This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa
File:                     3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa (raw, json)
Hash identifier:          jBLip1vbaVOEdwMz5FRM8uDhQKguMwT34WljHdiIAdI=
Subject key identifier:   41:E6:6C:79:4D:51:01:6F:AF:42:09:57:81:79:B7:25:5D:96:58:D8
Certificate issuer:       /CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
Certificate serial:       1ECA1490A62D7AA0C182935F040C9187E97A20E0
Authority key identifier: D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa
Signing time:             Thu 06 Nov 2025 12:51:10 +0000
ROA not before:           Thu 06 Nov 2025 12:46:10 +0000
ROA not after:            Thu 05 Nov 2026 12:51:10 +0000
asID:                     271428
IP address blocks:        200.36.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl
                          rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ca:14:90:a6:2d:7a:a0:c1:82:93:5f:04:0c:91:87:e9:7a:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
        Validity
            Not Before: Nov  6 12:46:10 2025 GMT
            Not After : Nov  5 12:51:10 2026 GMT
        Subject: CN=41E66C794D51016FAF4209578179B7255D9658D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:c4:7d:2d:a2:bb:be:1d:34:5d:aa:bc:5f:
                    4d:5d:75:8f:55:13:c9:71:1a:6d:fb:84:82:b3:d2:
                    eb:de:8e:99:fd:f5:63:03:5b:a7:7a:7c:ff:39:bc:
                    f6:c9:64:d7:23:17:19:b6:a1:ee:ef:7a:0a:7b:b7:
                    be:25:ac:64:fe:8b:a4:b2:5d:ef:53:09:36:10:fa:
                    e8:a6:0c:58:2d:81:37:a9:c3:ff:18:9b:5f:80:05:
                    8c:a6:ea:b2:96:a2:84:5e:97:19:9f:f2:e9:3e:69:
                    87:ca:f2:87:f0:2d:1d:40:26:a9:a7:bd:26:6a:12:
                    c3:78:e6:86:8e:e4:07:78:82:0c:38:bb:3e:0a:6c:
                    63:0f:26:39:b5:95:30:ee:44:e8:e2:c1:7f:46:4b:
                    20:b0:f9:70:32:c1:98:2a:f4:ec:ef:f3:98:2e:d8:
                    d9:d7:11:b0:b6:ec:fd:f0:63:c7:eb:94:1f:44:55:
                    56:8b:96:7f:37:03:10:13:4e:c9:e2:d9:f9:4b:5d:
                    9f:02:20:b5:86:55:0b:8d:6e:19:73:11:a6:6a:52:
                    67:33:ff:7a:a6:2c:fa:5d:e7:9b:25:fd:a4:4e:47:
                    43:58:db:e4:27:5b:c1:63:f8:1a:97:f5:6c:87:39:
                    7f:46:a7:71:63:a7:a7:8b:4c:fd:81:55:84:59:26:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E6:6C:79:4D:51:01:6F:AF:42:09:57:81:79:B7:25:5D:96:58:D8
            X509v3 Authority Key Identifier:
                keyid:D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:ad:4b:f9:94:5c:51:fb:dd:f7:7c:11:f5:e7:17:d0:0a:65:
         c5:3b:73:bc:9c:6d:7b:e7:1b:f6:19:c0:cb:86:c8:3c:0b:4d:
         84:bc:cf:ca:b5:73:ee:11:e2:c3:5c:7e:a7:28:ac:48:2f:f3:
         56:a5:3c:f2:3f:7e:86:71:5e:83:0d:93:90:08:2d:b5:56:30:
         41:a3:69:11:fb:29:f2:87:bf:1b:fe:9c:94:a6:dc:c6:4a:e6:
         f8:1b:73:8f:2c:40:b4:6e:62:28:89:38:66:92:2d:7e:75:c0:
         76:fd:d1:18:6b:53:53:da:00:3d:7f:58:78:3c:01:33:25:56:
         16:56:bd:a0:f1:b3:c4:00:79:39:41:d5:da:b4:d4:68:ed:03:
         b4:b6:6e:4e:80:a8:6b:04:83:2c:00:bb:1b:6c:47:02:ef:9e:
         15:34:f1:db:f4:c1:99:53:e6:39:36:99:c0:0f:0b:9f:de:0a:
         09:00:36:d9:6e:56:0c:6a:9a:29:f0:77:5e:75:7a:d6:84:73:
         d9:68:75:0d:1e:c8:d4:d3:a3:e7:b0:87:cf:8c:bf:a3:ce:d3:
         ee:3f:6a:6c:2f:b4:b0:7c:aa:9d:c7:c4:fc:6c:a6:7c:a5:ea:
         a6:41:06:6b:fe:8d:fd:28:58:39:5e:0e:6c:30:02:0f:e8:db:
         48:23:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:44 2025 by rpki-client