This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32352e302f32342d3234203d3e203631383233.roa
File:                     3230312e3232322e32352e302f32342d3234203d3e203631383233.roa (raw, json)
Hash identifier:          UH+oFoq2yann0hghXVWtajLFKBb7Ef5WZDDqQ2Pw1dY=
Subject key identifier:   DB:F2:A2:DE:A7:42:AD:81:44:29:B3:09:79:9E:D4:54:E3:82:4B:8E
Certificate issuer:       /CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
Certificate serial:       74C2988228677D50675DA7F2F77DB9855CF24EC0
Authority key identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32352e302f32342d3234203d3e203631383233.roa
Signing time:             Fri 09 Jan 2026 19:17:42 +0000
ROA not before:           Fri 09 Jan 2026 19:12:42 +0000
ROA not after:            Fri 08 Jan 2027 19:17:42 +0000
asID:                     61823
IP address blocks:        201.222.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl
                          rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c2:98:82:28:67:7d:50:67:5d:a7:f2:f7:7d:b9:85:5c:f2:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
        Validity
            Not Before: Jan  9 19:12:42 2026 GMT
            Not After : Jan  8 19:17:42 2027 GMT
        Subject: CN=DBF2A2DEA742AD814429B309799ED454E3824B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:5a:08:92:20:f0:5f:74:2c:02:22:06:f9:
                    1a:80:f0:ce:db:42:cb:d0:3f:31:60:3f:c5:14:ad:
                    31:e3:f8:e2:1d:23:87:10:65:74:41:53:7f:94:d6:
                    16:d9:19:ac:09:49:67:3e:23:a7:52:86:70:11:4d:
                    57:b3:0e:4c:d7:66:35:48:05:81:66:16:54:f3:e4:
                    bb:c1:27:0a:e6:12:17:35:09:bd:bb:23:3c:55:87:
                    60:9a:60:57:72:26:d9:4c:4b:a3:18:38:82:37:95:
                    ff:d6:18:d7:9c:2c:24:f1:5b:63:bf:8a:d7:d3:fc:
                    ff:c5:cb:99:2b:a0:07:42:a5:83:c8:20:9b:c6:c1:
                    b5:3f:90:fa:1f:2a:4a:21:e1:73:fe:69:fa:4d:0a:
                    f1:df:93:9d:30:47:43:ee:ad:a3:59:3c:ec:28:69:
                    7c:d7:8a:1c:25:4d:b8:36:3a:87:fd:20:58:8d:e0:
                    59:18:6e:78:12:39:ef:42:60:ef:d9:a9:0d:d0:98:
                    2b:d8:a2:8f:9a:23:54:2c:06:9e:a5:4f:5e:0c:75:
                    d5:c1:8f:32:72:ae:66:7e:19:4d:fa:aa:24:e0:48:
                    76:21:d6:9d:49:c7:85:f5:ed:b2:cb:24:9c:44:48:
                    c0:3e:a7:2f:96:68:dd:2d:6f:39:ec:02:0b:bc:4c:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F2:A2:DE:A7:42:AD:81:44:29:B3:09:79:9E:D4:54:E3:82:4B:8E
            X509v3 Authority Key Identifier:
                keyid:09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/3230312e3232322e32352e302f32342d3234203d3e203631383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c9:6a:b5:ba:e6:75:db:26:02:b1:f9:db:ba:51:9b:d0:87:
         e6:63:42:f3:cc:e8:a9:ff:fb:37:b8:ef:6a:23:8e:37:b6:b9:
         0b:af:d0:ee:37:9b:9e:12:6d:52:13:77:9e:ed:37:00:12:94:
         65:6e:4b:3c:e4:4f:5d:bd:ed:d2:6a:de:cd:82:02:af:ce:5b:
         52:1e:d9:c4:47:94:76:17:b8:0c:7a:6a:62:d6:dc:d8:d9:f4:
         5f:36:6b:7b:d6:3c:57:af:04:cc:8e:58:e7:86:fd:05:ae:d2:
         f4:a6:0a:bf:42:ab:2b:22:71:0e:5b:44:76:c1:ca:36:42:54:
         99:f2:e1:e7:4d:5b:5b:15:e2:64:4c:d4:e1:6a:97:9b:c0:24:
         76:28:c6:75:54:70:43:10:f5:b8:d6:0b:9f:7a:e4:b1:59:fd:
         82:12:d0:93:e6:7e:36:d8:91:c2:57:4a:b6:6d:5d:6d:a7:8c:
         35:b4:94:08:5c:d4:d3:08:46:b0:74:11:ec:4c:8b:c2:ae:f6:
         1d:b5:ce:fa:39:f5:57:e9:61:5c:05:db:3c:dd:b6:3d:5b:ec:
         e8:5b:67:66:07:d0:b9:6b:84:2d:fb:8b:ae:bf:25:0b:44:7e:
         be:8d:07:34:8e:0a:d7:96:a5:4b:48:c8:0d:ac:8b:b2:db:ab:
         ad:2d:02:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:50 2026 by rpki-client