This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3230312e372e3136342e302f32342d3234203d3e20323633323930.roa
File:                     3230312e372e3136342e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier:          8Ni92Q9fd+3yUjQzfUYk4QoaSUToi7qb83j0tTGw0Po=
Subject key identifier:   17:88:3F:2D:80:35:8E:89:55:13:6D:C9:C0:66:37:4D:76:62:00:AE
Certificate issuer:       /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial:       2211AD023D452324E6384992FF866B34837EA176
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3230312e372e3136342e302f32342d3234203d3e20323633323930.roa
Signing time:             Mon 17 Nov 2025 17:12:55 +0000
ROA not before:           Mon 17 Nov 2025 17:07:55 +0000
ROA not after:            Mon 16 Nov 2026 17:12:55 +0000
asID:                     263290
IP address blocks:        201.7.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:11:ad:02:3d:45:23:24:e6:38:49:92:ff:86:6b:34:83:7e:a1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
        Validity
            Not Before: Nov 17 17:07:55 2025 GMT
            Not After : Nov 16 17:12:55 2026 GMT
        Subject: CN=17883F2D80358E8955136DC9C066374D766200AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6a:81:88:22:f1:82:67:00:50:e1:06:7b:a6:
                    54:3b:c1:65:9b:a1:01:9e:69:52:6b:10:26:75:f9:
                    66:d1:a0:18:61:9d:39:9c:57:f4:2b:92:60:91:0d:
                    fd:f5:c0:c2:30:50:c8:2f:d4:05:7c:5f:1a:96:36:
                    d4:55:c4:05:03:6b:d8:02:a0:c6:4d:ba:8d:1a:32:
                    bf:2b:c4:90:7b:60:c5:5b:c8:1f:e4:fa:dd:76:0d:
                    91:41:38:00:98:81:f6:73:eb:7a:8f:92:c6:2e:f9:
                    b3:f2:2f:ff:91:87:cf:3f:62:62:bf:51:0d:35:d4:
                    4c:be:8b:2a:7c:60:1d:05:31:b9:43:e5:cc:6d:12:
                    08:13:e3:0c:ad:0f:23:95:cf:3a:98:79:f7:ba:a3:
                    89:ff:d7:97:ad:e3:3d:e5:56:b4:4a:be:63:07:71:
                    4e:e8:5b:2e:3a:75:a4:59:be:c2:ee:c2:5c:4d:8f:
                    8e:27:d1:a0:77:2b:67:d4:ae:ed:9e:ae:9c:7e:e4:
                    53:42:a2:d7:4c:4b:4d:26:75:fc:87:96:b4:4f:08:
                    83:c2:9f:b6:e2:03:f1:b7:0d:ea:17:8d:ef:8d:41:
                    20:2e:80:73:56:29:35:5e:c3:1e:4d:fc:1f:c9:9b:
                    60:6a:5b:25:63:99:67:8f:fd:a5:0b:06:50:32:f9:
                    63:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:88:3F:2D:80:35:8E:89:55:13:6D:C9:C0:66:37:4D:76:62:00:AE
            X509v3 Authority Key Identifier:
                keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3230312e372e3136342e302f32342d3234203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:44:c6:9e:b9:40:22:c4:15:f0:42:5c:60:26:c9:5b:5b:
         dd:35:3c:e1:3d:98:97:cd:b4:ea:f7:32:8e:a1:00:6d:e0:33:
         b8:d0:79:1d:10:2e:77:37:bd:0c:93:87:fe:b8:51:ec:ea:95:
         3a:60:48:e0:50:8b:8f:ff:22:43:96:22:37:22:a9:f8:a8:c8:
         8f:59:3a:fb:da:76:2b:77:6c:4a:47:84:17:ce:23:03:18:5e:
         6a:97:92:2b:bb:66:55:cd:b3:9e:fd:4a:94:57:a0:9a:86:ff:
         c5:76:be:8f:88:10:c6:b7:8b:36:e9:ee:cf:3b:fd:54:41:46:
         6f:de:35:9b:11:05:7b:a9:f1:91:54:c1:58:2b:e1:da:c6:f5:
         f5:e2:2d:8e:eb:80:96:a0:c2:20:cc:5d:15:a6:68:19:a6:5b:
         1b:50:bd:a7:f1:58:7d:34:d4:4d:ba:5b:ce:92:6e:30:ca:bd:
         b7:6c:0a:e4:8c:47:00:4f:5b:fa:8a:4c:08:cd:df:67:ab:41:
         ad:9c:7c:ba:31:4e:96:77:dc:e7:86:48:bc:02:56:b5:c5:cd:
         95:5f:d1:6e:4d:7f:9e:2c:72:b0:c2:e7:91:ac:9d:d0:cc:7d:
         f7:fe:ac:68:61:28:3a:ce:12:ef:9a:12:de:48:ee:49:e7:83:
         19:3e:8f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:02 2025 by rpki-client