This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          kv1FzY7jmh3UYKxQ0VRTwjVfk9dfI3L772103n6srXY=
Subject key identifier:   75:AA:02:81:EA:1E:57:A6:F1:2F:02:C1:0A:F8:3F:9D:D1:51:AB:5A
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       62C4053A89CEE2D4EFBE365EF19F428AD09DED49
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa
Signing time:             Tue 18 Nov 2025 14:48:30 +0000
ROA not before:           Tue 18 Nov 2025 14:43:30 +0000
ROA not after:            Tue 17 Nov 2026 14:48:30 +0000
asID:                     262393
IP address blocks:        177.129.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c4:05:3a:89:ce:e2:d4:ef:be:36:5e:f1:9f:42:8a:d0:9d:ed:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Nov 18 14:43:30 2025 GMT
            Not After : Nov 17 14:48:30 2026 GMT
        Subject: CN=75AA0281EA1E57A6F12F02C10AF83F9DD151AB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:86:a3:ec:fc:0e:dc:1d:f2:33:77:c5:8f:
                    c4:65:15:f9:7f:cd:f3:18:48:55:fb:69:cc:5d:47:
                    42:7e:db:95:18:a3:38:82:57:75:f8:02:9d:81:de:
                    81:cb:88:a6:19:ae:60:a5:80:05:92:66:af:81:3d:
                    1e:f8:c7:96:32:3f:f5:fd:5a:3e:b9:93:33:da:54:
                    83:00:08:89:5c:83:e2:aa:f3:cb:d4:0f:be:be:41:
                    e4:c2:75:e2:25:d5:d5:38:58:36:be:ab:c2:66:fc:
                    15:2f:ce:2e:ac:9c:e2:e2:0f:38:b2:70:f2:90:bf:
                    54:45:d8:21:11:4b:f9:ff:1c:15:54:b7:0c:f6:09:
                    5c:75:65:15:b3:af:99:7e:22:38:98:be:02:15:e8:
                    c8:ef:b9:46:72:d4:ca:ab:20:76:8d:0b:94:30:08:
                    21:0b:9e:87:c2:f5:56:ef:a8:29:03:f4:be:cd:45:
                    b7:01:38:a5:13:f6:55:bb:5f:ed:c7:16:e2:5b:ee:
                    94:e7:ce:39:4c:d0:5c:1b:9f:f6:b7:03:37:9c:c9:
                    60:78:aa:80:f4:f2:87:56:d0:36:76:4a:a1:b5:dc:
                    71:62:d8:47:36:c4:21:b7:d8:e8:d4:59:37:fa:98:
                    47:17:ea:a4:f3:b9:57:27:27:70:47:7e:15:c4:db:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AA:02:81:EA:1E:57:A6:F1:2F:02:C1:0A:F8:3F:9D:D1:51:AB:5A
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:fe:1b:aa:68:1f:d3:fe:b0:65:3d:23:60:8d:d2:59:14:
         83:9f:85:e5:8f:02:9a:f3:8b:b4:67:dc:33:49:15:57:70:b0:
         95:f3:d7:35:71:b1:bc:31:cf:dd:f8:78:eb:f5:5f:a9:1e:e6:
         63:98:26:80:68:76:7d:8e:d1:f8:a4:2b:e9:d8:49:35:c7:53:
         cb:52:be:0c:ab:da:52:e2:1a:54:73:6b:6b:44:71:3d:ec:96:
         8f:98:4b:a9:e9:25:99:d0:d9:ef:be:3e:ae:94:ed:c9:8e:c7:
         6a:12:53:d6:19:ea:70:4b:68:e1:a0:97:2c:2f:f2:a0:41:de:
         cd:66:af:05:57:cf:97:2b:39:0b:4b:66:8b:ad:f7:48:57:3d:
         e9:66:27:17:3e:ff:a1:2c:c2:45:e3:52:b8:35:e1:d1:7b:49:
         f8:2c:e4:45:ae:ff:8b:7e:64:23:f2:6b:c3:fa:36:0f:70:69:
         d6:68:ce:e3:3a:44:9d:bc:58:a9:11:f1:ee:9a:e8:65:86:77:
         58:cd:84:44:7f:c2:9d:9f:ca:44:a7:3b:23:d6:0d:cd:d8:7c:
         12:97:2d:af:f9:1e:74:b1:f4:88:b7:6a:84:54:cb:b6:af:40:
         43:c3:bd:8c:c4:dd:a3:34:61:c9:c0:bd:91:a4:2b:0c:73:d5:
         0d:cd:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:53 2025 by rpki-client