This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32312d3231203d3e203232373036.roa
File:                     3230302e3135322e38302e302f32312d3231203d3e203232373036.roa (raw, json)
Hash identifier:          pZ4B1R2BCHdsizOO7vm0uwUGjZqDLUXrxq2jOX/eUN0=
Subject key identifier:   3F:09:59:58:C0:D0:2B:74:2A:16:AB:E5:13:97:03:52:CA:B9:AC:64
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       26F16145FE22E73FE41AD854EFC7A6F7217C4803
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32312d3231203d3e203232373036.roa
Signing time:             Fri 21 Nov 2025 13:26:40 +0000
ROA not before:           Fri 21 Nov 2025 13:21:40 +0000
ROA not after:            Fri 20 Nov 2026 13:26:40 +0000
asID:                     22706
IP address blocks:        200.152.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f1:61:45:fe:22:e7:3f:e4:1a:d8:54:ef:c7:a6:f7:21:7c:48:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Nov 21 13:21:40 2025 GMT
            Not After : Nov 20 13:26:40 2026 GMT
        Subject: CN=3F095958C0D02B742A16ABE513970352CAB9AC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:ed:6c:ea:ff:fa:92:f1:e9:eb:97:fe:6f:
                    57:17:8b:4d:13:ff:69:f4:b4:77:e0:30:91:d7:51:
                    b1:cf:b5:6d:9b:99:24:d5:95:10:99:05:81:53:2f:
                    26:04:f6:c2:d7:13:05:07:60:4c:8d:5b:14:3b:b5:
                    a4:1c:89:85:1d:d3:a4:7a:8d:17:ca:d7:22:19:e1:
                    31:2c:28:89:e0:34:0d:e0:16:b7:a1:ba:62:78:c5:
                    04:ab:57:80:3f:c3:f8:ba:c4:f4:5f:fb:c2:09:ed:
                    91:f9:67:ac:6f:aa:8d:4f:d4:b6:0f:42:5d:3f:95:
                    98:11:32:c3:05:2b:0e:e8:e1:f6:a4:5b:27:61:27:
                    d7:89:20:e4:74:87:9b:75:62:c5:76:f7:cb:66:80:
                    9d:ff:f5:49:14:ad:24:05:3c:e9:03:4f:87:5f:37:
                    77:d3:e0:53:e2:04:9d:75:ed:9e:6e:7b:8f:f1:95:
                    51:0d:3c:90:7d:23:3a:7c:ff:ea:43:f3:60:77:b8:
                    63:ba:54:2a:0f:92:1e:5e:0d:43:ca:0c:d7:fd:b4:
                    93:a5:1c:eb:b8:5d:c8:32:9b:be:ab:ad:75:8d:ba:
                    28:7d:7a:54:3d:05:9f:6f:17:60:1b:27:d7:45:77:
                    c1:56:d8:d3:71:eb:86:8f:ba:0f:1b:81:0f:7d:7f:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:09:59:58:C0:D0:2B:74:2A:16:AB:E5:13:97:03:52:CA:B9:AC:64
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32312d3231203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:e9:85:a9:8d:72:13:c6:f1:04:b4:d3:85:0e:48:ea:1b:eb:
         56:d2:2f:9f:85:68:3b:60:9e:8a:6c:52:a7:89:53:fc:66:98:
         f9:59:15:f2:8c:9f:4a:d7:b7:2b:f4:0a:e7:73:6b:8e:a0:9a:
         1a:17:49:fb:bb:8e:b4:fd:8e:0e:a6:88:a7:82:9c:23:09:84:
         36:40:98:c7:2d:92:90:a8:47:cd:87:13:a0:1a:58:38:b2:f1:
         3a:d9:05:cc:53:8a:02:bb:ae:42:f9:81:94:20:e0:a8:cc:73:
         35:2a:21:c3:9a:5f:77:88:16:33:a6:eb:ea:47:c4:39:ec:a3:
         3d:17:a6:3f:49:62:c8:55:1a:59:65:5b:f1:e6:ae:39:55:54:
         7b:fb:44:78:6b:68:71:a8:5c:1d:90:2b:52:ab:19:da:4a:ce:
         37:67:0e:10:e8:6b:8f:a8:ae:53:9a:31:6a:90:d8:bf:20:b7:
         84:96:cf:27:33:a5:c3:cb:77:3d:f3:94:7c:18:e3:15:b4:88:
         78:2b:4b:2c:ab:f1:39:bc:65:74:ab:cf:f5:aa:51:e0:fb:7f:
         4c:1e:ca:aa:b9:b8:7f:87:a2:2f:e8:5d:99:2d:5e:09:1b:6f:
         2e:b7:c5:48:10:39:6e:45:71:c9:bf:5e:2d:e2:8a:ce:23:b9:
         9a:57:43:7d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJvFhRf4i5z/kGthU78em9yF8SAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGNUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQw
ODUzNDA3MjAeFw0yNTExMjExMzIxNDBaFw0yNjExMjAxMzI2NDBaMDMxMTAvBgNV
BAMTKDNGMDk1OTU4QzBEMDJCNzQyQTE2QUJFNTEzOTcwMzUyQ0FCOUFDNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLu1s6v/6kvHp65f+b1cXi00T
/2n0tHfgMJHXUbHPtW2bmSTVlRCZBYFTLyYE9sLXEwUHYEyNWxQ7taQciYUd06R6
jRfK1yIZ4TEsKIngNA3gFrehumJ4xQSrV4A/w/i6xPRf+8IJ7ZH5Z6xvqo1P1LYP
Ql0/lZgRMsMFKw7o4fakWydhJ9eJIOR0h5t1YsV298tmgJ3/9UkUrSQFPOkDT4df
N3fT4FPiBJ117Z5ue4/xlVENPJB9Izp8/+pD82B3uGO6VCoPkh5eDUPKDNf9tJOl
HOu4Xcgym76rrXWNuih9elQ9BZ9vF2AbJ9dFd8FW2NNx64aPug8bgQ99f43JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPwlZWMDQK3QqFqvlE5cDUsq5rGQwHwYDVR0j
BBgwFoAU0fXJoRoldaKc7AHzNhxBhAhTQHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC9EMUY1QzlBMTFBMjU3NUEyOUNFQzAxRjMzNjFDNDE4NDA4NTM0MDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRjVDOUExMUEyNTc1QTI5
Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM4MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyJhQMA0GCSqGSIb3DQEBCwUAA4IBAQAX6YWpjXIT
xvEEtNOFDkjqG+tW0i+fhWg7YJ6KbFKniVP8Zpj5WRXyjJ9K17cr9Arnc2uOoJoa
F0n7u460/Y4OpoingpwjCYQ2QJjHLZKQqEfNhxOgGlg4svE62QXMU4oCu65C+YGU
IOCozHM1KiHDml93iBYzpuvqR8Q57KM9F6Y/SWLIVRpZZVvx5q45VVR7+0R4a2hx
qFwdkCtSqxnaSs43Zw4Q6GuPqK5TmjFqkNi/ILeEls8nM6XDy3c985R8GOMVtIh4
K0ssq/E5vGV0q8/1qlHg+39MHsqqubh/h6Iv6F2ZLV4JG28ut8VIEDluRXHJv14t
4orOI7maV0N9
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:35:01 2025 by rpki-client