This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38322e302f32332d3233203d3e203631373930.roa
File:                     3230302e32342e38322e302f32332d3233203d3e203631373930.roa (raw, json)
Hash identifier:          ucncLo3QE6VEcou6WFEOriwsgtfDi78oaaEDLbDdkO0=
Subject key identifier:   A7:F2:54:96:0A:F5:F8:B0:DA:51:4A:94:74:4A:A4:81:3C:1F:5C:D8
Certificate issuer:       /CN=1BD6D3D1184A97F513FD0A1CE0187272414B0D00
Certificate serial:       25E0431317F0B6B317924792A9E831040BAC5B16
Authority key identifier: 1B:D6:D3:D1:18:4A:97:F5:13:FD:0A:1C:E0:18:72:72:41:4B:0D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38322e302f32332d3233203d3e203631373930.roa
Signing time:             Mon 01 Dec 2025 12:55:38 +0000
ROA not before:           Mon 01 Dec 2025 12:50:38 +0000
ROA not after:            Mon 30 Nov 2026 12:55:38 +0000
asID:                     61790
IP address blocks:        200.24.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.crl
                          rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 01:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e0:43:13:17:f0:b6:b3:17:92:47:92:a9:e8:31:04:0b:ac:5b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD6D3D1184A97F513FD0A1CE0187272414B0D00
        Validity
            Not Before: Dec  1 12:50:38 2025 GMT
            Not After : Nov 30 12:55:38 2026 GMT
        Subject: CN=A7F254960AF5F8B0DA514A94744AA4813C1F5CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:21:3a:76:05:53:ff:28:90:6f:a1:fe:c6:40:
                    ec:dd:9d:86:94:ba:f6:30:26:62:9b:47:6d:5a:c6:
                    60:7d:8a:82:c8:2a:fe:c2:f1:38:f7:12:7c:17:17:
                    ca:6b:84:2d:81:39:4e:2d:11:f3:38:64:5f:31:bf:
                    95:50:76:76:58:73:7c:7d:06:7c:04:d1:be:a3:81:
                    25:24:2f:9d:34:dc:a4:28:8b:6d:07:de:fa:36:b9:
                    3f:d5:ad:30:ef:ad:c3:ca:71:5b:a2:14:1d:45:6f:
                    38:8d:82:31:bc:74:d7:1c:f4:6b:77:e8:b2:75:00:
                    59:e5:2c:df:32:68:ff:f4:53:07:21:a2:05:91:39:
                    04:b2:6d:f7:85:4f:c4:99:42:03:a5:92:f6:a5:3f:
                    f5:c9:a8:46:f1:30:c6:af:d3:24:5e:d8:71:df:fb:
                    3e:6a:29:cc:ab:a2:16:45:f6:cb:51:f5:55:0f:74:
                    14:45:2f:92:89:84:80:e0:3b:f0:25:0e:95:3e:1f:
                    cb:24:1d:94:06:bc:4b:df:d7:08:ac:46:dc:1c:2d:
                    81:1e:d5:27:bc:bf:07:79:31:9e:50:a3:03:61:40:
                    b0:9c:e9:94:30:cd:9d:5c:06:79:d2:19:a2:b2:fc:
                    db:a5:4a:64:88:e1:20:57:bd:9c:d8:c7:d3:b3:64:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F2:54:96:0A:F5:F8:B0:DA:51:4A:94:74:4A:A4:81:3C:1F:5C:D8
            X509v3 Authority Key Identifier:
                keyid:1B:D6:D3:D1:18:4A:97:F5:13:FD:0A:1C:E0:18:72:72:41:4B:0D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38322e302f32332d3233203d3e203631373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:9a:31:ec:0b:8b:01:f2:e3:5c:26:3c:d2:4b:4c:36:55:c6:
         9a:20:8a:de:ca:e1:a0:33:a5:75:b5:37:e7:4c:c4:58:3f:db:
         f2:51:bd:81:31:d8:12:ca:42:d3:0d:de:2f:24:f1:9c:3f:bb:
         d1:15:08:1b:5b:d3:46:b4:be:db:de:00:a4:0a:64:96:1a:f2:
         66:88:da:30:d4:e5:43:50:e2:5f:97:dc:10:42:7a:74:94:d6:
         a5:e0:5a:52:3c:4b:98:6f:7c:8b:86:65:75:63:89:8e:ce:a4:
         3c:35:ef:07:6f:47:96:b1:98:35:f1:16:e6:b0:b7:b8:33:e2:
         97:49:f8:e3:97:a9:e7:ed:56:fc:1f:a7:58:ef:ca:7c:d3:22:
         9b:11:ef:8d:45:02:3c:bc:a3:b1:ad:ff:0b:68:a7:31:bc:b1:
         df:4d:2f:5d:64:fc:27:41:5c:7e:64:1f:a5:bf:f4:62:98:b5:
         3d:81:43:98:8a:bc:92:13:c2:24:e5:2e:a1:0c:dd:4a:df:e1:
         cd:34:79:36:27:3a:4d:06:7b:57:29:9e:d2:6e:a3:23:7a:51:
         99:dd:9e:1c:b6:2e:75:3f:13:00:41:41:8c:5e:f4:64:b3:54:
         5b:4f:d4:31:03:15:64:be:f3:61:ef:60:6e:7f:87:fc:0a:4f:
         aa:4f:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:35 2025 by rpki-client