This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3234203d3e20323633343638.roa
File:                     3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (raw, json)
Hash identifier:          7l6dXdKV/Qxm67y6Yp+xmZNlo7Mb3/J+6Jrg7LuDGnM=
Subject key identifier:   A8:DC:ED:47:7C:3E:45:61:4C:EA:45:4C:1D:85:71:0F:42:3D:08:BB
Certificate issuer:       /CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560
Certificate serial:       47AF287CCDCBF781F03159F3BDAC1939EE3D1BA4
Authority key identifier: 34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3234203d3e20323633343638.roa
Signing time:             Mon 01 Dec 2025 18:53:31 +0000
ROA not before:           Mon 01 Dec 2025 18:48:31 +0000
ROA not after:            Mon 30 Nov 2026 18:53:31 +0000
asID:                     263468
IP address blocks:        177.73.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl
                          rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:af:28:7c:cd:cb:f7:81:f0:31:59:f3:bd:ac:19:39:ee:3d:1b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560
        Validity
            Not Before: Dec  1 18:48:31 2025 GMT
            Not After : Nov 30 18:53:31 2026 GMT
        Subject: CN=A8DCED477C3E45614CEA454C1D85710F423D08BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:59:af:be:67:5e:94:64:c4:21:d2:25:07:18:
                    d8:32:86:0e:c9:f8:a9:f1:0b:bb:b6:3f:9a:b6:5e:
                    53:a4:9e:86:c5:87:c0:24:9a:96:80:52:7f:fb:57:
                    8d:1c:c3:24:a9:55:4e:c2:b4:a8:b5:6b:fd:55:c6:
                    fe:48:57:a5:40:10:b5:b9:7c:c6:7c:d0:1d:5e:77:
                    6d:04:e2:6d:4b:67:b1:eb:4e:c2:6d:01:a0:39:ff:
                    6e:83:f5:c1:20:d8:e7:5c:3f:c9:ce:97:bc:e5:83:
                    9d:3d:ba:d6:ee:97:1f:b3:d1:4f:5a:1e:16:3d:77:
                    d3:16:3a:8e:58:95:8b:75:5e:65:44:82:ab:b1:eb:
                    17:49:82:63:71:12:56:46:c6:1c:81:42:ba:95:65:
                    7b:ed:39:a5:63:cb:6c:24:8c:af:ae:fe:04:bb:82:
                    7e:b8:46:3c:06:a2:22:02:06:46:d4:97:50:27:fd:
                    b6:25:12:0f:79:3b:18:6a:e2:e8:4a:b9:87:a8:08:
                    04:e3:ef:82:fc:5e:3b:0b:d0:eb:c7:a3:4b:42:9a:
                    84:1e:6f:82:47:70:81:b3:f2:12:27:b6:e9:3e:fe:
                    32:32:9c:3a:cf:ae:6e:59:6b:c5:92:32:e5:b4:ee:
                    11:b7:92:5d:e3:d1:bf:c0:78:60:fe:7b:92:f2:14:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DC:ED:47:7C:3E:45:61:4C:EA:45:4C:1D:85:71:0F:42:3D:08:BB
            X509v3 Authority Key Identifier:
                keyid:34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3234203d3e20323633343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:e5:72:91:33:85:e6:79:0b:f3:e2:4d:de:39:c1:fe:36:05:
         d1:23:2e:24:f1:8f:2f:b5:f5:61:b1:32:25:1a:62:61:7b:00:
         d7:df:96:4a:7b:b3:1a:a1:56:77:f2:8c:b4:56:1a:e0:9a:22:
         d3:a0:b2:d0:1e:92:5a:8f:a7:42:a8:87:03:eb:70:f2:6a:8c:
         3e:28:30:34:ff:42:ff:d7:42:29:db:7a:2b:57:6f:28:b6:2b:
         78:5e:a1:59:47:7b:bf:c2:36:34:72:da:12:c7:92:2b:7f:03:
         9b:c8:c0:d8:e4:53:d4:7d:0d:02:66:09:14:1e:02:79:31:ec:
         67:af:ee:c7:63:45:7e:91:f4:be:8a:ab:2f:d7:bf:e5:23:f8:
         b2:1e:bc:57:5f:a2:3a:20:22:fb:72:31:f1:62:23:6e:d7:5e:
         6d:f0:4b:2e:2c:b1:f2:3b:3e:e3:7f:3a:52:b5:9b:47:06:25:
         9e:69:90:cc:88:1b:05:bc:b9:1b:32:b3:da:f5:d5:93:00:54:
         82:97:2e:24:6f:58:c5:4a:4a:f6:9f:ab:60:33:bd:6e:9b:ff:
         4f:67:58:91:57:a7:73:d9:a3:52:e2:9c:c4:be:33:7e:e1:f9:
         66:c2:78:72:c9:14:fa:b2:e8:d5:70:04:48:37:ef:3e:2a:07:
         9c:bc:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:57 2025 by rpki-client