5B79AB7CEBD1D1F371037BE87DE
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e39392e302f32342d3234203d3e203134363138.roa
Signing time:             Thu 06 Nov 2025 12:39:59 +0000
ROA not before:           Thu 06 Nov 2025 12:34:59 +0000
ROA not after:            Thu 05 Nov 2026 12:39:59 +0000
asID:                     14618
IP address blocks:        200.130.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:62:df:b8:a6:ec:c5:b7:9a:b7:ce:bd:1d:1f:37:10:37:be:87:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Nov  6 12:34:59 2025 GMT
            Not After : Nov  5 12:39:59 2026 GMT
        Subject: CN=C46102222002BD04FCD15E570E9DC541CCEFA7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:e9:fe:92:3c:cc:09:ec:7c:c4:bc:a9:30:
                    e9:2d:98:55:5b:f4:97:a9:28:39:53:fb:bf:6b:44:
                    54:4e:14:62:06:e9:d1:35:11:54:02:1b:63:4a:da:
                    90:b0:66:17:d2:c4:32:3b:02:e2:30:7a:9c:b4:b8:
                    2c:02:3f:19:4a:15:c9:0e:b3:82:c1:29:cb:f7:e6:
                    64:cc:b5:e6:3f:ff:4f:a8:0c:8b:64:00:79:64:8e:
                    1b:c5:06:54:1e:4a:12:2c:3b:ba:18:17:52:ec:ff:
                    f6:e9:4d:bd:c7:83:5c:b9:99:10:80:da:d1:72:3f:
                    c2:67:1c:89:4e:4a:c0:d9:9a:3d:91:83:c0:7c:71:
                    bb:ca:e8:24:a2:a0:97:c7:b8:0a:0b:2c:53:29:d8:
                    fd:6e:e6:39:45:0c:b2:6e:63:d4:d7:95:9e:85:83:
                    ca:40:07:63:fc:36:db:68:79:bd:97:9a:87:2d:71:
                    aa:92:d4:3e:ba:66:c9:5c:51:65:6e:cd:26:36:81:
                    d7:ed:43:3f:4a:f2:24:82:45:c8:15:e7:df:7b:a2:
                    cc:b1:47:cf:07:a8:ce:db:9b:46:cb:46:7c:02:bd:
                    de:70:92:57:51:e3:c3:e6:d1:f1:cf:7a:2b:19:72:
                    fd:72:94:44:cc:6f:6d:92:c8:c1:74:91:cb:d3:88:
                    57:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:61:02:22:20:02:BD:04:FC:D1:5E:57:0E:9D:C5:41:CC:EF:A7:EE
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e39392e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:71:95:c9:0b:22:d1:94:a8:2b:c1:55:c0:38:63:ee:fc:e8:
         f0:e3:03:9f:12:3a:39:da:38:6c:37:5e:4a:14:6a:3a:0d:5d:
         d0:6f:f2:f6:6a:f5:6e:a9:13:53:28:35:23:60:c5:ff:98:24:
         0f:43:55:a6:f9:fa:a8:cc:99:53:51:c2:4f:5f:52:02:6c:29:
         41:aa:d5:ea:ab:07:0a:84:dc:ef:c9:85:6d:72:cc:53:da:16:
         69:ef:4c:5b:86:2a:e9:ac:9f:ad:9f:a5:b5:df:b5:b9:26:69:
         22:99:65:a3:2e:d6:da:e2:69:7f:d3:13:82:72:2b:22:53:ee:
         52:76:16:66:e3:9f:aa:39:ca:ce:2c:86:58:de:63:6c:bb:12:
         95:bd:84:16:98:32:f3:fd:44:01:03:19:f5:43:d1:fa:78:d8:
         32:49:98:f8:2a:ac:c7:79:cc:35:54:cd:99:45:07:5d:a2:cc:
         ed:e8:1e:cb:34:f5:4a:ad:c7:5d:8b:e9:e1:ca:5b:a4:d0:fc:
         ab:df:ec:fa:11:55:70:4d:8e:ba:d3:71:e9:e4:97:25:13:cc:
         bf:34:a7:ee:a3:7c:75:bc:46:7f:d3:d9:92:e5:2d:8c:87:52:
         9f:af:e8:9c:c3:08:38:d2:00:0b:bf:08:39:1b:65:79:fa:1e:
         a1:06:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:16 2025 by rpki-client