This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
File:                     3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (raw, json)
Hash identifier:          2mmQoiMn1z4jLdbQ5Qbplmwh88lgZre6tufTgSV9K3E=
Subject key identifier:   95:5D:0E:4B:F9:D3:72:58:EA:C3:48:DA:EF:88:C4:55:BE:93:57:72
Certificate issuer:       /CN=EF392B17BF32EC7B7C6276A01935A594E3D1E41F
Certificate serial:       78625982847224EE93FBEF9E43FB481F1D55A299
Authority key identifier: EF:39:2B:17:BF:32:EC:7B:7C:62:76:A0:19:35:A5:94:E3:D1:E4:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
Signing time:             Mon 24 Nov 2025 18:05:23 +0000
ROA not before:           Mon 24 Nov 2025 18:00:23 +0000
ROA not after:            Mon 23 Nov 2026 18:05:23 +0000
asID:                     11432
IP address blocks:        200.194.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:62:59:82:84:72:24:ee:93:fb:ef:9e:43:fb:48:1f:1d:55:a2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF392B17BF32EC7B7C6276A01935A594E3D1E41F
        Validity
            Not Before: Nov 24 18:00:23 2025 GMT
            Not After : Nov 23 18:05:23 2026 GMT
        Subject: CN=955D0E4BF9D37258EAC348DAEF88C455BE935772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:ff:a4:2f:0d:78:0f:9e:3e:18:62:bc:59:
                    1f:2e:46:8b:d6:c1:29:eb:50:db:0f:0f:c2:47:23:
                    ad:02:a7:3f:49:5c:6f:15:6f:86:df:85:ea:15:73:
                    a6:58:80:51:f0:a2:41:f3:03:32:db:33:73:3b:2d:
                    df:d2:19:18:62:6e:c4:24:7f:2a:49:55:e9:35:f5:
                    67:7f:04:e2:b0:7e:ac:83:b4:58:aa:d7:e0:32:ae:
                    90:c3:6d:78:22:b0:1a:ae:5e:70:f3:57:95:e1:26:
                    a5:ae:62:22:7b:54:ca:48:2c:39:ae:ac:7d:6d:52:
                    0e:60:48:0a:27:cf:a7:8d:9c:43:c1:1c:ba:8f:87:
                    4e:64:ab:3e:d7:54:ed:fd:df:88:15:bb:0c:cd:9c:
                    90:4a:52:b9:09:41:e7:3a:22:3e:58:b1:49:41:24:
                    79:ea:5e:6d:f4:a8:95:da:b1:13:c3:60:20:5a:01:
                    bb:26:93:e3:70:9c:a0:ce:04:5e:7c:c0:12:99:39:
                    07:7a:33:80:82:63:bb:a7:0c:b2:fe:d8:52:44:75:
                    1e:ef:2e:88:c6:65:68:3c:77:3d:b0:9d:3d:37:df:
                    a7:8b:c6:30:6b:5d:77:c2:27:af:7c:db:84:05:fe:
                    0f:81:d1:9e:b2:6a:e5:9c:c2:be:0a:05:3e:ae:2d:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5D:0E:4B:F9:D3:72:58:EA:C3:48:DA:EF:88:C4:55:BE:93:57:72
            X509v3 Authority Key Identifier:
                keyid:EF:39:2B:17:BF:32:EC:7B:7C:62:76:A0:19:35:A5:94:E3:D1:E4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF392B17BF32EC7B7C6276A01935A594E3D1E41F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:4f:eb:a9:5a:bd:82:71:3a:fe:89:5e:d1:28:ce:65:65:87:
         37:2f:4b:0b:40:50:61:ed:1c:05:3b:bc:0d:5d:d1:e1:c2:4b:
         bf:d6:e3:33:d4:08:73:f7:25:51:0e:63:7a:d0:b3:5c:b4:a0:
         1e:8f:ee:3b:ef:f6:b7:c1:40:35:9a:80:f9:39:c9:5d:1b:b9:
         1c:ed:5b:50:ea:5a:e1:2c:59:44:e0:d8:b1:a4:b6:5f:e3:69:
         96:3a:9e:b6:a5:cc:f8:c7:81:e9:84:35:82:55:64:36:9a:31:
         90:9b:f2:02:af:ec:49:99:90:6a:dd:74:d8:64:29:23:3c:7a:
         24:88:16:27:ae:55:00:c8:a0:fd:3c:98:cc:c8:65:0b:7c:9d:
         96:20:2b:9e:dd:19:85:87:03:6b:a5:7d:bc:62:36:9f:77:d6:
         1a:c9:45:4d:6c:f3:21:e2:90:c0:b3:0a:80:15:23:10:5a:51:
         e6:81:75:53:f0:9a:4c:04:8e:ee:ae:c4:90:ea:86:f3:85:4b:
         98:cf:82:f4:f1:29:bc:56:50:e9:f3:d9:98:66:2c:ca:f6:43:
         09:00:bc:e0:8b:64:66:76:b6:85:e5:59:11:04:60:e7:db:ed:
         2b:5f:4b:bc:05:50:67:2c:ec:77:48:a2:2f:69:e4:f5:af:a8:
         6d:a2:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:29:20 2025 by rpki-client