This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/3230302e3232352e35382e302f32332d3332203d3e20323734373334.roa
File:                     3230302e3232352e35382e302f32332d3332203d3e20323734373334.roa (raw, json)
Hash identifier:          4Edo4O4Ams09ZGqPhoeVPIen3k2IiuZ50nX935bwdls=
Subject key identifier:   B4:4A:20:CA:E8:03:F4:6E:41:CC:C3:EF:1E:1A:8F:47:AF:9E:B4:D7
Certificate issuer:       /CN=006590398F4D26A9E4F3110825291E8032AAF2BB
Certificate serial:       299B571FDC07139256EB6628A496C7713D48769A
Authority key identifier: 00:65:90:39:8F:4D:26:A9:E4:F3:11:08:25:29:1E:80:32:AA:F2:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/3230302e3232352e35382e302f32332d3332203d3e20323734373334.roa
Signing time:             Mon 19 Jan 2026 19:53:00 +0000
ROA not before:           Mon 19 Jan 2026 19:48:00 +0000
ROA not after:            Mon 18 Jan 2027 19:53:00 +0000
asID:                     274734
IP address blocks:        200.225.58.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.crl
                          rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9b:57:1f:dc:07:13:92:56:eb:66:28:a4:96:c7:71:3d:48:76:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006590398F4D26A9E4F3110825291E8032AAF2BB
        Validity
            Not Before: Jan 19 19:48:00 2026 GMT
            Not After : Jan 18 19:53:00 2027 GMT
        Subject: CN=B44A20CAE803F46E41CCC3EF1E1A8F47AF9EB4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:a6:3e:7d:62:a8:fa:b3:1d:40:95:85:06:
                    08:f8:13:84:ab:6f:34:d6:1a:d6:85:43:5b:3b:ea:
                    ad:a8:a6:7a:c9:ef:1a:95:83:f8:25:a6:08:4f:c5:
                    59:1f:28:25:95:74:53:6f:fe:32:dc:db:2b:54:9e:
                    28:05:ad:89:b7:6a:f2:e5:a3:e0:b9:1a:fd:17:1e:
                    d8:27:92:9d:33:69:7b:d7:f6:fb:f1:15:36:4b:6d:
                    57:26:b8:bb:7a:91:15:12:5d:79:b3:cf:8a:7a:51:
                    ca:e0:11:ed:3f:9d:16:30:fb:fb:a0:a3:79:3c:1f:
                    57:d1:09:bd:07:40:1a:30:3e:95:ee:9a:d1:4b:4d:
                    6c:ed:d3:98:a1:68:83:b8:43:06:70:55:c2:2d:9d:
                    9d:29:03:2e:81:e2:ae:21:57:66:9f:8c:d5:3c:81:
                    4b:83:68:96:df:2d:f2:35:89:e1:b6:e1:3a:cd:06:
                    28:79:9c:6c:4b:a7:38:5b:00:82:d1:63:23:42:c6:
                    61:2b:1b:f2:53:69:b5:ac:5d:16:ff:88:0e:0d:b4:
                    15:c4:54:9a:61:4d:1b:41:99:0a:a0:92:ff:8b:3b:
                    f7:22:a7:8f:30:b7:fc:45:4f:98:3a:56:1f:ea:80:
                    b8:ac:d9:3e:d0:24:ad:c3:9f:05:4b:10:25:8d:7a:
                    6a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4A:20:CA:E8:03:F4:6E:41:CC:C3:EF:1E:1A:8F:47:AF:9E:B4:D7
            X509v3 Authority Key Identifier:
                keyid:00:65:90:39:8F:4D:26:A9:E4:F3:11:08:25:29:1E:80:32:AA:F2:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/3230302e3232352e35382e302f32332d3332203d3e20323734373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:88:5b:a4:b5:8b:e4:8c:fb:5e:78:ad:6e:42:a4:f7:84:
         0d:7a:8d:1d:5e:8e:14:0f:29:68:2d:3e:91:93:38:e1:e7:83:
         ed:f8:b6:ea:18:b1:82:de:98:d2:7e:4d:ee:f0:34:e7:c3:5b:
         f9:b6:c2:94:14:8e:f3:29:2e:19:93:0a:07:3b:8b:d8:85:e7:
         b0:55:73:67:c6:2b:7a:e4:38:81:18:e5:16:ab:d7:a6:e8:7f:
         59:1c:f4:69:9f:f7:04:5d:86:7e:13:86:66:c8:d7:42:c7:27:
         d4:a6:2d:7b:d6:12:55:00:22:9e:98:c8:27:68:bc:f3:66:e2:
         05:eb:68:3e:0a:0b:d2:72:84:eb:5f:9c:75:fa:a7:db:17:77:
         b1:55:92:60:dc:24:98:60:f6:30:ea:e7:b0:6e:60:85:56:83:
         0a:e0:0a:12:60:fe:15:ba:59:b7:d1:6f:40:cf:77:0b:bc:ad:
         c2:77:8d:68:09:f5:88:44:b2:df:05:56:6e:60:b8:c1:57:c7:
         86:2d:6e:6f:ab:01:58:f1:ac:27:70:7a:1f:69:b1:29:c1:53:
         86:70:69:d4:4a:c3:28:4e:0f:39:f4:64:0e:84:4a:2b:78:65:
         ec:b0:81:42:c8:4e:75:6a:40:7c:6a:90:75:4e:2a:3c:3a:5c:
         51:a1:40:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKZtXH9wHE5JW62YopJbHcT1IdpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA2NTkwMzk4RjREMjZBOUU0RjMxMTA4MjUyOTFFODAz
MkFBRjJCQjAeFw0yNjAxMTkxOTQ4MDBaFw0yNzAxMTgxOTUzMDBaMDMxMTAvBgNV
BAMTKEI0NEEyMENBRTgwM0Y0NkU0MUNDQzNFRjFFMUE4RjQ3QUY5RUI0RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bqY+fWKo+rMdQJWFBgj4E4Sr
bzTWGtaFQ1s76q2opnrJ7xqVg/glpghPxVkfKCWVdFNv/jLc2ytUnigFrYm3avLl
o+C5Gv0XHtgnkp0zaXvX9vvxFTZLbVcmuLt6kRUSXXmzz4p6UcrgEe0/nRYw+/ug
o3k8H1fRCb0HQBowPpXumtFLTWzt05ihaIO4QwZwVcItnZ0pAy6B4q4hV2afjNU8
gUuDaJbfLfI1ieG24TrNBih5nGxLpzhbAILRYyNCxmErG/JTabWsXRb/iA4NtBXE
VJphTRtBmQqgkv+LO/cip48wt/xFT5g6Vh/qgLis2T7QJK3DnwVLECWNemqBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtEogyugD9G5BzMPvHhqPR6+etNcwHwYDVR0j
BBgwFoAUAGWQOY9NJqnk8xEIJSkegDKq8rswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGd6RW44TlZrTnpZb1BqUHlTR2F5eDNMUTNyTjZSZGhSRFZLdkRFa0FR
ODQvMC8wMDY1OTAzOThGNEQyNkE5RTRGMzExMDgyNTI5MUU4MDMyQUFGMkJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwNjU5MDM5OEY0RDI2QTlF
NEYzMTEwODI1MjkxRTgwMzJBQUYyQkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhnekVuOE5Wa056WW9QalB5U0dheXgzTFEzck42UmRoUkRWS3ZERWtBUTg0LzAv
MzIzMDMwMmUzMjMyMzUyZTM1MzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM3
MzQzNzMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHI4TowDQYJKoZIhvcNAQELBQADggEBAJNKiFuk
tYvkjPteeK1uQqT3hA16jR1ejhQPKWgtPpGTOOHng+34tuoYsYLemNJ+Te7wNOfD
W/m2wpQUjvMpLhmTCgc7i9iF57BVc2fGK3rkOIEY5Rar16bof1kc9Gmf9wRdhn4T
hmbI10LHJ9SmLXvWElUAIp6YyCdovPNm4gXraD4KC9JyhOtfnHX6p9sXd7FVkmDc
JJhg9jDq57BuYIVWgwrgChJg/hW6WbfRb0DPdwu8rcJ3jWgJ9YhEst8FVm5guMFX
x4Ytbm+rAVjxrCdweh9psSnBU4ZwadRKwyhODzn0ZA6ESit4ZeywgULITnVqQHxq
kHVOKjw6XFGhQG4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:07:09 2026 by rpki-client