This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139322e302f32302d3230203d3e20323632383535.roa
File:                     3137372e31322e3139322e302f32302d3230203d3e20323632383535.roa (raw, json)
Hash identifier:          72wERZ8/qFXw85p61RfmBU9C9G8ZH7inT9e+SV33FQQ=
Subject key identifier:   CC:53:F0:18:B9:A0:35:52:05:30:C5:13:0C:F3:A8:CF:0C:D5:4C:10
Certificate issuer:       /CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Certificate serial:       5C213A3B610C47E1941B5CC516F5077A0A15B5FF
Authority key identifier: B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139322e302f32302d3230203d3e20323632383535.roa
Signing time:             Fri 07 Nov 2025 12:13:57 +0000
ROA not before:           Fri 07 Nov 2025 12:08:57 +0000
ROA not after:            Fri 06 Nov 2026 12:13:57 +0000
asID:                     262855
IP address blocks:        177.12.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
                          rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:21:3a:3b:61:0c:47:e1:94:1b:5c:c5:16:f5:07:7a:0a:15:b5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
        Validity
            Not Before: Nov  7 12:08:57 2025 GMT
            Not After : Nov  6 12:13:57 2026 GMT
        Subject: CN=CC53F018B9A035520530C5130CF3A8CF0CD54C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:e7:bf:79:64:5a:61:fa:78:b5:5f:6a:84:
                    6b:ea:9f:0b:c4:dd:d7:2d:73:8f:35:59:88:8e:67:
                    a0:f0:ac:a0:75:58:62:df:08:0e:bf:6c:8d:12:d9:
                    b3:02:bd:f3:5e:93:98:6b:af:3b:e6:41:f9:b8:65:
                    63:c1:f9:ec:15:f4:e0:85:85:b8:57:f8:24:b5:dc:
                    60:64:c9:bf:50:55:7a:85:ce:69:d6:5d:93:b2:ef:
                    54:17:c6:1a:97:dc:24:90:30:53:e7:72:7a:e5:32:
                    d9:bf:48:25:51:26:ff:7a:b7:76:e0:07:6b:b6:9c:
                    6e:1f:d4:22:41:2c:85:71:bf:2a:c5:58:26:4f:dc:
                    33:dd:b6:24:b9:7c:b0:f1:3e:a5:b3:59:34:1c:d4:
                    53:ae:66:f1:98:14:42:cd:03:01:d7:f4:77:67:04:
                    64:00:f5:2b:f2:d0:43:06:1b:a0:f9:bd:a2:42:c5:
                    4a:02:5d:0b:58:9a:91:5c:f0:39:5b:ec:51:91:25:
                    6c:4c:6e:03:5b:c8:a3:8d:68:a1:fd:13:fb:30:f7:
                    b4:2d:f4:36:5e:24:44:03:eb:f2:fc:f8:66:0b:25:
                    f5:6f:09:ae:03:aa:b2:05:32:f1:12:72:8f:8a:c3:
                    58:95:89:f4:91:6f:14:a8:f6:29:42:9f:7d:c1:97:
                    43:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:53:F0:18:B9:A0:35:52:05:30:C5:13:0C:F3:A8:CF:0C:D5:4C:10
            X509v3 Authority Key Identifier:
                keyid:B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139322e302f32302d3230203d3e20323632383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:94:a6:d6:da:1c:c5:9f:fb:a7:97:b3:51:46:0a:57:76:d0:
         3a:21:1b:52:c9:ec:8e:7b:ec:92:07:db:b0:ed:00:c2:9c:0e:
         b7:7f:a3:47:45:ef:e3:c1:a0:d3:37:08:28:a5:ab:73:72:87:
         fe:85:38:5b:c1:53:50:fc:01:d2:ca:c2:19:1b:f0:60:e1:2c:
         19:51:d9:a2:1d:3c:bc:eb:b0:b9:26:c8:ee:ee:52:a8:de:89:
         1f:17:35:34:f6:de:20:1f:70:db:6b:f2:e0:ed:f9:98:6c:c9:
         42:e5:7b:a4:89:13:c6:a5:3a:95:f7:89:d6:ba:52:20:0a:ce:
         c7:70:16:e3:08:ed:66:a5:6f:59:45:c0:01:4a:83:3e:8c:8d:
         5c:70:6e:7b:1a:28:d2:fd:1b:7a:cf:4b:31:f8:aa:e7:f7:86:
         6c:da:8e:d3:e3:14:64:41:ac:2f:3f:0b:f3:e1:5e:7c:ef:d3:
         d6:1b:4a:b8:83:75:58:f0:c7:bd:37:5a:1a:47:6d:ab:a0:6c:
         2f:74:d7:b3:fa:74:af:36:cc:15:72:8d:fe:d8:0a:2c:47:ee:
         d6:72:fb:a4:a4:c6:27:d7:2e:0b:92:07:ff:9d:d7:bb:56:44:
         0a:5d:44:d4:46:13:ab:71:75:3e:65:dc:6b:45:f1:b4:38:05:
         6c:b9:64:c0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXCE6O2EMR+GUG1zFFvUHegoVtf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgzNjJEMUM4N0RGNUYzNjA0RENDNTgzREM4Rjc4RTg0
QjQ2QzExNjAeFw0yNTExMDcxMjA4NTdaFw0yNjExMDYxMjEzNTdaMDMxMTAvBgNV
BAMTKENDNTNGMDE4QjlBMDM1NTIwNTMwQzUxMzBDRjNBOENGMENENTRDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyV+e/eWRaYfp4tV9qhGvqnwvE
3dctc481WYiOZ6DwrKB1WGLfCA6/bI0S2bMCvfNek5hrrzvmQfm4ZWPB+ewV9OCF
hbhX+CS13GBkyb9QVXqFzmnWXZOy71QXxhqX3CSQMFPncnrlMtm/SCVRJv96t3bg
B2u2nG4f1CJBLIVxvyrFWCZP3DPdtiS5fLDxPqWzWTQc1FOuZvGYFELNAwHX9Hdn
BGQA9Svy0EMGG6D5vaJCxUoCXQtYmpFc8Dlb7FGRJWxMbgNbyKONaKH9E/sw97Qt
9DZeJEQD6/L8+GYLJfVvCa4DqrIFMvESco+Kw1iVifSRbxSo9ilCn33Bl0N5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzFPwGLmgNVIFMMUTDPOozwzVTBAwHwYDVR0j
BBgwFoAUuDYtHIffXzYE3MWD3I946EtGwRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFLMmp0UXNVNnV1VXBxYXBSbTFFcFFoNzl6OXpyaUpXbThhRTVpUTRX
cVcvMC9CODM2MkQxQzg3REY1RjM2MDREQ0M1ODNEQzhGNzhFODRCNDZDMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4MzYyRDFDODdERjVGMzYw
NERDQzU4M0RDOEY3OEU4NEI0NkMxMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRSzJqdFFzVTZ1dVVwcWFwUm0xRXBRaDc5ejl6cmlKV204YUU1aVE0V3FXLzAv
MzEzNzM3MmUzMTMyMmUzMTM5MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzIzODM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxDMAwDQYJKoZIhvcNAQELBQADggEBAIKUptba
HMWf+6eXs1FGCld20DohG1LJ7I577JIH27DtAMKcDrd/o0dF7+PBoNM3CCilq3Ny
h/6FOFvBU1D8AdLKwhkb8GDhLBlR2aIdPLzrsLkmyO7uUqjeiR8XNTT23iAfcNtr
8uDt+ZhsyULle6SJE8alOpX3ida6UiAKzsdwFuMI7Walb1lFwAFKgz6MjVxwbnsa
KNL9G3rPSzH4quf3hmzajtPjFGRBrC8/C/PhXnzv09YbSriDdVjwx703WhpHbaug
bC9017P6dK82zBVyjf7YCixH7tZy+6SkxifXLguSB/+d17tWRApdRNRGE6txdT5l
3GtF8bQ4BWy5ZMA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:41:02 2025 by rpki-client