This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32332d3233203d3e203631373932.roa
File:                     3230312e35352e3139382e302f32332d3233203d3e203631373932.roa (raw, json)
Hash identifier:          +iT6dF9ZqAlNaO5oqMEXWGujgW+phO0Knt2Y+t63wM0=
Subject key identifier:   A8:55:9F:83:A7:28:B3:74:28:F5:DB:5A:1E:EE:A9:0A:92:F1:84:42
Certificate issuer:       /CN=A7777023904D1D5DE6652ABF10593188DA931795
Certificate serial:       29814EDB245EE4AF2B703671ADF94F3550D46F90
Authority key identifier: A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32332d3233203d3e203631373932.roa
Signing time:             Thu 11 Dec 2025 20:41:55 +0000
ROA not before:           Thu 11 Dec 2025 20:36:55 +0000
ROA not after:            Thu 10 Dec 2026 20:41:55 +0000
asID:                     61792
IP address blocks:        201.55.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 02:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:81:4e:db:24:5e:e4:af:2b:70:36:71:ad:f9:4f:35:50:d4:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7777023904D1D5DE6652ABF10593188DA931795
        Validity
            Not Before: Dec 11 20:36:55 2025 GMT
            Not After : Dec 10 20:41:55 2026 GMT
        Subject: CN=A8559F83A728B37428F5DB5A1EEEA90A92F18442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:24:94:8f:dd:af:8d:49:43:ce:2f:1f:f6:
                    db:96:0c:25:50:fa:77:8b:4c:92:90:a8:15:18:5e:
                    f4:f5:59:d6:ca:9d:e0:b8:f3:ce:fc:2e:ba:76:ce:
                    d9:8e:41:f6:a3:10:31:f4:4f:a1:0a:28:50:4e:a0:
                    9e:b3:cf:a6:15:52:fb:66:e8:6a:ee:fd:b5:5e:65:
                    23:fc:f7:db:1d:12:0e:d4:b6:86:9f:36:89:37:8b:
                    b8:f8:f8:b4:5a:ab:3e:c1:7e:af:5e:17:15:16:ce:
                    6f:05:91:d3:9d:47:f8:76:58:f6:c9:be:88:ac:ae:
                    65:30:aa:da:b0:c2:7a:65:53:dd:e3:cc:b3:95:4c:
                    9b:ba:d9:61:f4:7d:c5:5d:81:7c:15:f4:f9:0a:25:
                    54:33:72:00:7b:d9:57:d7:8c:a0:41:2a:9c:d4:0a:
                    2d:59:84:fd:c3:a8:38:07:e8:bf:71:7d:a6:0b:ec:
                    2b:5e:36:f8:f2:97:70:a0:86:b2:42:11:62:2c:18:
                    75:6a:96:5f:a2:03:55:76:15:64:c1:2d:21:6b:7d:
                    33:68:b3:30:32:2e:0a:5d:ad:4b:9f:65:31:d7:ba:
                    bc:b1:90:cb:8b:17:0c:a7:cf:70:cb:2f:ee:56:fe:
                    4d:5b:85:11:a5:4b:f7:91:d3:78:ae:f4:d4:df:bc:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:55:9F:83:A7:28:B3:74:28:F5:DB:5A:1E:EE:A9:0A:92:F1:84:42
            X509v3 Authority Key Identifier:
                keyid:A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32332d3233203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:14:b7:51:45:ab:00:45:3f:8c:45:a1:e3:24:6f:75:d3:07:
         cc:6f:02:2a:b1:91:a4:fc:78:74:bf:4b:cd:4c:8e:fe:46:cd:
         9d:d7:ef:3e:df:c3:48:5c:12:fc:c6:f3:8e:5f:9b:cf:83:28:
         e5:d1:84:c0:c6:8c:3a:93:ec:0f:2d:f2:97:e7:2f:0e:f7:a1:
         2f:37:fc:b5:8d:26:8b:ed:de:69:0b:31:ef:0c:a3:37:76:e7:
         15:30:7f:85:2a:ef:ec:14:ac:d1:45:f1:98:2a:7a:5f:d3:74:
         82:66:e6:93:56:51:65:37:11:57:a4:ce:ca:76:30:00:15:d1:
         e0:dd:c4:02:58:14:08:98:2c:31:3a:65:13:dd:31:31:5c:07:
         e5:8f:b5:aa:81:68:f2:b5:ab:65:87:47:4a:11:e4:84:50:ab:
         33:6a:9d:94:bd:9b:4b:9f:19:d2:fd:83:89:eb:ab:2a:08:e4:
         df:e3:7d:8f:15:82:46:96:78:35:b8:0b:56:0e:34:b1:41:8e:
         2f:cd:3b:5a:fc:06:69:99:35:13:9c:12:0c:a6:7d:e1:c3:1d:
         79:b7:ea:82:e3:bd:0a:af:7b:99:5c:e9:db:59:ba:4d:5a:45:
         44:c3:a7:a6:3d:88:77:a1:05:54:75:6d:e6:ad:19:87:af:fa:
         ac:38:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:04:59 2025 by rpki-client