This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32302d3230203d3e203232373036.roa
File:                     3230302e3135322e38302e302f32302d3230203d3e203232373036.roa (raw, json)
Hash identifier:          2id8H6RODFsFDqF/0zDUEQdGjVKh+P541wWtypyhKkI=
Subject key identifier:   9F:6E:29:0D:65:FB:DB:80:5A:83:89:DA:30:FE:F0:86:E8:5B:34:C7
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       7C45B4AB36BDFE1EE7BFFAFD7EF3EE1898AB6208
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32302d3230203d3e203232373036.roa
Signing time:             Fri 21 Nov 2025 13:26:37 +0000
ROA not before:           Fri 21 Nov 2025 13:21:37 +0000
ROA not after:            Fri 20 Nov 2026 13:26:37 +0000
asID:                     22706
IP address blocks:        200.152.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:45:b4:ab:36:bd:fe:1e:e7:bf:fa:fd:7e:f3:ee:18:98:ab:62:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Nov 21 13:21:37 2025 GMT
            Not After : Nov 20 13:26:37 2026 GMT
        Subject: CN=9F6E290D65FBDB805A8389DA30FEF086E85B34C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:30:45:81:a8:7f:eb:b7:72:0d:e4:84:3e:6e:
                    af:8e:81:22:37:d1:6a:3c:08:43:4d:e5:e8:0a:20:
                    46:bf:7c:da:30:ee:1a:51:f0:b2:02:f3:b3:c8:ae:
                    57:95:39:a3:ad:d8:44:1a:46:ed:1f:41:14:48:c9:
                    b9:6a:e1:17:ba:9d:62:95:1d:42:bc:55:6d:5c:f3:
                    07:46:37:73:40:fc:26:97:57:5a:0b:7c:1f:28:b7:
                    ab:ca:14:59:e7:80:b8:5b:e5:ac:64:10:31:23:6f:
                    4f:80:4b:1a:25:8f:92:95:9f:00:56:67:ab:b5:ce:
                    d6:6c:ab:c7:60:f6:30:8a:f0:c8:04:c3:21:f0:5c:
                    70:b6:6c:80:65:b1:52:15:4e:1f:88:a6:8f:22:cd:
                    72:2d:97:59:52:15:b9:90:0e:d2:ce:b5:17:a8:8c:
                    a7:2c:59:ca:51:c1:2e:4a:b0:56:9e:af:e7:51:7e:
                    71:d8:f6:af:58:a3:59:6e:33:c6:dd:e7:bb:7e:fb:
                    d3:a2:b3:77:0f:18:7f:25:6c:4d:1c:e0:6d:11:ba:
                    21:16:47:06:3c:02:32:d5:4f:38:04:e8:e4:2e:d9:
                    69:16:37:f3:9c:53:b8:af:46:d2:e4:50:71:20:75:
                    3c:05:59:a1:32:32:16:55:0f:bd:d9:62:d6:c1:20:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6E:29:0D:65:FB:DB:80:5A:83:89:DA:30:FE:F0:86:E8:5B:34:C7
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32302d3230203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:dc:1b:ba:15:d1:29:35:4a:c8:42:4a:1c:22:83:aa:82:52:
         05:ae:45:00:ba:91:f5:d9:c5:4d:09:42:4c:72:8b:f6:d9:57:
         62:d9:66:c6:c7:5b:a9:b5:3f:fe:d3:ac:d0:1d:de:78:06:01:
         22:29:18:f5:1d:28:ff:f6:24:f2:1a:f9:b7:ad:49:3a:20:f3:
         9e:3a:b1:29:48:0e:e0:b7:47:0a:59:fe:1e:ab:7d:bd:69:fb:
         8c:f2:8d:ea:b8:ef:67:38:4f:63:f2:64:2a:49:a2:87:9a:6c:
         1d:99:96:28:0a:d6:42:e7:f5:c0:74:0c:bb:7a:eb:16:c9:ac:
         f3:7a:6b:9a:5f:5c:c0:43:22:1d:ed:f4:a0:b4:3e:e1:8c:a4:
         2d:dd:94:bd:31:25:b9:8a:59:5f:a7:bc:57:f7:a7:7b:d1:33:
         4c:ea:83:18:19:06:c2:ac:0d:41:4d:93:49:e4:40:b5:79:8b:
         5f:fb:44:a5:32:2b:5c:d1:17:7a:18:5c:25:c8:63:e3:59:23:
         d7:fc:f6:de:3f:83:cc:3d:ea:8c:ce:ec:72:7d:c2:8e:0b:0d:
         81:c9:79:13:4d:83:70:1f:53:34:48:bf:90:83:e1:42:16:2d:
         e7:e0:f0:0f:17:ac:7b:d8:06:ca:a5:7d:7f:75:af:d8:86:5d:
         63:19:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:40 2025 by rpki-client