This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32322d3332203d3e203631373834.roa
File:                     3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (raw, json)
Hash identifier:          evcJoe8kl899b+xGomFq0rjQEr0vjGkY2XfjdeQy63c=
Subject key identifier:   58:70:52:55:B1:B7:FA:57:E9:3D:D6:E3:D1:6D:71:A8:A7:8A:04:38
Certificate issuer:       /CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
Certificate serial:       42E228E33AF62E35FF001FAC0C84402D306435E5
Authority key identifier: 32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32322d3332203d3e203631373834.roa
Signing time:             Thu 04 Dec 2025 14:34:42 +0000
ROA not before:           Thu 04 Dec 2025 14:29:42 +0000
ROA not after:            Thu 03 Dec 2026 14:34:42 +0000
asID:                     61784
IP address blocks:        201.55.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl
                          rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e2:28:e3:3a:f6:2e:35:ff:00:1f:ac:0c:84:40:2d:30:64:35:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
        Validity
            Not Before: Dec  4 14:29:42 2025 GMT
            Not After : Dec  3 14:34:42 2026 GMT
        Subject: CN=58705255B1B7FA57E93DD6E3D16D71A8A78A0438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:ff:7e:d6:52:57:21:07:5f:15:0c:af:cb:
                    3b:f3:bc:a3:ce:94:bb:eb:b1:00:54:20:07:b8:33:
                    dc:8e:3a:5f:7a:9c:da:45:3a:9a:61:3b:86:d2:1a:
                    ac:bb:54:3d:93:57:cb:e8:da:36:cc:df:e0:be:f4:
                    52:1d:2f:84:7b:0b:a1:de:d0:7e:00:90:81:37:b8:
                    94:9b:31:1e:9e:09:9c:a7:1a:69:43:a3:a4:59:0e:
                    c2:28:50:cd:aa:f5:0f:6d:7f:98:01:d7:92:79:96:
                    21:95:4f:e9:a5:d5:20:08:54:d5:65:c1:d5:e5:1f:
                    4f:8a:88:3c:54:7d:e2:46:c6:41:5d:a8:8e:ce:ed:
                    29:ee:a4:b0:77:4e:98:b6:ea:4d:ad:ee:ea:df:0a:
                    fc:b4:0d:62:1b:6d:03:79:c1:68:02:5e:56:9a:1e:
                    25:3b:b8:29:91:1e:61:af:71:a1:dc:4e:78:01:0e:
                    a8:6e:40:f3:cc:1d:72:74:2e:2c:42:0e:40:5e:8d:
                    bb:73:77:dc:a3:bb:f6:1f:b8:68:c9:ef:ed:a3:9c:
                    9f:e4:7d:7d:c2:1f:5f:0d:f5:7e:46:4a:9c:6a:ee:
                    86:f5:2c:1d:d0:04:de:73:ac:bd:73:c6:cf:b7:f2:
                    6e:67:47:9c:f0:cd:c2:91:47:60:1b:16:5e:f5:db:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:70:52:55:B1:B7:FA:57:E9:3D:D6:E3:D1:6D:71:A8:A7:8A:04:38
            X509v3 Authority Key Identifier:
                keyid:32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32322d3332203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:28:7b:b5:84:b9:98:bc:31:27:64:70:a6:f3:a7:ba:21:e2:
         ef:ec:87:c2:25:fc:19:21:a9:d7:a8:63:05:33:1b:b2:29:fc:
         84:e4:54:80:ad:2c:d0:34:54:a6:45:7f:38:dc:21:56:ad:13:
         62:0c:11:ad:56:6c:fe:44:80:82:76:d2:61:74:cf:17:de:65:
         4c:33:63:b1:df:b6:61:d1:5a:90:ce:b0:dd:ec:78:c5:9f:8d:
         2e:cb:cb:fc:b8:0d:1a:bb:62:e1:80:70:b8:22:49:1b:89:d5:
         b9:90:61:ae:f4:54:82:cc:89:d4:ae:9a:09:b5:54:d3:06:1c:
         df:1f:3b:d0:db:d3:e3:8f:07:51:50:10:57:79:c0:31:a2:26:
         1e:1a:7f:b0:ad:dd:02:c0:34:c7:bd:60:14:61:92:b2:15:5d:
         5b:51:fa:7d:78:68:15:a6:3e:f4:cd:44:14:22:66:e2:19:8e:
         89:ab:01:f0:94:39:8a:4f:f5:08:05:e7:52:4f:11:4e:b8:6f:
         93:d1:cd:79:e0:00:49:10:9e:04:28:e8:c8:2d:8a:aa:34:30:
         6f:e1:1b:ce:dd:c8:ab:e5:c7:c9:c4:5c:8d:e2:f7:3a:90:02:
         cd:ac:00:15:e3:3d:c8:c3:89:40:26:e0:43:4b:05:58:30:7a:
         19:c7:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:41:31 2025 by rpki-client