This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e39312e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          +MADmrcouI8og5Z9Th8zdt3AOVbnAycMtw9MT3RXQi0=
Subject key identifier:   EE:3D:D5:FE:28:DA:37:A7:B3:2D:66:21:40:26:5B:37:40:8F:67:0B
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       4F64E0D33840027805185EBA0C5BCB723CE921F1
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa
Signing time:             Fri 21 Nov 2025 13:26:36 +0000
ROA not before:           Fri 21 Nov 2025 13:21:36 +0000
ROA not after:            Fri 20 Nov 2026 13:26:36 +0000
asID:                     22706
IP address blocks:        200.152.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:64:e0:d3:38:40:02:78:05:18:5e:ba:0c:5b:cb:72:3c:e9:21:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Nov 21 13:21:36 2025 GMT
            Not After : Nov 20 13:26:36 2026 GMT
        Subject: CN=EE3DD5FE28DA37A7B32D662140265B37408F670B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:66:ff:2c:95:1a:47:ea:bb:e6:9f:0f:34:
                    e8:c5:fb:ef:67:dd:6f:80:71:79:4c:29:46:20:db:
                    d0:a1:cd:91:38:3e:81:86:ee:91:76:c3:ad:39:49:
                    04:9b:55:6e:be:9e:cf:32:f1:f9:ce:0c:89:a1:45:
                    f7:cb:22:3b:98:58:37:ff:ef:df:b6:19:f3:78:f8:
                    0b:00:77:17:a0:6f:5a:7d:b3:5a:0e:51:9e:21:75:
                    94:0f:64:3f:52:53:0d:87:d2:06:3e:e4:18:c0:1b:
                    e9:4e:d4:a2:fe:d4:fd:1c:00:17:b0:82:97:4c:08:
                    66:c8:ea:d5:66:a4:f5:1f:0b:d3:5c:9f:4f:25:61:
                    12:5a:1f:74:35:43:56:18:04:9e:fd:90:50:7f:2a:
                    d6:03:1a:a2:bc:d7:a0:bd:e4:16:02:2e:c6:4c:c5:
                    e5:41:68:2c:16:0b:5f:a5:02:2f:60:f1:d4:99:22:
                    ac:6e:bf:21:9d:a4:f0:48:17:31:83:3c:e3:43:0a:
                    51:4b:ae:f0:d8:ca:55:21:d4:cc:33:f0:22:06:79:
                    25:e3:3e:8d:45:fd:50:75:c1:60:37:f1:5c:52:e6:
                    27:a9:1a:84:83:9f:3b:53:8f:42:c5:c5:fb:73:b0:
                    13:9e:a9:e0:b9:0c:fc:cd:f8:8d:bc:d1:a7:c0:cb:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:D5:FE:28:DA:37:A7:B3:2D:66:21:40:26:5B:37:40:8F:67:0B
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:fa:3d:cf:cf:50:7f:49:14:96:47:c1:c7:40:78:e4:e4:20:
         3c:70:e1:4e:73:90:92:56:0a:fd:79:73:38:7f:5c:c0:c3:30:
         6b:6a:a4:cf:ca:39:53:e2:c6:92:a0:b1:bf:c2:50:bc:d8:34:
         06:d0:b2:ec:77:68:59:3b:cc:95:9a:24:c7:a6:26:1b:41:d3:
         a6:e5:8d:16:c2:4e:f5:34:f9:e3:8a:0f:36:63:22:56:a3:65:
         7f:d9:1d:51:c5:04:99:13:47:f8:77:96:81:78:dd:65:44:e7:
         14:43:df:ef:ba:d0:67:25:9c:b5:72:8a:f7:34:0d:e5:ca:93:
         48:af:e7:d3:c1:ee:32:cd:9a:8d:14:b9:57:23:42:db:d9:e7:
         5b:77:c0:4a:73:32:6f:6c:41:4a:26:69:0e:ff:7d:b6:84:71:
         68:a2:8b:25:48:f6:e1:51:67:87:42:1c:0a:af:6d:b5:92:b5:
         0e:e0:c0:68:34:5d:4a:ac:67:81:f6:3e:76:12:c1:fa:1e:16:
         dc:c2:4b:36:02:91:7a:34:4a:32:a7:f5:f1:40:d4:ca:ee:67:
         f5:ec:5d:aa:6a:51:ec:d1:53:90:7f:79:08:25:ce:78:ca:56:
         a3:ef:84:ac:b5:d4:06:2c:50:16:fb:d9:48:6d:b8:dd:65:c2:
         27:41:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:18 2025 by rpki-client