This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa
File:                     3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa (raw, json)
Hash identifier:          n6M4c2MkwjyXptrieux/S6K1TvfFtz0oc3nV2sEdPMo=
Subject key identifier:   A9:9A:73:C2:17:39:14:29:9F:05:D3:A0:FB:A2:A2:C2:10:DC:2D:32
Certificate issuer:       /CN=BEA0689EB89924F618CAAD670C59C70B4D4DE538
Certificate serial:       5C8F99F45308DD0ADED65B32B553B78B9CFD290B
Authority key identifier: BE:A0:68:9E:B8:99:24:F6:18:CA:AD:67:0C:59:C7:0B:4D:4D:E5:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa
Signing time:             Thu 06 Nov 2025 22:00:31 +0000
ROA not before:           Thu 06 Nov 2025 21:55:31 +0000
ROA not after:            Thu 05 Nov 2026 22:00:31 +0000
asID:                     27688
IP address blocks:        200.159.128.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.crl
                          rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8f:99:f4:53:08:dd:0a:de:d6:5b:32:b5:53:b7:8b:9c:fd:29:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA0689EB89924F618CAAD670C59C70B4D4DE538
        Validity
            Not Before: Nov  6 21:55:31 2025 GMT
            Not After : Nov  5 22:00:31 2026 GMT
        Subject: CN=A99A73C2173914299F05D3A0FBA2A2C210DC2D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:e0:e0:f0:3b:f4:14:a2:2b:b3:00:8c:2f:
                    d6:b2:f2:c9:c8:42:ab:67:d7:29:ba:20:cb:25:7e:
                    ec:79:86:8b:a3:5f:ed:52:31:92:82:3e:7e:57:2a:
                    29:eb:94:04:59:95:02:7a:77:0a:f7:bf:79:0d:fb:
                    e2:1d:55:c6:14:80:ef:e1:15:a0:3b:31:f4:ba:18:
                    c6:8c:f4:13:0d:7e:72:58:4e:a8:1e:3d:f2:f1:dd:
                    96:4d:53:8d:81:61:6e:11:a6:b9:98:a1:8c:85:08:
                    25:21:a8:67:c3:73:c6:cb:84:e3:f6:68:b7:cd:04:
                    25:3a:47:b9:46:51:c0:9c:0b:3c:30:ca:cc:a0:a2:
                    8b:8c:74:fd:0e:db:16:ab:2b:f4:40:65:1f:21:8f:
                    15:32:64:12:e2:f8:53:56:53:50:e3:c0:05:77:71:
                    79:7e:31:1d:89:c8:9f:2a:33:c3:ae:3c:06:09:e4:
                    b2:8f:2d:1c:e4:cd:32:87:c8:75:c1:eb:e7:22:b2:
                    72:fc:f0:0c:ed:eb:50:b1:5e:89:b7:e0:5b:7b:9d:
                    16:09:80:1f:9f:a0:23:11:bd:d0:59:7e:05:cd:6a:
                    22:2f:5c:87:28:0b:84:6c:74:19:37:2a:52:31:a7:
                    90:a3:74:96:66:3d:31:eb:fd:ad:82:7a:14:ff:fa:
                    8e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9A:73:C2:17:39:14:29:9F:05:D3:A0:FB:A2:A2:C2:10:DC:2D:32
            X509v3 Authority Key Identifier:
                keyid:BE:A0:68:9E:B8:99:24:F6:18:CA:AD:67:0C:59:C7:0B:4D:4D:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/3230302e3135392e3132382e302f31392d3332203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:95:a1:42:5c:a4:5d:0b:5b:f5:6b:a5:34:41:12:3a:2e:
         6e:53:fc:7b:ea:bd:9e:10:15:c3:04:73:eb:d0:95:a3:e5:ed:
         31:76:b2:6d:c3:f0:5e:dc:e9:69:ce:a2:de:8c:d9:3e:25:68:
         cc:ec:c4:06:46:85:1d:49:45:fa:eb:a4:c6:47:9f:d2:ca:7b:
         5c:90:57:f4:e3:82:7f:a7:57:96:b9:7b:93:e9:6f:8d:9a:67:
         1b:46:2d:6e:80:68:31:87:c1:3b:8c:27:85:a1:b1:00:f4:74:
         83:b7:eb:bd:e8:e6:5f:d0:33:83:ec:b4:80:05:64:df:c4:22:
         7e:6c:1d:47:e2:97:d2:d4:40:11:93:b9:53:ad:97:e5:e2:76:
         7c:e0:d0:14:28:30:b8:06:5c:15:ed:29:2c:1e:44:22:8b:03:
         43:fb:e5:45:11:88:f7:c2:46:7f:98:1e:1e:c7:14:2e:a9:b7:
         35:9e:e4:e8:fa:8d:0f:76:1f:8f:30:5a:64:cd:bb:49:c6:16:
         2f:90:fd:0d:c9:1f:ce:57:e9:5f:d9:2a:c9:3a:02:ff:5b:87:
         17:bb:d5:fb:05:db:e7:05:e2:ed:4e:ad:7d:29:91:69:4f:39:
         ec:a3:39:aa:63:3f:55:0c:5e:34:82:92:11:45:8e:e3:fa:ce:
         09:75:ac:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:25 2025 by rpki-client