This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32342d3234203d3e20323731323633.roa
File:                     3137372e38352e382e302f32342d3234203d3e20323731323633.roa (raw, json)
Hash identifier:          Ju72G5NPWzwFHCe9aM3r7rJQ+Ry+URdIWNHRW2JyXz0=
Subject key identifier:   36:18:0C:25:52:4A:39:21:CF:3B:D1:A1:11:FC:78:A0:31:80:64:C4
Certificate issuer:       /CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
Certificate serial:       0A33BB019DF4A383FAB812E6C1D669FCD55AC754
Authority key identifier: 8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32342d3234203d3e20323731323633.roa
Signing time:             Thu 13 Nov 2025 18:15:23 +0000
ROA not before:           Thu 13 Nov 2025 18:10:23 +0000
ROA not after:            Thu 12 Nov 2026 18:15:23 +0000
asID:                     271263
IP address blocks:        177.85.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:33:bb:01:9d:f4:a3:83:fa:b8:12:e6:c1:d6:69:fc:d5:5a:c7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
        Validity
            Not Before: Nov 13 18:10:23 2025 GMT
            Not After : Nov 12 18:15:23 2026 GMT
        Subject: CN=36180C25524A3921CF3BD1A111FC78A0318064C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:5f:7e:90:5f:ae:0c:06:50:1d:1e:0e:3a:
                    74:f7:18:e6:48:92:7a:ff:f7:54:21:9c:6d:19:df:
                    12:ce:a0:4b:8d:ec:8e:dd:95:2a:a4:34:f4:79:02:
                    55:c8:7e:ac:df:31:44:79:09:d0:55:14:bf:52:25:
                    46:56:59:f4:55:a3:d3:02:16:5c:ae:ae:01:41:50:
                    a8:9f:d1:b8:0f:01:79:37:1a:14:ca:4e:f6:8d:b7:
                    e4:c1:75:0a:a5:59:13:82:89:cb:f3:b9:fd:18:71:
                    f6:8c:e3:ff:c8:ba:bb:79:28:c7:1b:a6:49:db:3d:
                    01:b6:43:f7:4e:f3:7a:fc:c1:e2:9b:a0:52:b6:39:
                    80:a6:74:75:d6:ee:61:b1:96:8f:0f:b2:9b:bc:b7:
                    2c:b0:7c:cd:3f:27:eb:b7:da:81:06:10:54:18:d1:
                    2b:1e:44:1e:6f:2a:38:ea:35:76:6b:30:7a:05:e5:
                    51:92:2d:0c:d9:9d:63:7b:e8:bd:5b:b2:4c:3e:8a:
                    92:02:d9:e8:78:8b:63:ec:4e:72:1c:ea:96:36:69:
                    62:fd:75:86:e2:ba:15:45:0a:02:a8:63:94:65:6a:
                    a8:b5:30:a2:82:24:f0:59:24:09:7c:83:2d:8a:49:
                    72:4a:cc:58:f7:8b:f0:3e:28:7a:ff:c9:ad:1e:63:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:18:0C:25:52:4A:39:21:CF:3B:D1:A1:11:FC:78:A0:31:80:64:C4
            X509v3 Authority Key Identifier:
                keyid:8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32342d3234203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e7:42:c3:3f:04:7b:37:f7:76:d5:97:3e:bc:30:da:5e:cc:
         eb:14:b1:f3:45:f5:34:3b:fd:df:59:5d:da:32:cb:f7:73:1d:
         05:b3:47:8d:2e:f6:30:e3:3d:16:af:ee:34:ce:63:fe:06:1d:
         d1:96:5e:9b:8a:67:51:16:08:66:4f:1c:4e:ca:37:d3:58:db:
         8e:8c:2b:f4:b8:0c:b8:26:1c:9a:d4:2c:a3:bc:80:4b:17:5e:
         23:f1:1d:ba:ff:c1:b9:e6:93:df:15:50:28:27:56:a2:53:66:
         72:2b:12:9f:56:70:b1:7f:5a:5a:59:af:4b:96:82:1d:4d:f3:
         b7:bf:a2:83:ab:23:11:f6:4e:6d:3c:c0:1a:07:8c:c5:1a:9d:
         40:66:2f:b0:50:b5:f6:76:ad:6e:43:9b:43:45:b4:4a:ca:49:
         ee:15:dd:5a:d7:b4:92:65:06:a5:66:e8:e7:cc:22:97:41:49:
         23:bc:d5:00:73:49:5f:d6:fe:b4:c1:e1:d1:66:e3:f4:15:2b:
         49:88:f7:9a:b0:a7:0d:32:22:50:71:87:e2:b8:86:75:60:93:
         39:dc:64:c0:a3:6e:b4:3f:ce:ab:37:68:d0:5c:e5:f8:ef:0c:
         f5:b4:5a:2e:bf:35:57:7a:41:c5:b4:f7:0b:04:1b:f1:82:64:
         dc:32:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:32:43 2025 by rpki-client