This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3232203d3e203631373932.roa
File:                     3230312e35352e3139362e302f32322d3232203d3e203631373932.roa (raw, json)
Hash identifier:          +/DrPSSEWZOt8tj9GVfSwK+o74oeJ6jGGDeQ0CKbj6I=
Subject key identifier:   E1:F7:F0:3C:F2:F2:AF:B4:AD:A2:55:78:29:E3:90:2D:F2:D4:11:70
Certificate issuer:       /CN=A7777023904D1D5DE6652ABF10593188DA931795
Certificate serial:       60C2239B565C5469A2017F6387B46EF833D89951
Authority key identifier: A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3232203d3e203631373932.roa
Signing time:             Thu 11 Dec 2025 20:41:52 +0000
ROA not before:           Thu 11 Dec 2025 20:36:52 +0000
ROA not after:            Thu 10 Dec 2026 20:41:52 +0000
asID:                     61792
IP address blocks:        201.55.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 02:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c2:23:9b:56:5c:54:69:a2:01:7f:63:87:b4:6e:f8:33:d8:99:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7777023904D1D5DE6652ABF10593188DA931795
        Validity
            Not Before: Dec 11 20:36:52 2025 GMT
            Not After : Dec 10 20:41:52 2026 GMT
        Subject: CN=E1F7F03CF2F2AFB4ADA2557829E3902DF2D41170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:a6:ad:25:33:cc:92:78:79:d0:53:54:83:
                    a4:7a:5d:8f:cd:cd:2a:8a:09:28:a5:14:59:75:b6:
                    8b:ec:85:63:92:4e:f3:c1:46:12:05:f2:67:bf:66:
                    3a:0a:51:55:50:cd:29:91:84:f4:4f:00:ba:43:d0:
                    20:28:f7:bd:f2:f2:9b:58:25:27:73:16:1a:07:61:
                    07:40:f3:d5:d3:13:f9:68:dd:b3:d7:a7:fe:45:82:
                    21:2b:9d:6f:8a:09:39:1a:93:b3:b6:6f:46:93:c8:
                    e6:37:70:8f:44:78:3a:1e:44:42:8c:91:bc:47:85:
                    aa:a4:a9:85:37:65:7a:78:6f:3c:6a:d4:69:bb:24:
                    4f:22:3e:53:47:07:5f:2a:08:24:e2:40:5f:4a:0d:
                    6b:c8:64:28:e4:e9:42:cb:53:3e:8a:4a:42:07:eb:
                    f3:57:63:da:84:52:b3:88:8d:90:22:42:27:18:41:
                    70:5c:25:d0:f9:c5:0a:fd:7c:3e:b8:e3:88:04:7e:
                    35:a9:ad:bf:2e:d1:4b:05:a6:72:8a:1c:63:30:09:
                    d8:2a:39:8e:fc:d5:e7:74:3f:26:b0:ae:18:7f:0c:
                    46:1a:35:a2:f8:98:42:1b:1b:28:0c:74:52:2e:f6:
                    9c:04:ea:3b:67:72:20:53:b8:05:25:d9:7d:9a:67:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F7:F0:3C:F2:F2:AF:B4:AD:A2:55:78:29:E3:90:2D:F2:D4:11:70
            X509v3 Authority Key Identifier:
                keyid:A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3232203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:2e:06:a3:a1:96:72:d0:dc:5a:7c:7e:77:c2:d9:d8:69:07:
         fb:43:d3:fe:9d:be:1b:29:27:0d:b9:5e:c9:02:15:95:67:8a:
         ef:65:85:50:64:41:87:98:5e:86:12:c2:7e:48:fa:0b:e4:18:
         10:3c:e2:b0:f4:9c:e8:2d:63:ec:ed:b5:e4:5a:65:57:70:d4:
         97:cf:cd:30:ab:ed:81:84:de:ec:77:c3:5e:22:92:94:9c:a3:
         51:c6:bc:c1:f1:3e:b4:08:51:6c:9a:1a:b5:c0:3a:bf:14:03:
         c8:25:91:fb:a7:de:0f:b1:d7:19:5f:99:70:f0:2b:09:b9:a1:
         22:29:8a:3f:70:d3:7f:3f:f4:da:d3:15:3e:85:f9:38:23:b7:
         05:5e:16:fc:57:4e:78:38:62:1f:ad:19:91:85:5b:4f:6f:7f:
         38:11:c4:4f:23:5a:39:8a:de:d4:2d:9e:e2:1b:84:5c:da:d2:
         e5:3e:e4:10:ac:9c:11:c7:8f:0e:79:a8:64:a5:78:ae:b8:5b:
         03:5e:a4:07:4e:a1:b1:d3:2b:d5:6d:73:6d:e8:39:d0:bc:4a:
         a4:30:3b:92:59:79:10:eb:1d:7e:28:a2:67:a5:0a:f9:01:6a:
         72:e2:be:36:b4:cc:68:39:4f:43:14:50:0e:1a:bc:0d:0e:85:
         25:53:88:8e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYMIjm1ZcVGmiAX9jh7Ru+DPYmVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc3NzcwMjM5MDREMUQ1REU2NjUyQUJGMTA1OTMxODhE
QTkzMTc5NTAeFw0yNTEyMTEyMDM2NTJaFw0yNjEyMTAyMDQxNTJaMDMxMTAvBgNV
BAMTKEUxRjdGMDNDRjJGMkFGQjRBREEyNTU3ODI5RTM5MDJERjJENDExNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTZqatJTPMknh50FNUg6R6XY/N
zSqKCSilFFl1tovshWOSTvPBRhIF8me/ZjoKUVVQzSmRhPRPALpD0CAo973y8ptY
JSdzFhoHYQdA89XTE/lo3bPXp/5FgiErnW+KCTkak7O2b0aTyOY3cI9EeDoeREKM
kbxHhaqkqYU3ZXp4bzxq1Gm7JE8iPlNHB18qCCTiQF9KDWvIZCjk6ULLUz6KSkIH
6/NXY9qEUrOIjZAiQicYQXBcJdD5xQr9fD6444gEfjWprb8u0UsFpnKKHGMwCdgq
OY781ed0Pyawrhh/DEYaNaL4mEIbGygMdFIu9pwE6jtnciBTuAUl2X2aZzHrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4ffwPPLyr7StolV4KeOQLfLUEXAwHwYDVR0j
BBgwFoAUp3dwI5BNHV3mZSq/EFkxiNqTF5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3pGcTRVRWZiY3dMa3RwZVpoZnlvU1BxaW1HaHhMUU1WTjQ4eGFiYTlS
NU4vMC9BNzc3NzAyMzkwNEQxRDVERTY2NTJBQkYxMDU5MzE4OERBOTMxNzk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3Nzc3MDIzOTA0RDFENURF
NjY1MkFCRjEwNTkzMTg4REE5MzE3OTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N6RnE0VUVmYmN3TGt0cGVaaGZ5b1NQcWltR2h4TFFNVk40OHhhYmE5UjVOLzAv
MzIzMDMxMmUzNTM1MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyTfEMA0GCSqGSIb3DQEBCwUAA4IBAQBaLgajoZZy
0NxafH53wtnYaQf7Q9P+nb4bKScNuV7JAhWVZ4rvZYVQZEGHmF6GEsJ+SPoL5BgQ
POKw9JzoLWPs7bXkWmVXcNSXz80wq+2BhN7sd8NeIpKUnKNRxrzB8T60CFFsmhq1
wDq/FAPIJZH7p94PsdcZX5lw8CsJuaEiKYo/cNN/P/Ta0xU+hfk4I7cFXhb8V054
OGIfrRmRhVtPb384EcRPI1o5it7ULZ7iG4Rc2tLlPuQQrJwRx48OeahkpXiuuFsD
XqQHTqGx0yvVbXNt6DnQvEqkMDuSWXkQ6x1+KKJnpQr5AWpy4r42tMxoOU9DFFAO
GrwNDoUlU4iO
-----END CERTIFICATE-----
Generated at Thu Dec 18 06:03:24 2025 by rpki-client