This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38342e302f32322d3232203d3e203631373930.roa
File:                     3230302e32342e38342e302f32322d3232203d3e203631373930.roa (raw, json)
Hash identifier:          9Jej8I8jXU0wpoND+1AZKOwVWCLET5qW+1YswYfXDNU=
Subject key identifier:   00:75:DB:4E:3A:64:AB:D0:14:76:78:94:78:68:9C:D9:9E:67:40:8C
Certificate issuer:       /CN=1BD6D3D1184A97F513FD0A1CE0187272414B0D00
Certificate serial:       59C28931CCE216336D04FE6F5E17647708429C8A
Authority key identifier: 1B:D6:D3:D1:18:4A:97:F5:13:FD:0A:1C:E0:18:72:72:41:4B:0D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38342e302f32322d3232203d3e203631373930.roa
Signing time:             Mon 01 Dec 2025 12:55:44 +0000
ROA not before:           Mon 01 Dec 2025 12:50:44 +0000
ROA not after:            Mon 30 Nov 2026 12:55:44 +0000
asID:                     61790
IP address blocks:        200.24.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.crl
                          rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 01:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c2:89:31:cc:e2:16:33:6d:04:fe:6f:5e:17:64:77:08:42:9c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD6D3D1184A97F513FD0A1CE0187272414B0D00
        Validity
            Not Before: Dec  1 12:50:44 2025 GMT
            Not After : Nov 30 12:55:44 2026 GMT
        Subject: CN=0075DB4E3A64ABD01476789478689CD99E67408C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2f:46:07:8b:e9:7f:ef:b3:ec:69:64:54:d3:
                    87:35:97:1e:f2:5b:bf:ed:56:3f:b3:8f:5e:df:f5:
                    a8:95:a6:fd:8d:54:ab:a8:dd:34:e1:b3:78:df:00:
                    34:f3:c0:af:a3:43:1b:61:52:16:7a:c9:fd:61:79:
                    ef:3c:c2:77:9a:9a:16:08:dd:e7:f6:05:d4:d7:3d:
                    b2:88:8d:dc:ec:23:a7:91:59:ae:59:2d:eb:17:2f:
                    47:8f:0f:da:a8:40:64:f1:49:fd:17:e2:8f:42:7d:
                    90:10:44:cf:b6:6f:ae:25:0e:fe:74:0f:18:67:3b:
                    1a:49:c1:8b:7f:4b:6b:1c:e0:2d:11:7f:29:cc:a6:
                    db:5f:f6:1f:0c:a2:09:bc:01:95:55:09:db:f8:72:
                    fc:b9:c0:55:cf:4e:0c:39:a6:71:d9:21:8c:94:9e:
                    a3:e4:5b:eb:3b:cf:a0:ee:ba:cc:52:ce:6f:cd:72:
                    e1:8d:5f:7b:ac:24:0a:f5:f9:79:d2:fc:e5:91:0d:
                    2c:5c:ff:40:96:af:dd:8b:55:25:31:26:f4:c8:54:
                    21:50:6f:66:96:3b:af:ab:23:0b:6f:47:41:f7:6b:
                    50:7b:cc:7b:fa:db:ce:90:45:05:21:8c:17:d3:85:
                    bb:f2:73:0c:51:f1:45:fa:55:8e:6f:79:ae:ef:3a:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:75:DB:4E:3A:64:AB:D0:14:76:78:94:78:68:9C:D9:9E:67:40:8C
            X509v3 Authority Key Identifier:
                keyid:1B:D6:D3:D1:18:4A:97:F5:13:FD:0A:1C:E0:18:72:72:41:4B:0D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38342e302f32322d3232203d3e203631373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:8f:f0:49:ec:45:4b:c2:e9:bb:09:a2:47:df:4c:9f:8a:
         5a:79:d5:fb:89:c2:3f:6d:0c:3e:a6:e7:9d:39:d3:04:b1:9a:
         3b:53:62:89:db:93:f0:4e:cd:6b:f2:b6:db:b1:6c:b3:c6:97:
         22:d5:64:fe:9f:bb:be:99:9f:a8:b7:8c:03:0a:24:51:a3:5a:
         ec:50:96:6c:c9:ce:70:3e:e3:5a:70:3b:b0:f5:6e:e9:75:6f:
         6b:fd:17:44:bf:6b:cb:b1:1c:2a:a4:dc:f1:11:b0:41:c7:f1:
         64:a4:17:63:1b:6d:64:6f:a8:df:b4:2c:af:0d:7e:2d:a3:72:
         3c:de:9f:9b:97:80:cd:dc:83:b4:26:7c:6d:5d:2f:1b:af:1b:
         a7:14:46:d4:e7:f4:4b:7f:1b:fe:69:86:4b:77:6a:d4:41:8d:
         22:3d:cf:3c:39:3f:e8:09:7c:3e:06:67:9a:c6:4d:97:9e:90:
         d3:91:b8:67:18:08:3c:d3:46:8f:a8:be:b4:9f:b2:fc:41:77:
         fa:4d:9f:23:ce:79:d4:3d:a2:1e:f1:f8:70:8d:4e:b0:15:f3:
         fb:0e:37:5b:bd:5b:41:c5:33:b1:fd:29:13:ee:1f:5d:a4:ac:
         c0:75:bc:8c:c0:88:53:99:ab:c9:de:c5:b2:47:19:a7:12:25:
         97:6f:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:17 2025 by rpki-client