This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38342e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          rd2YX5Bkgna/HJ4B5oiyXaav8mDNF0GG+r6uwaLLfPI=
Subject key identifier:   C9:8E:92:63:0F:28:D2:ED:B5:3D:D0:B4:B4:E6:05:EE:65:46:00:5B
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       3BD675290E1CA404E0E319B119729FDBF081A381
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa
Signing time:             Fri 21 Nov 2025 13:26:46 +0000
ROA not before:           Fri 21 Nov 2025 13:21:46 +0000
ROA not after:            Fri 20 Nov 2026 13:26:46 +0000
asID:                     22706
IP address blocks:        200.152.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d6:75:29:0e:1c:a4:04:e0:e3:19:b1:19:72:9f:db:f0:81:a3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Nov 21 13:21:46 2025 GMT
            Not After : Nov 20 13:26:46 2026 GMT
        Subject: CN=C98E92630F28D2EDB53DD0B4B4E605EE6546005B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:5d:51:72:e9:7a:b8:22:f4:ee:be:1d:e8:
                    45:77:10:91:58:a2:c4:c1:df:f2:5e:dc:94:94:1e:
                    74:3f:d6:0a:9e:5e:5f:66:ea:9c:e4:57:b8:c0:10:
                    4c:dd:1e:f3:55:5c:cf:d1:6f:0f:a7:da:db:5b:80:
                    1d:66:11:8f:1c:48:24:3f:d5:c3:f0:2d:77:27:5a:
                    9a:84:e4:2d:c5:51:0e:be:7e:e6:8e:60:6d:8e:2d:
                    4c:5b:3d:0d:38:41:85:89:ed:40:4b:46:92:96:80:
                    72:02:64:0f:7a:a9:29:3e:37:8c:42:81:58:4a:23:
                    af:ae:e9:aa:67:91:a2:8d:ef:92:43:67:12:8c:10:
                    0d:47:6b:48:de:e7:47:d0:1a:72:41:aa:4e:d8:10:
                    64:87:85:16:b2:3d:dd:84:a0:da:18:55:97:4b:80:
                    54:38:64:2c:9b:c4:56:d4:d3:7e:39:8a:86:16:2b:
                    52:9b:fa:35:0f:ee:9d:b8:41:dd:83:b3:81:6f:11:
                    63:59:9d:d7:e3:5e:0e:e8:26:d0:cd:05:b3:0a:29:
                    d8:5c:92:87:b3:1f:84:74:e6:83:61:49:f1:6b:d3:
                    00:82:65:59:e9:0b:13:1c:ce:8f:86:5b:80:e2:7d:
                    3e:59:e2:35:59:03:dd:f7:35:9b:b7:df:d5:41:38:
                    eb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8E:92:63:0F:28:D2:ED:B5:3D:D0:B4:B4:E6:05:EE:65:46:00:5B
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:22:50:50:48:4c:b1:5d:d4:24:c2:90:27:e6:83:ad:2a:5f:
         40:b6:af:32:7f:9c:3b:dd:b1:d2:57:ce:35:36:7d:d6:9d:11:
         18:19:53:1f:91:8d:c4:e4:c7:05:a7:64:b6:fa:00:ef:b2:5a:
         3f:20:14:58:68:92:06:b3:c9:11:ce:44:28:2b:a8:3a:c4:c5:
         59:90:f1:ca:9b:6e:ee:39:cb:29:28:c4:f6:a2:7a:6a:e3:75:
         40:18:99:01:e9:1f:56:1d:49:1d:85:cd:96:b6:3c:fc:d3:f7:
         85:f6:a2:33:68:24:e0:58:39:81:62:a7:2b:cb:aa:82:71:61:
         87:99:7c:6b:42:58:dc:d3:e6:03:2b:45:34:22:8a:ff:5b:f4:
         6d:c6:2c:b4:7c:18:c2:43:65:63:7d:70:ac:b4:9b:f5:ef:e9:
         8f:af:7c:d9:97:36:9e:52:ff:be:62:3a:c0:de:bf:93:08:c0:
         36:76:8c:43:d0:0a:da:58:0a:39:27:25:04:27:a7:70:66:09:
         ff:82:3d:f6:57:49:7d:85:9a:6f:d2:8c:f6:3f:84:96:5b:10:
         dd:0f:2a:7e:3d:95:4b:c1:34:12:9e:f5:97:c1:15:34:5e:fb:
         da:a7:da:d3:22:66:06:21:ef:5d:6e:d2:23:4d:7c:8c:85:e6:
         df:a0:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:42 2025 by rpki-client