This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3230332e302f32342d3234203d3e20323632383535.roa
File:                     3137372e31322e3230332e302f32342d3234203d3e20323632383535.roa (raw, json)
Hash identifier:          7p8mvp4K/2l71qJa0xX9ow5FyGD9UXrXTtta/V5pQxE=
Subject key identifier:   CD:04:E6:68:1F:F5:5B:43:DC:DE:43:77:06:F8:53:EA:6A:0C:DC:6C
Certificate issuer:       /CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
Certificate serial:       376B979C3F74B47644122CF70C76C530B873C141
Authority key identifier: B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3230332e302f32342d3234203d3e20323632383535.roa
Signing time:             Fri 07 Nov 2025 12:15:11 +0000
ROA not before:           Fri 07 Nov 2025 12:10:11 +0000
ROA not after:            Fri 06 Nov 2026 12:15:11 +0000
asID:                     262855
IP address blocks:        177.12.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl
                          rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6b:97:9c:3f:74:b4:76:44:12:2c:f7:0c:76:c5:30:b8:73:c1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116
        Validity
            Not Before: Nov  7 12:10:11 2025 GMT
            Not After : Nov  6 12:15:11 2026 GMT
        Subject: CN=CD04E6681FF55B43DCDE437706F853EA6A0CDC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:80:92:65:3c:29:b3:a0:63:07:01:19:fc:
                    c6:e2:9a:52:66:4d:e2:b6:e1:f6:0f:ed:5b:58:ef:
                    b0:73:d6:c8:8c:a3:19:61:d5:39:4b:56:91:e8:cb:
                    90:ee:45:05:e7:c6:5e:a8:53:fe:41:7a:57:36:73:
                    2f:2c:94:d8:53:02:4c:58:6c:50:27:57:c5:60:f7:
                    e5:ba:3b:af:af:e1:ff:5f:7e:31:96:18:87:54:b6:
                    49:d5:0c:fa:d7:02:f3:b0:3f:3c:84:27:90:d4:b2:
                    b6:47:45:9f:82:43:db:97:92:2b:10:70:4d:8a:13:
                    91:52:66:72:ec:08:b8:72:95:79:04:07:30:53:01:
                    6e:21:c1:09:20:3d:b8:b0:f4:97:72:5e:19:1b:f4:
                    97:cb:3e:b6:0f:86:d6:67:24:b3:9d:15:b8:13:ea:
                    cb:20:f8:4a:9a:d1:72:16:eb:65:11:af:cd:4f:a9:
                    22:79:b1:27:ec:1b:79:05:66:4c:dc:c8:05:fb:ef:
                    39:c8:a8:f9:f9:b1:23:f6:45:cb:32:73:12:ee:9d:
                    d1:20:a7:e5:b3:e2:b9:83:b1:ac:e7:06:8f:9a:fd:
                    eb:e5:2a:64:23:ca:ee:f4:4a:e8:b2:b9:e1:8e:a8:
                    40:a3:89:80:9b:c6:0b:67:ca:d7:94:91:c0:7c:ee:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:04:E6:68:1F:F5:5B:43:DC:DE:43:77:06:F8:53:EA:6A:0C:DC:6C
            X509v3 Authority Key Identifier:
                keyid:B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/3137372e31322e3230332e302f32342d3234203d3e20323632383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:82:ae:b0:1e:07:76:12:4f:dc:d1:d2:46:9c:bf:02:ef:f5:
         50:8e:da:f3:53:16:a6:a5:30:09:7a:db:7f:58:53:04:da:31:
         14:aa:d0:d8:f4:a3:21:19:cd:58:7b:eb:02:94:cd:17:9f:0a:
         94:48:78:4c:07:2e:d3:c7:22:ef:f8:ad:37:1a:67:6c:fa:f0:
         a6:22:9f:a6:b4:86:52:61:ce:7d:25:47:46:a0:47:9f:14:f0:
         f2:17:db:52:65:c2:c0:2b:ee:0d:a3:13:b6:0c:e0:da:84:9c:
         c1:0f:04:4b:70:2a:8a:29:1a:d9:2f:9f:a3:e1:d0:68:69:f9:
         09:16:64:fc:a0:d5:aa:aa:ca:07:fb:ce:14:0e:c8:2a:0e:0c:
         4a:b9:03:9e:9d:bf:5e:9d:f1:ff:ce:9b:ed:45:16:af:ad:17:
         f5:b6:d0:50:a4:b8:35:9c:7d:ce:d1:cf:8d:0f:6f:44:94:9c:
         17:84:0a:fe:02:8d:62:4f:6b:7f:82:6c:62:8d:22:9b:aa:29:
         77:ef:cb:4b:78:a8:3e:9c:aa:3d:c7:64:28:38:a6:48:09:1e:
         82:53:cc:6f:8f:19:cd:cc:3b:54:d5:25:f3:63:4a:4c:00:70:
         a5:af:58:0b:48:77:05:84:47:e4:6c:0c:5f:2d:fe:df:d5:38:
         8d:d3:7f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:40:51 2025 by rpki-client