This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3230302e35332e33302e302f32342d3234203d3e203533303632.roa
File:                     3230302e35332e33302e302f32342d3234203d3e203533303632.roa (raw, json)
Hash identifier:          MEZtq9RNlGau0ihc0Sobz1Ljc56nmL15wt8D4W9kqoo=
Subject key identifier:   8B:12:8B:3B:FF:7F:FC:CC:3C:5B:03:CA:7A:43:42:6D:4D:69:91:F1
Certificate issuer:       /CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
Certificate serial:       2F66EFABC4039EFD57823754107B4A46AA2AF952
Authority key identifier: 87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3230302e35332e33302e302f32342d3234203d3e203533303632.roa
Signing time:             Fri 16 Jan 2026 17:26:01 +0000
ROA not before:           Fri 16 Jan 2026 17:21:01 +0000
ROA not after:            Fri 15 Jan 2027 17:26:01 +0000
asID:                     53062
IP address blocks:        200.53.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:66:ef:ab:c4:03:9e:fd:57:82:37:54:10:7b:4a:46:aa:2a:f9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
        Validity
            Not Before: Jan 16 17:21:01 2026 GMT
            Not After : Jan 15 17:26:01 2027 GMT
        Subject: CN=8B128B3BFF7FFCCC3C5B03CA7A43426D4D6991F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:23:5b:e9:d1:32:8c:a8:19:39:5e:6f:d4:
                    d2:aa:38:b2:df:a8:17:d6:92:fc:23:bb:19:bd:e0:
                    fc:ab:bf:80:99:73:21:34:63:79:b9:0b:12:b0:ce:
                    31:b7:fc:2b:33:c7:34:f5:59:d9:45:58:37:a6:61:
                    3f:f2:bc:ed:c1:9b:8a:67:ba:c5:27:0b:77:d9:68:
                    3d:e2:00:fb:45:d5:46:cc:04:db:c3:a4:ea:6c:f0:
                    ab:ad:89:69:fa:b8:e4:0a:77:ed:91:e2:b6:f6:46:
                    3f:ba:4e:4d:e5:fb:60:46:c6:37:e6:e2:67:de:8d:
                    01:17:39:87:97:00:e8:76:55:3c:15:e8:53:42:43:
                    f9:56:63:2d:80:53:04:94:5d:b5:f5:d7:83:78:1c:
                    70:51:b0:bf:5f:c2:d8:02:66:e4:9d:48:81:56:53:
                    eb:92:45:ac:34:f2:c9:89:15:9e:b4:99:79:36:fa:
                    c4:38:4e:e1:3a:94:36:57:07:cf:6e:f8:2d:f6:31:
                    ea:08:a9:b3:86:cc:ee:01:31:38:d2:95:42:80:b4:
                    e0:34:68:5b:77:ae:35:7c:11:a7:62:18:9c:0f:d4:
                    b4:cf:f9:76:b5:c7:a5:93:9d:fa:5e:27:0a:d5:7b:
                    45:fc:f4:7d:14:49:14:cd:79:7e:ec:ba:e1:6c:79:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:12:8B:3B:FF:7F:FC:CC:3C:5B:03:CA:7A:43:42:6D:4D:69:91:F1
            X509v3 Authority Key Identifier:
                keyid:87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3230302e35332e33302e302f32342d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d5:77:f5:cf:00:f9:d1:95:dc:b1:7d:44:38:f6:7b:ed:4c:
         f6:2d:29:74:0e:cd:e5:fd:62:98:bc:8c:cc:5b:aa:84:72:fa:
         f4:a2:a1:05:56:7d:b0:62:4e:8b:fd:1b:54:4f:ec:83:20:b7:
         0b:a4:f4:6d:bb:06:6a:75:4d:24:d8:41:5c:72:ca:f4:e4:8e:
         26:20:27:dd:ff:7a:7d:97:36:46:9e:d0:2f:ad:27:31:41:e3:
         aa:2f:bd:20:c6:ae:49:3b:9e:df:8a:9e:69:38:ea:f9:f7:b0:
         09:12:47:95:18:67:21:34:97:28:df:46:1a:cb:01:61:0b:48:
         58:44:50:58:a3:89:ef:54:b9:b2:4d:64:0f:98:b9:1b:76:02:
         cd:7e:62:5d:f0:80:7c:cd:36:40:c2:de:fc:e0:ed:eb:de:e9:
         57:d7:3c:ed:74:9c:a8:6d:b0:95:b0:5e:f3:52:8c:b6:ce:be:
         39:97:66:a6:09:f2:31:73:77:06:68:08:73:84:ad:a4:5c:99:
         a9:81:a8:78:d3:96:9a:98:a8:fa:a9:56:ba:39:7b:e1:af:38:
         c1:3d:91:d8:72:01:bb:44:3d:7d:af:1e:c7:f3:c8:5f:71:18:
         fb:b9:23:77:b0:d1:8e:0b:82:72:24:eb:4b:52:45:63:41:7b:
         12:89:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:58:03 2026 by rpki-client