This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/3230302e3130362e3230302e302f32322d3234203d3e20323731323730.roa
File:                     3230302e3130362e3230302e302f32322d3234203d3e20323731323730.roa (raw, json)
Hash identifier:          eWIr30jQ1nJxVhKGnTohlpyzR9UFxBitf2tnqnfe0vE=
Subject key identifier:   71:50:90:C1:31:5F:E6:48:D4:7F:41:56:DF:85:47:23:AC:3D:62:A2
Certificate issuer:       /CN=E093E43EFCF4F6FBF1E53F145BC0B5A34A395773
Certificate serial:       51422E5FC11BE5A9500875C07BABCD929AEAA59F
Authority key identifier: E0:93:E4:3E:FC:F4:F6:FB:F1:E5:3F:14:5B:C0:B5:A3:4A:39:57:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/3230302e3130362e3230302e302f32322d3234203d3e20323731323730.roa
Signing time:             Fri 21 Nov 2025 23:05:34 +0000
ROA not before:           Fri 21 Nov 2025 23:00:34 +0000
ROA not after:            Fri 20 Nov 2026 23:05:34 +0000
asID:                     271270
IP address blocks:        200.106.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.crl
                          rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:42:2e:5f:c1:1b:e5:a9:50:08:75:c0:7b:ab:cd:92:9a:ea:a5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E093E43EFCF4F6FBF1E53F145BC0B5A34A395773
        Validity
            Not Before: Nov 21 23:00:34 2025 GMT
            Not After : Nov 20 23:05:34 2026 GMT
        Subject: CN=715090C1315FE648D47F4156DF854723AC3D62A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:1b:ad:dc:55:6a:40:ea:39:d2:d9:e4:98:
                    c0:c0:91:4c:d4:3b:cc:e4:db:d1:95:71:99:e1:fc:
                    b6:8a:51:e2:54:8d:25:6e:7c:98:73:19:ce:d9:95:
                    89:85:8e:58:79:b7:bb:64:a9:c4:17:72:26:21:62:
                    5d:4d:11:df:e2:4f:c8:70:a6:65:b3:2d:d5:6d:03:
                    34:39:99:01:2f:f5:f5:c8:b8:ea:d2:aa:0e:48:79:
                    60:4c:86:12:b6:85:61:fd:05:45:a9:72:f9:88:5e:
                    59:1f:6f:c2:cb:07:00:e2:ba:2a:79:1c:9c:2b:c0:
                    8a:da:c9:f0:47:fe:e2:0b:30:d4:48:ca:42:a5:19:
                    c3:12:39:29:b7:cb:ba:27:8c:92:5e:da:e0:af:44:
                    5c:d1:49:c6:2d:8f:09:5a:7b:6b:4a:51:e6:89:1f:
                    27:0f:b1:79:aa:fd:22:8f:f7:7d:53:18:78:e1:59:
                    0b:33:97:b4:6b:84:2f:6f:44:66:22:39:06:68:65:
                    f8:a0:2a:1b:aa:13:85:d7:3d:69:9a:a0:df:93:0a:
                    91:2f:b1:65:a6:50:70:e1:12:1e:a9:76:a3:90:8d:
                    0f:b6:bc:dd:86:26:48:7a:48:63:d2:ca:4a:fd:8c:
                    6c:2f:9d:d3:6c:62:43:a1:ac:cf:9d:86:33:da:08:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:50:90:C1:31:5F:E6:48:D4:7F:41:56:DF:85:47:23:AC:3D:62:A2
            X509v3 Authority Key Identifier:
                keyid:E0:93:E4:3E:FC:F4:F6:FB:F1:E5:3F:14:5B:C0:B5:A3:4A:39:57:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/3230302e3130362e3230302e302f32322d3234203d3e20323731323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:3a:75:4e:32:ee:2b:05:72:5e:99:74:1c:2b:7f:f3:e8:
         97:9b:7e:8f:40:62:b8:ed:40:54:23:4f:af:d8:72:63:59:e6:
         79:ca:28:d4:68:aa:1a:2f:51:df:03:cd:f1:a5:f5:3b:be:08:
         96:de:ed:4c:97:c8:5b:93:67:e6:b6:21:bc:58:f1:2f:6c:9e:
         fe:e1:f5:d6:35:8e:2b:6e:0b:26:45:d0:7f:3c:b8:7a:58:69:
         23:2d:51:dd:04:5f:9e:44:7b:f6:0e:bf:9f:5e:b8:f7:ca:64:
         d0:0c:90:11:be:90:41:92:c8:74:a0:f1:33:44:b9:99:bc:0b:
         97:5e:4f:d7:e3:be:61:7c:b8:43:b1:f3:82:1b:7d:41:50:17:
         dd:a7:85:e1:8c:f0:94:94:1d:ed:85:89:20:5c:aa:0e:f2:8d:
         92:18:4e:f7:1f:5c:81:f4:38:d0:eb:2f:5f:15:b5:6c:13:f3:
         1a:44:5f:15:82:04:d8:a9:84:14:1b:d5:c5:41:f0:c2:8d:2e:
         9e:44:c3:4e:67:81:c8:82:2a:1b:15:31:3e:e5:85:70:e2:3d:
         ec:16:90:68:ec:d8:24:b1:16:0f:f7:b5:13:b4:f0:a8:e4:c0:
         ad:54:20:35:a6:62:06:49:23:72:e3:4e:e9:01:e9:67:e7:25:
         b8:93:b6:36
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUUIuX8Eb5alQCHXAe6vNkprqpZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5M0U0M0VGQ0Y0RjZGQkYxRTUzRjE0NUJDMEI1QTM0
QTM5NTc3MzAeFw0yNTExMjEyMzAwMzRaFw0yNjExMjAyMzA1MzRaMDMxMTAvBgNV
BAMTKDcxNTA5MEMxMzE1RkU2NDhENDdGNDE1NkRGODU0NzIzQUMzRDYyQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwORut3FVqQOo50tnkmMDAkUzU
O8zk29GVcZnh/LaKUeJUjSVufJhzGc7ZlYmFjlh5t7tkqcQXciYhYl1NEd/iT8hw
pmWzLdVtAzQ5mQEv9fXIuOrSqg5IeWBMhhK2hWH9BUWpcvmIXlkfb8LLBwDiuip5
HJwrwIrayfBH/uILMNRIykKlGcMSOSm3y7onjJJe2uCvRFzRScYtjwlae2tKUeaJ
HycPsXmq/SKP931TGHjhWQszl7RrhC9vRGYiOQZoZfigKhuqE4XXPWmaoN+TCpEv
sWWmUHDhEh6pdqOQjQ+2vN2GJkh6SGPSykr9jGwvndNsYkOhrM+dhjPaCMAFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcVCQwTFf5kjUf0FW34VHI6w9YqIwHwYDVR0j
BBgwFoAU4JPkPvz09vvx5T8UW8C1o0o5V3MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENackdaZzRXZHNXZkNvTkVNWHd4UWlpbWFjbk5LV3lLaWlvSDk1eDRm
eEQvMC9FMDkzRTQzRUZDRjRGNkZCRjFFNTNGMTQ1QkMwQjVBMzRBMzk1NzczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwOTNFNDNFRkNGNEY2RkJG
MUU1M0YxNDVCQzBCNUEzNEEzOTU3NzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDWnJHWmc0V2RzV2ZDb05FTVh3eFFpaW1hY25OS1d5S2lpb0g5NXg0ZnhELzAv
MzIzMDMwMmUzMTMwMzYyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTMyMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshqyDANBgkqhkiG9w0BAQsFAAOCAQEAnA86
dU4y7isFcl6ZdBwrf/Pol5t+j0BiuO1AVCNPr9hyY1nmecoo1GiqGi9R3wPN8aX1
O74Ilt7tTJfIW5Nn5rYhvFjxL2ye/uH11jWOK24LJkXQfzy4elhpIy1R3QRfnkR7
9g6/n16498pk0AyQEb6QQZLIdKDxM0S5mbwLl15P1+O+YXy4Q7Hzght9QVAX3aeF
4YzwlJQd7YWJIFyqDvKNkhhO9x9cgfQ40OsvXxW1bBPzGkRfFYIE2KmEFBvVxUHw
wo0unkTDTmeByIIqGxUxPuWFcOI97BaQaOzYJLEWD/e1E7TwqOTArVQgNaZiBkkj
cuNO6QHpZ+cluJO2Ng==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:16:24 2025 by rpki-client