This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32332d3233203d3e203631373932.roa
File:                     3230312e35352e3139362e302f32332d3233203d3e203631373932.roa (raw, json)
Hash identifier:          lQ/jMX4Oo6BB+ddSCT1zGGM0h8J3PUiyv9suyXERXdk=
Subject key identifier:   B0:B5:96:6A:84:A5:2F:0F:37:B6:DB:D1:25:84:43:E5:9C:51:E4:DE
Certificate issuer:       /CN=A7777023904D1D5DE6652ABF10593188DA931795
Certificate serial:       08C703797889F77787E025184F4DB180543E531F
Authority key identifier: A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32332d3233203d3e203631373932.roa
Signing time:             Thu 11 Dec 2025 20:41:53 +0000
ROA not before:           Thu 11 Dec 2025 20:36:53 +0000
ROA not after:            Thu 10 Dec 2026 20:41:53 +0000
asID:                     61792
IP address blocks:        201.55.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 18:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c7:03:79:78:89:f7:77:87:e0:25:18:4f:4d:b1:80:54:3e:53:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7777023904D1D5DE6652ABF10593188DA931795
        Validity
            Not Before: Dec 11 20:36:53 2025 GMT
            Not After : Dec 10 20:41:53 2026 GMT
        Subject: CN=B0B5966A84A52F0F37B6DBD1258443E59C51E4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:a5:76:20:72:b4:24:70:0d:62:1b:92:32:
                    8d:df:47:10:fb:7d:ea:a0:b8:92:bb:03:15:8d:20:
                    2e:93:b3:00:e3:ff:0d:df:1d:c4:5c:52:33:38:fb:
                    0d:a3:c8:cd:60:9e:e6:07:f4:23:ca:01:32:b9:e1:
                    26:a2:3a:81:c7:73:fb:5f:32:1e:8f:db:d4:50:8b:
                    6c:8a:89:56:1b:b6:8a:40:c3:22:fe:92:54:4f:9b:
                    97:da:79:0b:cf:3c:5a:83:72:91:83:43:ee:9f:de:
                    63:7d:78:33:f1:ed:50:5d:da:9e:1d:8a:e9:d0:43:
                    bf:89:d1:60:a3:eb:40:ff:6f:b9:b3:9a:76:11:33:
                    b2:7e:d4:17:fb:15:c6:d1:de:7f:44:7f:f2:46:bc:
                    2b:5b:66:c0:32:40:1e:fd:49:61:00:2b:9a:11:df:
                    9f:4f:d3:aa:7c:bf:8c:13:ee:ca:96:32:7d:b8:52:
                    07:c1:7f:8a:c7:8a:27:50:47:e3:d8:d6:10:87:a0:
                    3e:b3:c9:f9:8c:ee:ce:2a:d3:57:ce:2c:1c:61:6c:
                    b5:b0:55:7f:f1:c5:c4:b9:4d:90:18:2c:77:8a:dd:
                    92:6f:20:3f:36:95:5e:2e:1a:0e:95:97:93:40:d8:
                    de:53:33:30:a2:88:70:b7:72:77:54:ff:1e:3b:94:
                    9c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B5:96:6A:84:A5:2F:0F:37:B6:DB:D1:25:84:43:E5:9C:51:E4:DE
            X509v3 Authority Key Identifier:
                keyid:A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32332d3233203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:05:e7:47:3b:d8:5b:ac:08:6c:29:03:24:d5:79:2c:56:40:
         7b:2d:91:d5:06:f2:2c:28:e1:56:93:92:b1:71:5a:5c:1e:58:
         59:48:f7:81:77:cb:1c:c6:9a:5c:21:06:2d:10:59:06:1d:d9:
         3a:82:f7:f8:17:7a:7b:d4:ff:7f:52:2b:d0:b6:bf:db:11:97:
         81:3e:00:7e:88:b3:9f:0e:2b:6f:6d:9a:6c:ca:19:55:b4:f0:
         e2:8c:f3:b2:95:74:e6:cf:fd:af:f9:5a:09:4b:1f:09:e7:1a:
         93:9f:e6:b2:94:85:8f:0a:c7:41:9d:5e:96:52:bf:52:70:3c:
         2e:b0:97:fb:30:68:bd:03:a2:13:4e:53:90:0b:f0:41:b8:c1:
         e9:76:0f:dd:17:47:a4:a5:83:09:a6:bb:cc:f5:b7:6f:67:af:
         64:05:9e:35:d5:6c:be:6e:f9:84:7a:5f:a4:2f:10:e9:e6:41:
         16:07:3a:03:39:d9:e2:a4:bb:dc:3a:50:0e:50:12:d3:d5:56:
         60:54:1d:bf:ac:ee:57:59:e5:cc:b5:5e:4b:c6:30:54:b3:40:
         ae:e1:79:2c:ad:32:d5:6c:b6:e8:5b:7e:c6:70:07:e5:40:f7:
         56:2f:bb:ca:c4:31:42:6c:01:e4:49:69:14:94:62:1a:3a:2d:
         84:cf:29:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCMcDeXiJ93eH4CUYT02xgFQ+Ux8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc3NzcwMjM5MDREMUQ1REU2NjUyQUJGMTA1OTMxODhE
QTkzMTc5NTAeFw0yNTEyMTEyMDM2NTNaFw0yNjEyMTAyMDQxNTNaMDMxMTAvBgNV
BAMTKEIwQjU5NjZBODRBNTJGMEYzN0I2REJEMTI1ODQ0M0U1OUM1MUU0REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70KV2IHK0JHANYhuSMo3fRxD7
feqguJK7AxWNIC6TswDj/w3fHcRcUjM4+w2jyM1gnuYH9CPKATK54SaiOoHHc/tf
Mh6P29RQi2yKiVYbtopAwyL+klRPm5faeQvPPFqDcpGDQ+6f3mN9eDPx7VBd2p4d
iunQQ7+J0WCj60D/b7mzmnYRM7J+1Bf7FcbR3n9Ef/JGvCtbZsAyQB79SWEAK5oR
359P06p8v4wT7sqWMn24UgfBf4rHiidQR+PY1hCHoD6zyfmM7s4q01fOLBxhbLWw
VX/xxcS5TZAYLHeK3ZJvID82lV4uGg6Vl5NA2N5TMzCiiHC3cndU/x47lJzfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsLWWaoSlLw83ttvRJYRD5ZxR5N4wHwYDVR0j
BBgwFoAUp3dwI5BNHV3mZSq/EFkxiNqTF5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3pGcTRVRWZiY3dMa3RwZVpoZnlvU1BxaW1HaHhMUU1WTjQ4eGFiYTlS
NU4vMC9BNzc3NzAyMzkwNEQxRDVERTY2NTJBQkYxMDU5MzE4OERBOTMxNzk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3Nzc3MDIzOTA0RDFENURF
NjY1MkFCRjEwNTkzMTg4REE5MzE3OTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N6RnE0VUVmYmN3TGt0cGVaaGZ5b1NQcWltR2h4TFFNVk40OHhhYmE5UjVOLzAv
MzIzMDMxMmUzNTM1MmUzMTM5MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByTfEMA0GCSqGSIb3DQEBCwUAA4IBAQCDBedHO9hb
rAhsKQMk1XksVkB7LZHVBvIsKOFWk5KxcVpcHlhZSPeBd8scxppcIQYtEFkGHdk6
gvf4F3p71P9/UivQtr/bEZeBPgB+iLOfDitvbZpsyhlVtPDijPOylXTmz/2v+VoJ
Sx8J5xqTn+aylIWPCsdBnV6WUr9ScDwusJf7MGi9A6ITTlOQC/BBuMHpdg/dF0ek
pYMJprvM9bdvZ69kBZ411Wy+bvmEel+kLxDp5kEWBzoDOdnipLvcOlAOUBLT1VZg
VB2/rO5XWeXMtV5LxjBUs0Cu4XksrTLVbLboW37GcAflQPdWL7vKxDFCbAHkSWkU
lGIaOi2EzylE
-----END CERTIFICATE-----
Generated at Thu Dec 18 19:53:23 2025 by rpki-client