This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/3230302e342e3132342e302f32322d3234203d3e20323731343133.roa
File:                     3230302e342e3132342e302f32322d3234203d3e20323731343133.roa (raw, json)
Hash identifier:          NJAIVeIBzP79Jc/apxTlq3dNo/1/MIKVm3BLhCIpuJg=
Subject key identifier:   E6:54:45:F1:6B:F9:63:8B:0B:54:8D:8D:44:7F:43:BE:20:44:41:8C
Certificate issuer:       /CN=E26C3F374801831E3EEF75FCACFEB3A524AB0067
Certificate serial:       4E44E3F3DDAC125DD562FF7BFBFF6E0F30DEF4D1
Authority key identifier: E2:6C:3F:37:48:01:83:1E:3E:EF:75:FC:AC:FE:B3:A5:24:AB:00:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E26C3F374801831E3EEF75FCACFEB3A524AB0067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/3230302e342e3132342e302f32322d3234203d3e20323731343133.roa
Signing time:             Sat 08 Nov 2025 17:25:31 +0000
ROA not before:           Sat 08 Nov 2025 17:20:31 +0000
ROA not after:            Sat 07 Nov 2026 17:25:31 +0000
asID:                     271413
IP address blocks:        200.4.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/E26C3F374801831E3EEF75FCACFEB3A524AB0067.crl
                          rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/E26C3F374801831E3EEF75FCACFEB3A524AB0067.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E26C3F374801831E3EEF75FCACFEB3A524AB0067.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:44:e3:f3:dd:ac:12:5d:d5:62:ff:7b:fb:ff:6e:0f:30:de:f4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E26C3F374801831E3EEF75FCACFEB3A524AB0067
        Validity
            Not Before: Nov  8 17:20:31 2025 GMT
            Not After : Nov  7 17:25:31 2026 GMT
        Subject: CN=E65445F16BF9638B0B548D8D447F43BE2044418C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:4c:a5:a5:4a:2e:1c:09:6d:ab:13:82:eb:
                    16:be:19:cf:90:d7:9e:5d:2d:fa:6c:84:e3:e2:43:
                    b2:19:9b:b3:f9:88:33:5a:62:1b:6b:7f:6c:d4:d2:
                    04:61:a1:c4:c5:ab:2c:22:8c:7c:4e:e2:67:8a:88:
                    40:7a:85:f2:b9:ce:fb:fc:c6:14:19:b5:3e:de:f9:
                    d0:7c:eb:fc:1c:7b:3c:c7:01:dd:ad:ce:aa:6f:85:
                    c0:8d:2e:e9:f2:2b:30:31:12:aa:77:ca:f5:10:38:
                    fd:ae:86:61:8c:0b:61:56:d7:d5:2e:21:ab:6c:77:
                    e6:a0:48:80:7c:83:27:9d:ce:9b:fc:17:f5:10:66:
                    29:a7:d7:b3:89:cc:f0:5d:d4:56:8d:e5:8d:87:b6:
                    5c:11:64:30:02:a9:8a:e3:7b:48:f2:34:52:e5:3e:
                    0a:9d:2b:e0:99:26:49:e8:f4:b2:bf:c8:17:3f:16:
                    be:e4:7b:2a:c3:a3:65:02:c1:5c:4a:04:e9:1a:64:
                    2d:3b:c6:51:ed:b5:aa:9b:1d:de:0d:12:93:0b:1c:
                    cd:8e:a1:24:ce:98:de:5a:a0:c4:c8:d6:cd:10:bb:
                    54:9f:84:f4:37:2a:0e:0e:55:ac:fe:33:b3:33:b0:
                    dc:8e:08:66:66:db:01:91:25:0c:f5:a7:d2:6d:83:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:54:45:F1:6B:F9:63:8B:0B:54:8D:8D:44:7F:43:BE:20:44:41:8C
            X509v3 Authority Key Identifier:
                keyid:E2:6C:3F:37:48:01:83:1E:3E:EF:75:FC:AC:FE:B3:A5:24:AB:00:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/E26C3F374801831E3EEF75FCACFEB3A524AB0067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E26C3F374801831E3EEF75FCACFEB3A524AB0067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/3230302e342e3132342e302f32322d3234203d3e20323731343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:27:46:83:85:2e:27:f7:bc:1c:95:53:33:9e:b9:e7:43:
         c4:1d:4f:3b:e0:4f:c8:8d:90:38:52:c1:2f:af:60:88:9b:32:
         d2:28:5f:4c:64:46:c2:88:e0:a0:0a:11:e2:9a:51:ac:e4:ff:
         c9:a0:13:8d:66:f5:87:7c:c3:f5:fd:7c:77:77:ef:b6:a2:4b:
         bb:b6:20:d8:a9:f0:b5:15:7e:36:56:9b:28:f2:f8:09:40:7c:
         bc:41:34:b9:b4:02:d0:c5:6d:4c:e2:bd:8c:22:ca:cf:55:37:
         67:0c:f0:53:91:ce:e9:92:75:7f:7b:fe:bd:94:cc:8b:c5:a2:
         84:72:a9:83:21:39:45:ae:e4:4e:b1:e4:29:fc:26:15:ce:66:
         62:70:2d:0b:a3:f1:08:fe:24:94:fd:63:94:37:b0:52:7a:f0:
         0d:53:df:43:12:84:15:c2:30:86:0b:b5:e8:0c:66:66:85:68:
         36:0f:fd:b1:f8:fa:69:04:58:12:dd:31:dd:19:2a:3b:36:69:
         57:fc:40:da:c2:33:a9:1c:80:00:39:5a:16:42:a5:bb:3d:82:
         f6:55:17:8e:58:4d:fa:a0:54:16:7b:a6:fe:8a:95:71:73:c8:
         0d:b1:11:74:27:ec:36:58:ce:5a:31:a4:4b:84:b1:e1:6f:03:
         b5:67:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:05 2025 by rpki-client