This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38342e302f32342d3234203d3e20323732363737.roa
File:                     3137392e36332e38342e302f32342d3234203d3e20323732363737.roa (raw, json)
Hash identifier:          XFLcTiqNwuvLB2b3yyXx5OEeIxBDZM1P/J/gc9oX0OQ=
Subject key identifier:   97:FA:6C:BF:B3:F9:88:83:D1:4A:79:CA:E4:34:10:10:6B:68:2A:3C
Certificate issuer:       /CN=C9E7A46AEE5695DEB015FF45BA602323A93AA50E
Certificate serial:       57F7DE8F09F5D19A425000411FAE51A1A54DA664
Authority key identifier: C9:E7:A4:6A:EE:56:95:DE:B0:15:FF:45:BA:60:23:23:A9:3A:A5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38342e302f32342d3234203d3e20323732363737.roa
Signing time:             Thu 27 Nov 2025 02:38:05 +0000
ROA not before:           Thu 27 Nov 2025 02:33:05 +0000
ROA not after:            Thu 26 Nov 2026 02:38:05 +0000
asID:                     272677
IP address blocks:        179.63.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 18:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f7:de:8f:09:f5:d1:9a:42:50:00:41:1f:ae:51:a1:a5:4d:a6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9E7A46AEE5695DEB015FF45BA602323A93AA50E
        Validity
            Not Before: Nov 27 02:33:05 2025 GMT
            Not After : Nov 26 02:38:05 2026 GMT
        Subject: CN=97FA6CBFB3F98883D14A79CAE43410106B682A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:79:08:57:60:6e:84:7a:8d:89:47:05:14:
                    2f:38:a0:0f:80:de:67:a5:3e:b9:25:26:7e:87:70:
                    ab:d9:78:38:d6:e0:7b:de:c4:ca:75:d7:db:76:c3:
                    61:85:75:c6:12:e0:c6:a5:1c:37:04:01:f0:f6:12:
                    ae:77:01:3e:e7:87:05:5e:f5:f1:e8:72:94:0d:21:
                    2f:f5:71:d7:c6:9c:2f:3e:85:00:d4:34:94:f2:d9:
                    0a:ef:b8:f3:56:8f:96:c5:09:7d:99:6f:04:71:79:
                    27:f5:68:4d:b8:73:ae:c1:bc:92:9a:d1:e0:ab:c7:
                    19:a7:70:d5:d6:ae:3a:69:d3:4e:ac:ca:99:f5:41:
                    50:06:11:c0:40:25:14:c0:68:ed:a7:d5:b8:27:03:
                    74:7d:0b:33:2b:25:98:2d:fb:7a:3d:19:23:96:52:
                    9e:b8:b7:58:16:93:a3:65:76:ea:d4:9b:e0:28:2b:
                    89:55:0e:63:92:71:cc:16:fa:11:8b:c0:f3:42:b8:
                    c1:03:13:7e:67:06:2c:cf:92:d1:49:4b:e4:4d:21:
                    f1:f8:0f:b4:58:cb:9a:fb:b6:c7:c8:40:e8:85:71:
                    b0:60:7a:6f:d2:82:f5:f4:a8:5e:9f:eb:dc:51:5c:
                    c9:e1:8d:45:f7:13:b4:77:5b:89:14:43:d8:d1:40:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:6C:BF:B3:F9:88:83:D1:4A:79:CA:E4:34:10:10:6B:68:2A:3C
            X509v3 Authority Key Identifier:
                keyid:C9:E7:A4:6A:EE:56:95:DE:B0:15:FF:45:BA:60:23:23:A9:3A:A5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38342e302f32342d3234203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:a2:50:13:f7:c1:9c:5e:d2:ce:3d:e2:53:ae:25:62:83:6e:
         ec:3f:b2:8f:c1:c5:66:f2:8e:43:48:40:74:6e:0d:cc:ce:bf:
         4d:e6:d0:ee:c8:08:99:c5:3b:ff:36:96:b3:da:8b:61:6d:fb:
         44:25:b1:85:f0:14:e9:b0:fb:69:d5:15:57:82:0e:d9:80:c1:
         10:dc:12:77:ab:65:ad:d5:9b:17:71:f1:a1:d5:3f:b2:9e:d0:
         75:04:6e:1e:cd:f8:42:09:fd:bf:44:33:98:a1:9a:54:bf:2e:
         f3:4a:d1:0d:69:3b:2c:4a:e4:fd:d6:61:ec:1b:a0:76:f7:d0:
         21:ff:15:fb:be:3f:0f:ca:00:93:43:c5:db:c0:d8:ba:82:ca:
         f8:9c:e0:9b:aa:e0:3a:70:9e:c7:f4:51:49:1a:c9:9c:9e:1a:
         96:6a:86:75:ba:84:44:d6:a3:aa:81:a4:5d:a0:99:93:ba:ab:
         d9:2c:e7:84:71:c2:8f:15:17:fb:69:b9:5f:d4:25:8f:fd:2c:
         2e:0f:35:62:05:61:1a:eb:5e:0c:7c:12:dd:ba:2d:8d:12:fa:
         3a:0e:a9:85:16:ba:a1:f3:59:71:02:52:fd:2c:ef:d7:2a:66:
         38:db:18:79:b2:7b:c0:96:1c:5f:03:e8:4b:42:60:06:3d:03:
         66:04:82:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV/fejwn10ZpCUABBH65RoaVNpmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFN0E0NkFFRTU2OTVERUIwMTVGRjQ1QkE2MDIzMjNB
OTNBQTUwRTAeFw0yNTExMjcwMjMzMDVaFw0yNjExMjYwMjM4MDVaMDMxMTAvBgNV
BAMTKDk3RkE2Q0JGQjNGOTg4ODNEMTRBNzlDQUU0MzQxMDEwNkI2ODJBM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJA3kIV2BuhHqNiUcFFC84oA+A
3melPrklJn6HcKvZeDjW4HvexMp119t2w2GFdcYS4MalHDcEAfD2Eq53AT7nhwVe
9fHocpQNIS/1cdfGnC8+hQDUNJTy2QrvuPNWj5bFCX2ZbwRxeSf1aE24c67BvJKa
0eCrxxmncNXWrjpp006sypn1QVAGEcBAJRTAaO2n1bgnA3R9CzMrJZgt+3o9GSOW
Up64t1gWk6NldurUm+AoK4lVDmOSccwW+hGLwPNCuMEDE35nBizPktFJS+RNIfH4
D7RYy5r7tsfIQOiFcbBgem/SgvX0qF6f69xRXMnhjUX3E7R3W4kUQ9jRQKqdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUl/psv7P5iIPRSnnK5DQQEGtoKjwwHwYDVR0j
BBgwFoAUyeekau5Wld6wFf9FumAjI6k6pQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK
UlQvMC9DOUU3QTQ2QUVFNTY5NURFQjAxNUZGNDVCQTYwMjMyM0E5M0FBNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RTdBNDZBRUU1Njk1REVC
MDE1RkY0NUJBNjAyMzIzQTkzQUE1MEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtSlc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzAv
MzEzNzM5MmUzNjMzMmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzYzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsz9UMA0GCSqGSIb3DQEBCwUAA4IBAQAaolAT98Gc
XtLOPeJTriVig27sP7KPwcVm8o5DSEB0bg3Mzr9N5tDuyAiZxTv/Npaz2othbftE
JbGF8BTpsPtp1RVXgg7ZgMEQ3BJ3q2Wt1ZsXcfGh1T+yntB1BG4ezfhCCf2/RDOY
oZpUvy7zStENaTssSuT91mHsG6B299Ah/xX7vj8PygCTQ8XbwNi6gsr4nOCbquA6
cJ7H9FFJGsmcnhqWaoZ1uoRE1qOqgaRdoJmTuqvZLOeEccKPFRf7ablf1CWP/Swu
DzViBWEa614MfBLdui2NEvo6DqmFFrqh81lxAlL9LO/XKmY42xh5snvAlhxfA+hL
QmAGPQNmBIKW
-----END CERTIFICATE-----
Generated at Mon Dec 8 09:31:38 2025 by rpki-client