This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32332d3233203d3e203532363632.roa
File:                     3137372e36372e32342e302f32332d3233203d3e203532363632.roa (raw, json)
Hash identifier:          AQMFIh1fq1dfqKcx9o+9TMDddoKZsFxyrNlR9OoybPE=
Subject key identifier:   2E:93:D3:54:6D:67:DD:67:BD:65:72:02:FA:1C:30:53:7D:58:F6:3B
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       15BC07DE4EEF06F6D279627E936D626927D50A2F
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32332d3233203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:18:00 +0000
ROA not before:           Tue 25 Nov 2025 17:13:00 +0000
ROA not after:            Tue 24 Nov 2026 17:18:00 +0000
asID:                     52662
IP address blocks:        177.67.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bc:07:de:4e:ef:06:f6:d2:79:62:7e:93:6d:62:69:27:d5:0a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:13:00 2025 GMT
            Not After : Nov 24 17:18:00 2026 GMT
        Subject: CN=2E93D3546D67DD67BD657202FA1C30537D58F63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:46:ce:a0:d9:c5:9d:59:b0:4a:a3:48:43:
                    51:60:93:ce:56:48:ee:90:e4:f6:63:b2:95:c5:cb:
                    d0:e0:81:8a:bc:b6:37:4c:19:3a:60:f8:4d:29:f9:
                    9d:3e:1c:ed:40:e6:9b:be:d5:8a:8a:8a:78:0f:c8:
                    29:97:94:09:01:31:28:b9:ce:bc:0d:05:4b:a6:46:
                    96:34:84:1e:67:63:d7:9e:c4:df:d0:33:e4:f5:1c:
                    85:e4:5c:f2:3f:cf:64:36:75:79:ee:9b:dd:6a:ee:
                    79:66:b7:ed:ba:f0:22:15:7c:5d:e0:25:31:fb:f3:
                    81:90:e6:86:c7:b5:f0:1c:1e:1d:8b:8f:a3:6a:1d:
                    23:d9:4c:34:d5:f2:01:f1:bd:7b:59:66:a7:76:2e:
                    bd:3f:37:17:3f:90:a4:f6:89:58:dc:22:42:05:fc:
                    06:5b:04:b6:93:60:e7:02:f4:fe:31:88:b7:ba:bc:
                    0a:3c:30:8c:9c:81:e9:ed:f0:e2:f9:9d:c4:d4:19:
                    0f:f1:dc:5a:f0:e7:f6:72:5e:69:b7:e3:07:a9:69:
                    2a:22:fc:8b:83:ef:8a:c4:db:63:9d:f3:67:b6:b5:
                    dd:78:cc:c4:6c:12:d0:fd:69:5c:4b:1d:6b:04:ff:
                    ff:64:a3:0d:d3:31:2e:9f:0e:04:08:d7:f5:5f:b3:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:93:D3:54:6D:67:DD:67:BD:65:72:02:FA:1C:30:53:7D:58:F6:3B
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32332d3233203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:77:06:49:28:a2:1f:8b:ca:d0:6b:74:cb:41:5f:33:c6:63:
         5b:bb:d4:b4:d9:78:6f:1f:1d:ed:fb:82:47:0e:db:9b:c1:be:
         67:e4:fc:d1:49:b8:6a:1b:73:0a:32:42:50:b8:b8:dd:8f:40:
         c9:f5:0c:66:25:23:6e:36:46:6a:5c:f2:af:08:82:c9:6c:a4:
         a0:d1:ef:b4:86:46:5e:35:9c:03:0a:03:80:d3:0e:7f:6e:0d:
         39:50:e7:1e:cf:05:62:3a:71:30:bf:2e:85:99:c3:12:c2:43:
         14:12:be:24:05:d2:d6:95:4d:e4:59:93:dc:1a:2c:1a:d3:20:
         46:a4:42:5b:48:40:a2:fd:88:a0:0a:8b:bd:2a:33:4a:da:bb:
         af:57:6b:2f:02:0a:4f:8b:e5:d5:59:19:09:4b:e2:94:c1:08:
         23:32:26:73:1a:0f:55:15:3e:92:0d:33:61:ba:58:97:2f:aa:
         ac:8c:3f:57:ec:3b:2b:a2:16:4a:85:26:dd:7d:08:51:6d:64:
         07:e8:eb:4b:0c:3a:75:ee:82:fa:50:d5:c2:ef:8d:f3:c8:ff:
         e8:19:77:7c:f4:19:a3:da:04:30:1b:f9:e9:1d:92:47:25:f2:
         3f:4b:3e:41:f5:c7:8d:e1:9c:38:24:21:06:18:5c:58:e7:c6:
         b7:84:be:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:18:36 2025 by rpki-client