This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/3137392e34322e36382e302f32342d3234203d3e20323732343636.roa
File:                     3137392e34322e36382e302f32342d3234203d3e20323732343636.roa (raw, json)
Hash identifier:          KHM3oVP6ihIIZ+9v93NPP7dJft7yLvIjZONrCh5gk8s=
Subject key identifier:   31:D5:80:07:F5:76:C9:6E:EE:D2:F1:31:8B:44:24:4E:AF:D8:E2:82
Certificate issuer:       /CN=DC95AFE058A2A53884ABA1570BF0CB974924D055
Certificate serial:       21C2F03E2104636359D6298231E806C523277F4E
Authority key identifier: DC:95:AF:E0:58:A2:A5:38:84:AB:A1:57:0B:F0:CB:97:49:24:D0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC95AFE058A2A53884ABA1570BF0CB974924D055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/3137392e34322e36382e302f32342d3234203d3e20323732343636.roa
Signing time:             Wed 03 Dec 2025 18:44:41 +0000
ROA not before:           Wed 03 Dec 2025 18:39:41 +0000
ROA not after:            Wed 02 Dec 2026 18:44:41 +0000
asID:                     272466
IP address blocks:        179.42.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/DC95AFE058A2A53884ABA1570BF0CB974924D055.crl
                          rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/DC95AFE058A2A53884ABA1570BF0CB974924D055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC95AFE058A2A53884ABA1570BF0CB974924D055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c2:f0:3e:21:04:63:63:59:d6:29:82:31:e8:06:c5:23:27:7f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC95AFE058A2A53884ABA1570BF0CB974924D055
        Validity
            Not Before: Dec  3 18:39:41 2025 GMT
            Not After : Dec  2 18:44:41 2026 GMT
        Subject: CN=31D58007F576C96EEED2F1318B44244EAFD8E282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6e:c1:23:16:a5:bf:5f:b0:80:c6:98:5d:0e:
                    18:5a:e0:33:a9:dc:f0:7c:4c:50:0a:b6:76:10:e1:
                    24:f6:07:b4:4f:82:e1:35:30:7a:9d:0d:c1:a5:1e:
                    70:1e:95:65:7d:25:3e:27:23:a8:b7:5f:a8:01:a2:
                    e3:2c:8d:29:b9:c4:84:6e:32:26:ec:4e:7c:6e:bc:
                    2c:f9:25:a5:ca:1b:cf:e8:25:9a:c6:7f:f4:17:85:
                    6e:9f:e7:8c:09:e7:0a:a2:42:ba:89:c7:ce:3a:fa:
                    8e:ef:50:02:fe:4d:3d:a0:f8:21:4c:fe:5c:65:42:
                    17:b1:36:dc:05:60:c7:27:7d:b0:20:19:fc:35:b2:
                    64:ba:7a:14:0f:51:94:e0:2a:6e:76:c8:3f:95:1f:
                    c0:97:2a:49:5f:39:29:19:ca:22:bb:d1:b7:b4:3a:
                    4b:ab:a3:dc:0a:f2:76:4c:86:20:6e:71:f7:d5:5b:
                    34:c1:20:15:50:bb:c5:c3:28:89:48:bf:50:9f:2c:
                    a0:9e:83:36:87:a7:14:a1:2a:ec:9c:a1:37:d7:2c:
                    e5:23:9d:29:88:82:f4:48:c8:60:4a:05:bf:39:40:
                    20:3d:5b:dd:02:79:b0:a5:68:63:4a:39:76:ad:65:
                    bf:c8:79:15:84:cb:15:dc:d0:ce:ab:6e:c8:ac:dd:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:80:07:F5:76:C9:6E:EE:D2:F1:31:8B:44:24:4E:AF:D8:E2:82
            X509v3 Authority Key Identifier:
                keyid:DC:95:AF:E0:58:A2:A5:38:84:AB:A1:57:0B:F0:CB:97:49:24:D0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/DC95AFE058A2A53884ABA1570BF0CB974924D055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC95AFE058A2A53884ABA1570BF0CB974924D055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/3137392e34322e36382e302f32342d3234203d3e20323732343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:6a:4f:4d:0f:ac:1c:63:39:18:8a:a9:72:ea:46:ed:93:7f:
         a2:fe:be:06:a5:24:1d:b2:5c:6a:1a:41:e3:d2:bc:ee:7f:50:
         f9:3c:e2:2a:d9:6b:ab:f8:ce:fd:ae:58:4b:b5:7d:b6:a7:0f:
         2a:8a:01:17:97:1d:31:57:07:63:4d:b3:f8:29:a7:5c:f4:93:
         9f:86:27:43:e5:16:12:a5:de:ac:20:72:d2:76:79:40:db:31:
         fd:be:f1:3c:70:0b:55:6b:b9:f7:60:56:3b:c4:f7:e1:5c:f3:
         91:b4:9d:a2:04:54:5a:d8:97:10:6a:8c:5e:e1:02:3d:0d:61:
         59:bd:05:bd:d1:e6:25:f3:fd:e4:3d:cb:2d:72:ac:bd:be:9f:
         e0:47:33:2c:4d:cc:5f:01:e7:d8:95:20:25:22:ab:b0:55:d8:
         fd:a4:50:77:75:5c:0b:42:0d:b3:4e:46:e8:4d:2f:ca:dd:83:
         e0:11:a9:4b:1b:51:e0:89:48:e9:18:2b:5c:11:f7:b9:6e:bd:
         af:d9:26:08:eb:94:39:a3:b6:f2:3b:e5:da:20:aa:f8:fa:20:
         02:fe:77:b7:ce:e3:e1:6d:f3:31:ce:f1:76:7f:88:a0:0d:7b:
         03:bd:60:41:95:c7:0a:a4:78:7e:e4:6e:f9:1c:ee:34:d9:bb:
         e5:30:94:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:05:07 2025 by rpki-client