This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/3137372e31312e3234342e302f32322d3234203d3e203532393436.roa
File:                     3137372e31312e3234342e302f32322d3234203d3e203532393436.roa (raw, json)
Hash identifier:          eTfKflTgHLtPjzxSmjJQCfX7XAIZmlj5ozgtIXuNnoU=
Subject key identifier:   50:27:B8:73:C8:3C:4F:87:F3:F4:27:7F:19:7D:6A:95:AE:99:AD:B9
Certificate issuer:       /CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
Certificate serial:       128B39A4BE82B6C092D17C5A3DB2A98CBFD6AEB4
Authority key identifier: EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/3137372e31312e3234342e302f32322d3234203d3e203532393436.roa
Signing time:             Fri 28 Nov 2025 18:53:00 +0000
ROA not before:           Fri 28 Nov 2025 18:48:00 +0000
ROA not after:            Fri 27 Nov 2026 18:53:00 +0000
asID:                     52946
IP address blocks:        177.11.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl
                          rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8b:39:a4:be:82:b6:c0:92:d1:7c:5a:3d:b2:a9:8c:bf:d6:ae:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
        Validity
            Not Before: Nov 28 18:48:00 2025 GMT
            Not After : Nov 27 18:53:00 2026 GMT
        Subject: CN=5027B873C83C4F87F3F4277F197D6A95AE99ADB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:e4:92:c6:38:8b:1e:e0:7f:72:94:5e:77:
                    70:44:af:3a:16:6d:43:72:93:9a:12:4d:40:41:dd:
                    a2:ec:8a:c3:8f:07:0a:e2:b4:8f:c8:ed:2f:0c:aa:
                    16:48:5d:fd:0e:f8:d7:e3:a0:96:9c:59:dc:a3:bd:
                    5e:6b:b1:fb:53:ae:67:7e:dd:d2:5c:26:a8:88:0e:
                    b2:96:e0:58:97:fe:29:5b:bf:e6:37:f1:11:b9:74:
                    ef:bc:53:40:ff:16:9f:e2:86:65:09:37:47:e7:98:
                    e1:d7:5b:c4:86:15:03:12:2d:51:3a:f8:b6:84:22:
                    0d:cc:3a:ee:78:7b:f9:8d:a5:2c:1a:43:e3:d8:2e:
                    41:c8:7b:0e:b9:79:42:49:0c:3c:a0:d5:43:3d:84:
                    70:4c:0a:6c:e6:ad:55:f4:4e:d7:0c:fe:bd:fe:cf:
                    a0:d4:00:3c:dd:00:1a:83:94:72:c6:04:6b:4e:2b:
                    ed:50:5d:9c:63:6b:8e:66:68:a8:ac:58:a2:7e:24:
                    ac:55:de:95:f4:76:f3:b6:58:ab:66:12:ac:fb:cf:
                    75:f4:04:e5:ab:6a:fd:7a:35:d2:49:f2:ea:45:51:
                    0d:58:6c:64:53:e7:cf:5c:18:4c:8e:83:d2:00:a4:
                    bd:81:6a:76:e6:60:b9:06:19:d2:bd:64:b9:59:56:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:27:B8:73:C8:3C:4F:87:F3:F4:27:7F:19:7D:6A:95:AE:99:AD:B9
            X509v3 Authority Key Identifier:
                keyid:EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/3137372e31312e3234342e302f32322d3234203d3e203532393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:5e:5e:30:c4:9e:ca:ad:13:27:64:fb:21:c2:b8:07:71:2d:
         3d:17:b6:24:af:5c:de:d2:56:43:b2:cf:ec:e3:ff:1b:cf:fc:
         fc:ca:e2:a4:96:8f:03:bd:11:8a:7f:65:68:4f:2f:3c:e8:21:
         1e:11:d8:9e:e3:e9:77:b4:e2:3d:38:13:e9:19:9b:d1:09:ea:
         7d:41:f1:66:4c:4d:2b:1e:d5:ac:d4:09:15:d6:10:e5:78:4e:
         23:82:4b:84:08:78:ae:c7:05:83:4b:c9:8e:ce:3d:d2:2b:15:
         73:c0:df:c4:88:22:7d:15:4f:c1:e9:f7:e7:17:b7:2c:88:5f:
         90:f3:af:82:16:04:bf:52:ef:1f:6f:12:0c:f0:a7:41:a3:f2:
         21:25:12:cf:6a:2c:bc:0a:a0:1b:8f:29:6d:20:65:13:f3:a1:
         92:bb:f5:e2:8f:0f:83:99:ca:53:c5:c1:e7:b0:c5:71:36:a4:
         64:79:ee:fa:08:e8:c0:ab:f0:06:11:2b:72:08:36:df:85:cc:
         9f:f3:99:73:4a:42:6c:f8:46:1a:b3:96:ac:37:75:92:74:26:
         47:68:6b:20:b8:d2:15:df:37:4f:d9:ca:cd:45:08:3f:fe:77:
         73:24:34:a6:0c:a0:95:f9:c2:d7:e2:eb:bf:97:ef:f3:e2:ab:
         df:67:4f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:35:15 2025 by rpki-client