This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32332d3233203d3e203532383338.roa
File:                     3134332e3230322e39322e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier:          oTHW7acarkzxPbM+pG5owJkC9i1Hqk/oTrh9ORmR6sw=
Subject key identifier:   A3:5F:BB:C8:51:F1:B3:DD:88:67:42:8C:3E:CE:9D:55:E7:E5:29:35
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       520261C52A85898E4087FF7F00CCF622301476ED
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32332d3233203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:36:57 +0000
ROA not before:           Wed 03 Dec 2025 00:31:57 +0000
ROA not after:            Wed 02 Dec 2026 00:36:57 +0000
asID:                     52838
IP address blocks:        143.202.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:02:61:c5:2a:85:89:8e:40:87:ff:7f:00:cc:f6:22:30:14:76:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:31:57 2025 GMT
            Not After : Dec  2 00:36:57 2026 GMT
        Subject: CN=A35FBBC851F1B3DD8867428C3ECE9D55E7E52935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:0a:fa:db:24:c1:85:24:4e:c3:1f:ce:8a:
                    06:79:20:5c:97:6a:8a:ec:fa:aa:de:46:e1:f3:ee:
                    f5:82:02:00:c9:97:6e:a5:e3:a2:9d:be:7f:44:96:
                    cd:6c:b8:c1:84:5a:42:86:7e:0d:99:83:cb:35:12:
                    75:9f:be:6c:cd:37:6c:34:24:29:3c:5e:fb:55:5e:
                    de:3b:7f:a0:8f:2f:e8:95:b9:ce:0a:9a:35:5a:7a:
                    4f:52:d2:99:9b:90:8a:78:f9:2b:7e:20:c1:6e:06:
                    b0:3f:41:0a:8f:1b:db:b1:8b:69:e9:f0:f8:92:4e:
                    cd:fe:22:35:2b:31:12:e5:0e:50:77:32:7a:a4:36:
                    9a:5c:8a:6f:08:75:97:d1:f1:dc:fa:6b:55:6f:df:
                    a2:e3:36:10:a0:e1:a8:dd:10:93:e4:67:84:f2:df:
                    4e:15:7a:83:f8:53:e9:fd:f5:72:62:86:8c:69:ab:
                    bf:19:1b:4c:45:f4:75:66:61:b3:ea:a1:4c:15:0b:
                    bf:df:10:d8:70:24:9f:3e:13:7a:1a:df:3e:22:eb:
                    77:dc:8f:29:07:f9:68:0f:f9:f3:7e:7a:6c:07:57:
                    91:4f:b4:73:e4:e5:ca:91:5f:68:df:0d:29:78:f5:
                    fe:fa:8a:15:c4:7c:41:39:05:a0:37:b8:2c:0e:bd:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5F:BB:C8:51:F1:B3:DD:88:67:42:8C:3E:CE:9D:55:E7:E5:29:35
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32332d3233203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:cb:2b:cb:5b:fa:32:74:7c:a7:74:08:2f:34:20:fd:64:a5:
         2a:85:b4:03:64:3f:e4:3a:f6:4d:f2:7d:98:04:23:6d:6e:1b:
         a5:81:70:88:c6:bd:69:5f:17:b1:df:ac:3d:86:a7:41:01:4e:
         e8:0e:0c:d9:97:63:a3:95:e1:3f:7a:37:c3:a8:c8:64:ed:f4:
         21:fa:21:49:06:5e:d7:ec:ef:ae:97:e2:6e:35:08:33:4f:34:
         31:db:25:1f:56:d3:98:fc:9b:1a:92:9d:1f:c1:47:19:6f:f6:
         91:f3:b6:0a:5c:94:fc:24:84:4a:74:af:48:44:1b:af:95:62:
         19:6c:8a:64:ca:55:a5:41:8c:06:43:e0:79:3e:03:32:b1:bb:
         6c:82:65:11:af:be:f2:da:b0:30:ea:75:11:01:c9:80:4e:37:
         21:9b:ef:41:23:44:f5:b2:d5:b0:14:dc:94:9e:df:85:38:c6:
         9c:e4:c1:24:95:e7:64:f2:b8:75:f0:e0:b8:a7:50:d1:f8:c1:
         3b:3a:19:28:84:70:d8:b7:a4:c9:4f:30:3f:89:c2:a9:c1:38:
         e1:f0:60:b8:5d:81:82:af:81:89:61:74:51:9f:8f:20:79:66:
         fd:e6:fc:36:b5:f8:8c:f1:72:27:b8:0a:f1:46:6b:2a:b0:eb:
         da:5c:5d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:17 2025 by rpki-client