This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tur98mbxWyQoMSmueu1o9tjigKX6JgUqUsRTRokgbR7/0/3137372e31312e32382e302f32332d3233203d3e20323730363431.roa
File:                     3137372e31312e32382e302f32332d3233203d3e20323730363431.roa (raw, json)
Hash identifier:          HwHjV70MTPZfE77FPl53v8C7ILOb/7+mxicmZKP4lOo=
Subject key identifier:   8B:DE:4B:70:58:B8:93:B6:F8:A2:F4:37:7B:66:EC:12:E7:04:6C:4B
Certificate issuer:       /CN=E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231
Certificate serial:       7DA59315CB716A9FE026EBB07A21F24DFCABFB23
Authority key identifier: E8:8F:0A:2B:3C:85:90:D3:29:C3:6A:B2:A5:C7:C4:C6:BC:24:72:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tur98mbxWyQoMSmueu1o9tjigKX6JgUqUsRTRokgbR7/0/3137372e31312e32382e302f32332d3233203d3e20323730363431.roa
Signing time:             Tue 02 Dec 2025 13:36:32 +0000
ROA not before:           Tue 02 Dec 2025 13:31:32 +0000
ROA not after:            Tue 01 Dec 2026 13:36:32 +0000
asID:                     270641
IP address blocks:        177.11.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tur98mbxWyQoMSmueu1o9tjigKX6JgUqUsRTRokgbR7/0/E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231.crl
                          rsync://rpki-repo.registro.br/repo/3tur98mbxWyQoMSmueu1o9tjigKX6JgUqUsRTRokgbR7/0/E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a5:93:15:cb:71:6a:9f:e0:26:eb:b0:7a:21:f2:4d:fc:ab:fb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231
        Validity
            Not Before: Dec  2 13:31:32 2025 GMT
            Not After : Dec  1 13:36:32 2026 GMT
        Subject: CN=8BDE4B7058B893B6F8A2F4377B66EC12E7046C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:0d:ed:fd:16:84:d1:57:cd:d1:2c:ce:55:
                    3d:3f:08:19:2a:8c:b4:d9:94:6b:2f:62:95:b6:7e:
                    7a:c2:68:f0:02:bd:2e:58:46:ab:fd:32:74:f1:a5:
                    ab:23:27:11:6a:98:29:6b:cb:7b:ae:a6:1f:a7:ab:
                    6b:a9:46:01:9b:b8:7f:7c:e6:7c:be:ed:18:3e:f4:
                    6c:35:8f:7d:4f:7e:c5:b0:d3:2b:64:dd:ca:3b:02:
                    7e:6d:6c:c1:5a:13:66:ba:7a:13:5d:90:4f:fe:82:
                    7c:df:99:f8:c0:93:fd:1e:db:2c:5e:64:43:3b:ae:
                    ff:96:f4:a4:7c:e1:7a:63:38:3a:23:8c:83:ea:43:
                    f1:8e:c4:25:e2:22:50:f5:36:89:0d:b4:c9:0a:ba:
                    e2:5f:b0:51:6f:31:67:13:38:d5:8e:ba:bc:56:c3:
                    bf:fe:54:15:70:93:3e:4b:62:40:9a:b1:7f:26:b7:
                    43:d5:1f:05:26:dd:55:ad:26:40:47:c4:ca:5c:96:
                    bc:a2:d5:8c:de:57:b8:88:0d:70:95:48:b9:35:94:
                    e0:b3:15:fa:1e:71:d6:bc:6c:ea:46:11:9a:aa:34:
                    a8:9f:3e:38:b2:94:20:a4:cc:d9:63:ef:de:69:08:
                    12:d8:1e:3c:fb:ae:b7:d5:7e:bd:2e:43:81:91:5f:
                    04:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DE:4B:70:58:B8:93:B6:F8:A2:F4:37:7B:66:EC:12:E7:04:6C:4B
            X509v3 Authority Key Identifier:
                keyid:E8:8F:0A:2B:3C:85:90:D3:29:C3:6A:B2:A5:C7:C4:C6:BC:24:72:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tur98mbxWyQoMSmueu1o9tjigKX6JgUqUsRTRokgbR7/0/E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tur98mbxWyQoMSmueu1o9tjigKX6JgUqUsRTRokgbR7/0/3137372e31312e32382e302f32332d3233203d3e20323730363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:17:a7:87:33:76:5a:4a:a8:ae:36:c6:dc:52:35:3d:a5:e2:
         fa:bb:2d:49:44:ef:37:8e:bb:8d:0d:9f:bd:80:43:26:61:e0:
         73:44:22:e4:88:13:5e:a0:0a:49:df:06:8c:b6:c2:9d:ef:6b:
         ce:7c:d7:c8:5b:d5:89:be:fd:a8:cb:ae:04:33:c1:f2:28:5f:
         cd:1c:0a:b3:10:35:76:25:b3:2d:1d:94:b2:1a:8b:05:c4:2a:
         7f:9d:08:65:28:c8:35:92:8c:39:c5:18:40:d7:71:50:74:ba:
         2e:95:66:6b:10:ed:b8:e6:f9:04:ed:3d:13:5c:e4:f3:b2:2a:
         88:23:28:23:62:a0:1f:9d:5b:55:5e:1b:2a:3a:14:ed:16:05:
         17:01:ce:88:3c:3e:89:82:6f:70:9f:aa:bb:04:5d:6f:ab:7e:
         cb:7a:53:71:0e:cd:06:50:45:8c:bb:3c:a5:12:98:41:ed:22:
         46:ee:3f:e7:2b:a9:8e:ca:d9:cc:1f:0d:ff:33:0d:9b:a8:fc:
         5a:1b:af:f2:50:48:fb:3a:9e:d9:e4:cf:e4:a3:05:e2:d5:b2:
         53:c0:98:3a:ee:35:11:01:53:8c:f6:04:f9:76:f6:67:16:8d:
         4a:d3:0d:38:96:28:8c:43:c9:c5:19:2f:44:01:56:53:ce:d1:
         59:0b:14:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:36 2025 by rpki-client