This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139362e302f32342d3234203d3e20323632383535.roa
File:                     3137372e31322e3139362e302f32342d3234203d3e20323632383535.roa (raw, json)
Hash identifier:          MxrZR9MwWg99Ap9AzVPt7DSPMqq75e66AYtVo8KAIZo=
Subject key identifier:   6A:61:16:47:D1:6C:B5:09:E0:EF:BE:CF:A1:0A:11:04:BF:C1:AF:5B
Certificate issuer:       /CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Certificate serial:       6516E1FA2784A74AA3D1B4BC6B653E0D5AA7ACE4
Authority key identifier: B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139362e302f32342d3234203d3e20323632383535.roa
Signing time:             Fri 07 Nov 2025 12:14:50 +0000
ROA not before:           Fri 07 Nov 2025 12:09:50 +0000
ROA not after:            Fri 06 Nov 2026 12:14:50 +0000
asID:                     262855
IP address blocks:        177.12.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
                          rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:16:e1:fa:27:84:a7:4a:a3:d1:b4:bc:6b:65:3e:0d:5a:a7:ac:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
        Validity
            Not Before: Nov  7 12:09:50 2025 GMT
            Not After : Nov  6 12:14:50 2026 GMT
        Subject: CN=6A611647D16CB509E0EFBECFA10A1104BFC1AF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:1f:17:14:7f:0d:66:ec:26:3f:19:6b:70:
                    de:93:74:8f:a4:7b:f3:b9:3d:10:2c:1a:c0:69:c2:
                    46:d5:c9:0a:2a:b7:ae:d4:43:6f:5b:77:b0:84:75:
                    c0:de:27:d9:2e:60:5c:e9:12:69:28:ab:7f:1b:5e:
                    69:78:48:46:c8:2a:83:83:4f:a5:c5:f0:61:9f:31:
                    da:e7:bb:c3:b7:31:0a:a8:55:20:5d:02:23:cf:c7:
                    7d:2e:58:aa:34:58:a8:98:f6:c5:56:ab:07:cb:07:
                    d0:eb:ea:c1:79:86:4d:55:cc:8a:f1:3b:ae:c2:d5:
                    1d:7d:20:5a:8b:b9:c7:64:cb:d0:41:f1:e9:b4:30:
                    f1:d9:68:28:a6:8f:b9:34:84:41:d5:09:01:46:af:
                    9c:04:39:01:e7:0c:67:53:41:12:28:24:97:92:f0:
                    87:4c:40:98:39:e3:d4:06:12:8f:f2:fa:34:62:d1:
                    7e:67:95:d3:47:8e:5e:f5:72:68:bc:67:18:e9:91:
                    7f:74:59:d7:c6:87:95:15:98:ba:e3:1f:ac:ae:71:
                    44:26:ee:35:95:de:30:82:ba:e1:c7:15:05:8c:0d:
                    38:08:50:5b:0b:f0:59:f2:f1:69:41:5e:6a:7f:ff:
                    3b:20:e5:54:c8:5d:54:22:d3:9d:32:f2:b5:8a:26:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:61:16:47:D1:6C:B5:09:E0:EF:BE:CF:A1:0A:11:04:BF:C1:AF:5B
            X509v3 Authority Key Identifier:
                keyid:B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3139362e302f32342d3234203d3e20323632383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:24:43:78:33:bf:24:06:33:9d:80:35:6c:25:c2:c9:24:
         af:3c:b7:75:32:54:14:3a:c5:4e:9b:c1:2d:9e:90:ec:1d:b7:
         17:f1:82:ad:41:c4:4b:b3:ed:dc:83:ca:83:c3:a1:73:d5:62:
         77:d3:7f:17:14:e5:70:72:b5:fd:7d:2c:62:a8:48:05:e7:7a:
         62:1c:fa:7a:d8:41:59:64:f0:47:00:d6:60:c8:65:9d:19:9e:
         0b:83:98:5d:9c:60:17:2d:8d:02:59:1a:5b:46:e8:f8:41:88:
         0f:ca:7e:70:7a:8c:a9:5c:87:ba:72:73:53:e7:47:12:af:ef:
         5f:3b:ac:0c:31:e3:57:dd:66:ab:e3:6d:a5:bf:6d:c4:c2:98:
         1c:45:13:b9:22:41:9f:73:12:8f:eb:57:8c:15:85:ff:05:dd:
         cf:f7:61:dd:6c:b7:3d:cb:39:e7:55:c4:89:f3:e3:86:94:a3:
         9c:c6:f3:4f:f6:ba:f3:48:f1:67:2a:ca:74:24:9e:fb:63:fd:
         95:02:0a:aa:76:82:c4:c2:1d:20:aa:e1:47:da:c7:0c:00:22:
         70:a9:76:d9:c3:17:19:65:1a:02:9b:7c:7e:55:01:fd:5d:21:
         30:0f:ef:26:bc:38:11:29:a9:7a:80:73:18:ac:ce:bc:21:c3:
         07:77:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:40:57 2025 by rpki-client