This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e37332e37362e302f32322d3234203d3e20323632373639.roa
File:                     3137372e37332e37362e302f32322d3234203d3e20323632373639.roa (raw, json)
Hash identifier:          Py21MIQCpMT47zrjB7RAUXOVdKADxcZqVOU9T3CqCbY=
Subject key identifier:   E1:2A:4F:36:B1:99:48:54:B2:98:7D:C4:C6:ED:35:19:FA:5E:8D:75
Certificate issuer:       /CN=B0485678AE7155C65290067DA6041EB0A1652E4E
Certificate serial:       2D5EC86DF7C0C8EB3C16A07E11C9DAF278566D81
Authority key identifier: B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e37332e37362e302f32322d3234203d3e20323632373639.roa
Signing time:             Fri 21 Nov 2025 16:28:06 +0000
ROA not before:           Fri 21 Nov 2025 16:23:06 +0000
ROA not after:            Fri 20 Nov 2026 16:28:06 +0000
asID:                     262769
IP address blocks:        177.73.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.crl
                          rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5e:c8:6d:f7:c0:c8:eb:3c:16:a0:7e:11:c9:da:f2:78:56:6d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0485678AE7155C65290067DA6041EB0A1652E4E
        Validity
            Not Before: Nov 21 16:23:06 2025 GMT
            Not After : Nov 20 16:28:06 2026 GMT
        Subject: CN=E12A4F36B1994854B2987DC4C6ED3519FA5E8D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:d5:b8:fd:09:fc:07:fe:ef:ea:10:1c:f2:
                    0b:f2:41:7f:a5:5f:44:b7:c7:81:f5:c1:62:0f:b6:
                    fe:c4:c6:94:6a:23:58:bb:52:69:b1:fd:a2:44:a0:
                    2b:cd:5c:77:36:34:5e:cb:09:99:f8:f3:db:8d:05:
                    d0:8b:33:ae:18:43:5a:d3:45:db:c7:18:b0:7c:fc:
                    37:96:41:34:d1:ce:75:ef:d2:be:b9:40:b9:96:da:
                    b0:e1:1e:7f:8c:aa:e2:c1:60:e8:5a:97:cc:61:52:
                    62:33:bf:3a:af:87:66:81:91:6f:f3:3e:2e:62:e7:
                    4b:97:0f:11:c3:e5:0c:8c:14:51:18:ad:ac:67:ee:
                    31:f8:73:53:21:e7:23:1a:f4:5c:fb:b4:4d:84:8c:
                    92:82:8b:d8:b9:0f:a3:30:b5:e8:87:54:d0:49:b7:
                    c0:90:13:84:2e:84:29:05:4b:20:ab:d5:16:94:69:
                    60:4e:e7:55:94:da:78:aa:5f:85:5c:16:d4:59:20:
                    ab:1f:1a:2b:18:53:a9:b8:3d:d4:f3:25:71:ff:94:
                    b9:cc:7d:f2:95:87:37:e2:f5:68:a0:c5:35:09:c5:
                    38:08:10:23:8b:76:c9:1e:35:ff:23:a9:d0:0a:22:
                    56:65:da:07:1a:48:d4:6b:78:d7:35:af:a4:ce:e3:
                    56:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2A:4F:36:B1:99:48:54:B2:98:7D:C4:C6:ED:35:19:FA:5E:8D:75
            X509v3 Authority Key Identifier:
                keyid:B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e37332e37362e302f32322d3234203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:05:aa:b6:1d:11:7a:33:d1:ee:7b:6a:e3:fb:14:9f:3b:5f:
         d1:6c:c6:6a:2c:cd:54:59:a0:fb:bc:e5:32:47:a9:d2:35:56:
         29:0a:83:51:20:4e:4b:3b:00:fb:e6:0f:f0:d8:0f:54:a5:ca:
         f7:37:1a:0e:3b:3c:21:47:dc:a8:02:d0:1c:3d:2e:00:d1:f9:
         50:32:9e:ae:44:f7:a8:a0:f7:73:4d:7a:f9:f7:56:9b:82:6a:
         f2:61:5e:5b:fb:53:d2:65:a4:fb:30:ea:ed:f8:a7:52:b3:a7:
         bf:30:0e:8f:6f:e7:85:c0:fb:79:cb:f0:41:7b:5e:6a:44:90:
         40:4d:d4:50:1c:09:0a:37:1d:5a:bc:f5:04:e3:65:a8:ca:ca:
         64:dc:23:5b:0f:ae:6b:2b:ca:23:47:b3:65:b5:98:98:cb:b3:
         ea:3f:49:70:cc:b8:f2:33:b8:4f:88:a0:0e:ac:4e:8a:b5:bf:
         cc:06:3b:87:f3:4d:ed:9e:40:9f:0d:a9:d3:52:e1:5d:de:b2:
         e0:c6:b3:ff:f1:4a:34:de:a1:0c:f4:7b:fb:c5:0a:aa:e7:a3:
         46:7d:54:5e:57:2b:ad:27:7a:4d:54:25:e9:ed:bf:6c:56:af:
         aa:40:5d:26:dd:3b:58:ff:25:cc:17:36:40:9b:b3:52:7f:8a:
         a9:20:a5:fb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULV7IbffAyOs8FqB+Ecna8nhWbYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA0ODU2NzhBRTcxNTVDNjUyOTAwNjdEQTYwNDFFQjBB
MTY1MkU0RTAeFw0yNTExMjExNjIzMDZaFw0yNjExMjAxNjI4MDZaMDMxMTAvBgNV
BAMTKEUxMkE0RjM2QjE5OTQ4NTRCMjk4N0RDNEM2RUQzNTE5RkE1RThENzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1atW4/Qn8B/7v6hAc8gvyQX+l
X0S3x4H1wWIPtv7ExpRqI1i7Ummx/aJEoCvNXHc2NF7LCZn489uNBdCLM64YQ1rT
RdvHGLB8/DeWQTTRznXv0r65QLmW2rDhHn+MquLBYOhal8xhUmIzvzqvh2aBkW/z
Pi5i50uXDxHD5QyMFFEYraxn7jH4c1Mh5yMa9Fz7tE2EjJKCi9i5D6MwteiHVNBJ
t8CQE4QuhCkFSyCr1RaUaWBO51WU2niqX4VcFtRZIKsfGisYU6m4PdTzJXH/lLnM
ffKVhzfi9WigxTUJxTgIECOLdskeNf8jqdAKIlZl2gcaSNRreNc1r6TO41ZhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4SpPNrGZSFSymH3Exu01GfpejXUwHwYDVR0j
BBgwFoAUsEhWeK5xVcZSkAZ9pgQesKFlLk4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFyeVhxUDlYcTRDVFJxNFMydkdIWWZwQmFkUEJ6dDhScTJNVEN5NGRW
S3QvMC9CMDQ4NTY3OEFFNzE1NUM2NTI5MDA2N0RBNjA0MUVCMEExNjUyRTRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwNDg1Njc4QUU3MTU1QzY1
MjkwMDY3REE2MDQxRUIwQTE2NTJFNEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRcnlYcVA5WHE0Q1RScTRTMnZHSFlmcEJhZFBCenQ4UnEyTVRDeTRkVkt0LzAv
MzEzNzM3MmUzNzMzMmUzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUlMMA0GCSqGSIb3DQEBCwUAA4IBAQCeBaq2HRF6
M9Hue2rj+xSfO1/RbMZqLM1UWaD7vOUyR6nSNVYpCoNRIE5LOwD75g/w2A9Upcr3
NxoOOzwhR9yoAtAcPS4A0flQMp6uRPeooPdzTXr591abgmryYV5b+1PSZaT7MOrt
+KdSs6e/MA6Pb+eFwPt5y/BBe15qRJBATdRQHAkKNx1avPUE42Woyspk3CNbD65r
K8ojR7NltZiYy7PqP0lwzLjyM7hPiKAOrE6Ktb/MBjuH803tnkCfDanTUuFd3rLg
xrP/8Uo03qEM9Hv7xQqq56NGfVReVyutJ3pNVCXp7b9sVq+qQF0m3TtY/yXMFzZA
m7NSf4qpIKX7
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:25:16 2025 by rpki-client