This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e39392e302f32342d3234203d3e203136353039.roa
File:                     3230302e3133302e39392e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          vs10L78V7YTZ5OGU7zhYOWgNBeQLRgPjYXvId7DHBsM=
Subject key identifier:   98:72:DF:62:1F:E7:40:5D:03:AD:74:EE:DF:4F:D3:34:1A:CA:19:38
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       5D7935ACC88673860979A7568EAC3EAD7C8940AA
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e39392e302f32342d3234203d3e203136353039.roa
Signing time:             Thu 06 Nov 2025 12:39:59 +0000
ROA not before:           Thu 06 Nov 2025 12:34:59 +0000
ROA not after:            Thu 05 Nov 2026 12:39:59 +0000
asID:                     16509
IP address blocks:        200.130.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:79:35:ac:c8:86:73:86:09:79:a7:56:8e:ac:3e:ad:7c:89:40:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Nov  6 12:34:59 2025 GMT
            Not After : Nov  5 12:39:59 2026 GMT
        Subject: CN=9872DF621FE7405D03AD74EEDF4FD3341ACA1938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:19:38:b5:cd:c8:1a:13:fd:7c:53:10:7f:
                    ff:0b:e2:ac:9e:ba:ab:80:21:85:0d:74:6e:82:dd:
                    f1:71:ce:2a:64:2e:f7:32:be:48:06:6b:0c:b6:6d:
                    e7:42:21:80:d0:2f:39:58:97:b3:fb:99:87:34:ab:
                    98:b4:d8:27:cd:31:d4:80:a7:c3:0a:14:58:59:34:
                    af:e1:cc:4c:3c:bb:e5:00:2a:c7:ec:23:a2:57:f3:
                    c3:68:08:84:55:67:3b:e7:1f:79:4f:67:ff:3c:56:
                    60:3b:92:15:b6:cd:ac:3b:4f:96:c9:d8:3a:0f:8f:
                    59:af:33:a5:87:ae:05:9a:17:b3:c4:ee:77:7d:09:
                    35:00:55:07:da:a0:1d:b9:ac:91:8a:3d:10:84:d8:
                    e6:61:02:d4:bc:21:9b:1d:e2:e2:5b:51:4f:d5:31:
                    54:67:71:47:a8:ed:b2:ed:5f:95:b1:05:4e:a3:45:
                    4a:b7:fe:60:15:a8:89:61:75:5f:4d:3a:cb:5a:16:
                    80:86:da:44:56:65:6c:71:4e:12:f3:7f:56:cc:93:
                    f8:97:66:71:18:ae:2d:a0:91:c2:01:2b:c5:83:14:
                    dc:d8:e5:9d:b9:43:bc:01:da:69:42:cb:8b:53:d5:
                    f3:a9:75:e7:c6:27:5f:fc:65:d9:35:a0:14:da:6c:
                    a7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:72:DF:62:1F:E7:40:5D:03:AD:74:EE:DF:4F:D3:34:1A:CA:19:38
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e39392e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d7:21:d2:b2:21:75:26:0f:19:f3:b4:85:a3:11:2d:21:97:
         78:34:2c:94:24:3f:ff:c3:d0:49:59:5c:aa:8e:f6:21:ee:d5:
         6b:f2:bb:f5:61:cd:8e:35:bb:3c:24:19:04:6a:69:75:a5:7b:
         e8:38:e7:b4:b0:59:fc:ea:c1:b5:13:31:d2:90:1d:cf:40:a2:
         7f:79:55:4f:0d:46:a8:6b:4f:18:53:5b:f9:90:b2:aa:2c:8e:
         f6:7a:a8:5f:c2:4a:5e:33:57:f4:73:d4:05:ea:5e:4f:bf:9c:
         1f:a4:dd:c3:4a:61:f7:a0:18:66:f1:e8:b3:ff:0c:c7:d2:8c:
         dd:83:23:48:3c:35:f4:22:fd:7c:aa:3c:53:57:33:13:2d:17:
         38:82:b7:6d:32:c4:ed:74:d1:32:2d:cd:4e:3b:6b:0e:d9:a6:
         f7:66:6c:00:80:b5:50:bb:24:b8:3d:9f:9a:14:89:24:5a:59:
         e0:0a:1f:23:ca:c8:0a:05:46:72:c2:6f:a2:5c:82:66:e2:26:
         83:22:b5:03:e5:7e:c3:20:0e:cf:47:81:08:e9:f8:2e:34:a7:
         92:50:61:c2:9c:fd:fd:13:c1:5e:6b:af:2f:12:25:6e:81:62:
         b7:88:f7:77:9e:12:54:43:de:a3:b8:7b:e4:b8:f9:cb:5b:11:
         cf:6b:19:3c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXXk1rMiGc4YJeadWjqw+rXyJQKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFNDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVF
OTE5QjVDRjAeFw0yNTExMDYxMjM0NTlaFw0yNjExMDUxMjM5NTlaMDMxMTAvBgNV
BAMTKDk4NzJERjYyMUZFNzQwNUQwM0FENzRFRURGNEZEMzM0MUFDQTE5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzhk4tc3IGhP9fFMQf/8L4qye
uquAIYUNdG6C3fFxzipkLvcyvkgGawy2bedCIYDQLzlYl7P7mYc0q5i02CfNMdSA
p8MKFFhZNK/hzEw8u+UAKsfsI6JX88NoCIRVZzvnH3lPZ/88VmA7khW2zaw7T5bJ
2DoPj1mvM6WHrgWaF7PE7nd9CTUAVQfaoB25rJGKPRCE2OZhAtS8IZsd4uJbUU/V
MVRncUeo7bLtX5WxBU6jRUq3/mAVqIlhdV9NOstaFoCG2kRWZWxxThLzf1bMk/iX
ZnEYri2gkcIBK8WDFNzY5Z25Q7wB2mlCy4tT1fOpdefGJ1/8Zdk1oBTabKcfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmHLfYh/nQF0DrXTu30/TNBrKGTgwHwYDVR0j
BBgwFoAUruRuMssUYkGczLibXEmElekZtc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC9BRUU0NkUzMkNCMTQ2MjQxOUNDQ0I4OUI1QzQ5ODQ5NUU5MTlCNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTQ2RTMyQ0IxNDYyNDE5
Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTMzMzAyZTM5MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2
MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyIJjMA0GCSqGSIb3DQEBCwUAA4IBAQAw1yHSsiF1
Jg8Z87SFoxEtIZd4NCyUJD//w9BJWVyqjvYh7tVr8rv1Yc2ONbs8JBkEaml1pXvo
OOe0sFn86sG1EzHSkB3PQKJ/eVVPDUaoa08YU1v5kLKqLI72eqhfwkpeM1f0c9QF
6l5Pv5wfpN3DSmH3oBhm8eiz/wzH0ozdgyNIPDX0Iv18qjxTVzMTLRc4grdtMsTt
dNEyLc1OO2sO2ab3ZmwAgLVQuyS4PZ+aFIkkWlngCh8jysgKBUZywm+iXIJm4iaD
IrUD5X7DIA7PR4EI6fguNKeSUGHCnP39E8Fea68vEiVugWK3iPd3nhJUQ96juHvk
uPnLWxHPaxk8
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:19 2025 by rpki-client