This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38372e302f32342d3234203d3e20323732363737.roa
File:                     3137392e36332e38372e302f32342d3234203d3e20323732363737.roa (raw, json)
Hash identifier:          7Gp0ZmydqhbbN190hhcBjciAFbxsMaaj5yN2pPrZSck=
Subject key identifier:   9F:1D:C9:E2:47:5D:10:60:83:9E:1B:53:56:B4:35:7B:3E:0B:8F:83
Certificate issuer:       /CN=C9E7A46AEE5695DEB015FF45BA602323A93AA50E
Certificate serial:       357FECC7808D942F575538512ED66CB4F9DFD110
Authority key identifier: C9:E7:A4:6A:EE:56:95:DE:B0:15:FF:45:BA:60:23:23:A9:3A:A5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38372e302f32342d3234203d3e20323732363737.roa
Signing time:             Sun 23 Nov 2025 03:03:56 +0000
ROA not before:           Sun 23 Nov 2025 02:58:56 +0000
ROA not after:            Sun 22 Nov 2026 03:03:56 +0000
asID:                     272677
IP address blocks:        179.63.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7f:ec:c7:80:8d:94:2f:57:55:38:51:2e:d6:6c:b4:f9:df:d1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9E7A46AEE5695DEB015FF45BA602323A93AA50E
        Validity
            Not Before: Nov 23 02:58:56 2025 GMT
            Not After : Nov 22 03:03:56 2026 GMT
        Subject: CN=9F1DC9E2475D1060839E1B5356B4357B3E0B8F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:35:12:9b:0e:30:3d:eb:dd:dd:eb:5a:6b:
                    29:60:d0:ec:14:34:f7:6e:6c:24:7e:4d:e8:62:f9:
                    1a:88:fa:16:0f:e0:51:61:34:0a:4a:09:61:78:ee:
                    c0:bf:fa:4f:aa:b1:51:30:54:99:45:90:73:20:31:
                    46:c4:6c:f4:b3:24:06:e9:20:55:0e:9c:e4:e1:7b:
                    63:8e:fe:c9:3d:22:e1:24:f6:d8:42:e9:ed:45:f4:
                    03:42:5e:65:66:0f:d8:75:33:5f:e2:bd:c7:b7:85:
                    92:b4:a9:7b:a9:15:9e:25:13:60:6e:86:18:e4:73:
                    45:e7:e1:63:eb:2f:ce:8b:fc:2e:eb:64:bc:d0:73:
                    71:99:cc:80:16:0b:41:7e:40:a8:2b:b1:06:f0:1c:
                    3f:29:7b:e3:72:cb:ec:6e:1c:71:eb:aa:4c:fe:27:
                    6c:f2:50:f1:da:7a:a8:9c:fa:ed:13:18:3d:99:7b:
                    7d:e5:c7:88:d7:d9:fa:2f:f2:f4:f4:eb:24:60:46:
                    98:d2:3b:c8:69:3f:00:d5:f1:83:b4:97:c4:37:1d:
                    b2:c1:c9:33:10:7f:49:87:9e:f4:f4:c9:f0:d0:d7:
                    fd:a1:b9:bf:2c:07:73:25:e6:f8:54:a7:79:c4:4d:
                    3c:3e:66:0e:77:58:03:33:44:f1:95:79:6c:e2:28:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:C9:E2:47:5D:10:60:83:9E:1B:53:56:B4:35:7B:3E:0B:8F:83
            X509v3 Authority Key Identifier:
                keyid:C9:E7:A4:6A:EE:56:95:DE:B0:15:FF:45:BA:60:23:23:A9:3A:A5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38372e302f32342d3234203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d0:ad:3b:a4:3c:ce:a5:c6:12:82:37:38:ef:01:a4:35:bb:
         35:a0:c6:6d:7e:08:c0:e0:47:ea:57:44:e7:cc:e1:58:f9:0a:
         25:79:3d:b2:82:64:07:08:44:a8:86:2c:de:c9:38:b1:2f:56:
         72:23:50:d9:61:55:32:36:71:b3:1a:35:c1:50:8b:b4:3b:c3:
         c4:33:64:20:81:72:2d:be:49:e3:a7:2c:a6:c2:e5:9e:9e:0b:
         ee:65:ed:89:67:46:6b:d5:9c:19:ec:ec:ce:aa:9a:a5:f8:3b:
         dd:d5:7f:8a:80:ee:6c:d1:6b:a8:de:8f:7e:5c:f3:8a:84:2e:
         9c:cd:2e:5c:48:e3:ee:f2:1e:7c:2b:32:03:fe:46:bf:71:10:
         68:c5:a3:6c:86:3d:52:71:09:6d:e0:36:36:24:8d:b1:bf:cb:
         dc:30:c3:af:80:80:f7:6b:5c:d3:03:1c:71:6e:4e:34:97:d1:
         ea:ef:87:de:bb:93:3e:60:57:8c:dc:7e:3a:e2:fc:3b:4d:ed:
         1f:05:87:5d:c4:08:a2:7a:f0:ee:f5:03:7e:0d:bc:d9:f3:39:
         36:b2:87:73:3c:06:66:57:fa:21:b9:78:27:a8:08:c6:a4:00:
         b7:7f:74:87:60:28:db:8a:ca:e6:34:eb:61:29:bd:ab:50:22:
         52:ac:7c:9c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNX/sx4CNlC9XVThRLtZstPnf0RAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFN0E0NkFFRTU2OTVERUIwMTVGRjQ1QkE2MDIzMjNB
OTNBQTUwRTAeFw0yNTExMjMwMjU4NTZaFw0yNjExMjIwMzAzNTZaMDMxMTAvBgNV
BAMTKDlGMURDOUUyNDc1RDEwNjA4MzlFMUI1MzU2QjQzNTdCM0UwQjhGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6DUSmw4wPevd3etaaylg0OwU
NPdubCR+Tehi+RqI+hYP4FFhNApKCWF47sC/+k+qsVEwVJlFkHMgMUbEbPSzJAbp
IFUOnOThe2OO/sk9IuEk9thC6e1F9ANCXmVmD9h1M1/ivce3hZK0qXupFZ4lE2Bu
hhjkc0Xn4WPrL86L/C7rZLzQc3GZzIAWC0F+QKgrsQbwHD8pe+Nyy+xuHHHrqkz+
J2zyUPHaeqic+u0TGD2Ze33lx4jX2fov8vT06yRgRpjSO8hpPwDV8YO0l8Q3HbLB
yTMQf0mHnvT0yfDQ1/2hub8sB3Ml5vhUp3nETTw+Zg53WAMzRPGVeWziKAIPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnx3J4kddEGCDnhtTVrQ1ez4Lj4MwHwYDVR0j
BBgwFoAUyeekau5Wld6wFf9FumAjI6k6pQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK
UlQvMC9DOUU3QTQ2QUVFNTY5NURFQjAxNUZGNDVCQTYwMjMyM0E5M0FBNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RTdBNDZBRUU1Njk1REVC
MDE1RkY0NUJBNjAyMzIzQTkzQUE1MEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtSlc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzAv
MzEzNzM5MmUzNjMzMmUzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzYzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsz9XMA0GCSqGSIb3DQEBCwUAA4IBAQAQ0K07pDzO
pcYSgjc47wGkNbs1oMZtfgjA4EfqV0TnzOFY+QoleT2ygmQHCESohizeyTixL1Zy
I1DZYVUyNnGzGjXBUIu0O8PEM2QggXItvknjpyymwuWengvuZe2JZ0Zr1ZwZ7OzO
qpql+Dvd1X+KgO5s0Wuo3o9+XPOKhC6czS5cSOPu8h58KzID/ka/cRBoxaNshj1S
cQlt4DY2JI2xv8vcMMOvgID3a1zTAxxxbk40l9Hq74feu5M+YFeM3H464vw7Te0f
BYddxAiievDu9QN+DbzZ8zk2sodzPAZmV/ohuXgnqAjGpAC3f3SHYCjbisrmNOth
Kb2rUCJSrHyc
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:49 2025 by rpki-client