This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32342d3234203d3e203532363632.roa
File:                     3137372e36372e32342e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier:          st+SYL1JMtnusRRO5sQQY884iCLJE3pm5uwSuTQvhkQ=
Subject key identifier:   51:AD:7F:DC:EB:DC:24:A6:A7:21:2E:0E:1E:C3:14:B9:F6:0A:6F:8E
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       6E4D83530B872479E96BACC69FCB91AA026E3500
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32342d3234203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:56 +0000
ROA not before:           Tue 25 Nov 2025 17:12:56 +0000
ROA not after:            Tue 24 Nov 2026 17:17:56 +0000
asID:                     52662
IP address blocks:        177.67.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4d:83:53:0b:87:24:79:e9:6b:ac:c6:9f:cb:91:aa:02:6e:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:56 2025 GMT
            Not After : Nov 24 17:17:56 2026 GMT
        Subject: CN=51AD7FDCEBDC24A6A7212E0E1EC314B9F60A6F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:20:f0:4b:d1:da:c2:e9:5a:07:ba:28:eb:
                    47:d3:97:66:0e:93:cb:97:64:4f:8d:eb:18:fb:8a:
                    51:eb:fc:33:47:92:8e:08:c8:f9:d2:1f:09:4a:d3:
                    15:64:59:2e:a6:9c:e5:df:81:aa:73:c1:e2:a0:c2:
                    9d:88:a7:3b:e4:79:4f:ee:42:18:c5:b5:d2:9b:2e:
                    12:e5:b9:b6:47:d2:54:5c:e3:5a:22:64:f3:4f:b8:
                    33:c5:85:b4:76:e1:d1:39:c6:56:d6:a0:eb:c6:a2:
                    a4:82:e4:9e:a4:49:5c:9c:2b:de:a8:3a:1b:9e:91:
                    11:d1:97:e4:5f:b7:05:4f:fa:cb:44:70:00:99:87:
                    34:aa:ce:b2:f8:d9:55:2c:5e:48:05:8e:f4:2b:c1:
                    eb:e8:0c:ac:85:81:74:98:aa:d1:ec:81:07:e2:7a:
                    f3:8d:3a:6c:13:a7:6a:56:19:74:f9:57:31:cc:0b:
                    5d:64:19:ca:a8:2d:c8:d0:2b:87:45:41:d8:7e:e3:
                    4c:79:41:00:c9:56:09:9e:8c:06:7a:38:58:82:ed:
                    13:77:d2:d8:ef:e1:a1:68:fb:40:e6:32:b9:b0:d6:
                    f3:0b:43:a7:14:c1:c9:51:c6:e9:2f:da:89:9c:0d:
                    a3:9f:8a:28:aa:0f:01:9b:cd:b3:63:f8:7c:88:56:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AD:7F:DC:EB:DC:24:A6:A7:21:2E:0E:1E:C3:14:B9:F6:0A:6F:8E
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32342d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:0f:2d:30:32:ab:2a:ec:6a:fb:80:47:9d:19:72:55:f1:85:
         0c:7f:2a:29:93:4b:cc:ff:f9:12:47:09:4f:d3:49:6c:fa:24:
         2c:aa:c8:0d:6b:73:fd:74:79:70:3e:fa:a0:75:5f:58:3a:5b:
         39:72:b6:54:ba:13:4f:a3:35:2d:fe:9c:12:f8:4b:46:0c:74:
         4c:67:0a:e2:a2:71:0d:3c:0d:7e:7e:27:51:2d:a6:10:a3:2b:
         ce:65:ae:5f:24:3e:a8:65:63:f3:2d:c7:96:b5:96:6b:2d:d9:
         f3:13:e7:49:35:dd:09:30:d6:aa:85:3f:2b:80:b4:92:50:d4:
         4e:ce:22:49:3e:79:be:fe:38:25:2d:12:e8:2e:bb:ec:b3:e9:
         de:5c:dc:47:93:f9:80:83:09:81:a7:7d:7a:40:19:a3:9d:db:
         6c:2a:7c:97:8a:11:dc:9d:79:9c:ac:b0:52:68:d3:b1:14:e7:
         b2:df:02:02:41:ff:32:9e:0e:71:69:56:4f:58:66:a8:fe:e5:
         14:53:54:40:5b:ec:a5:5b:8c:87:06:55:b6:86:71:20:d7:4b:
         41:18:c6:0b:2f:1e:aa:1a:a7:30:0e:98:e9:1d:65:51:37:39:
         a0:b3:6f:54:20:f8:49:58:d3:44:b7:fa:64:8b:70:13:81:d4:
         9b:e1:1d:12
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbk2DUwuHJHnpa6zGn8uRqgJuNQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5RDIxQjA3MDIxMDVENEFFRTdCMjY1QjM5NzVEMzQx
NTRCMUMwNjAeFw0yNTExMjUxNzEyNTZaFw0yNjExMjQxNzE3NTZaMDMxMTAvBgNV
BAMTKDUxQUQ3RkRDRUJEQzI0QTZBNzIxMkUwRTFFQzMxNEI5RjYwQTZGOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vyDwS9HawulaB7oo60fTl2YO
k8uXZE+N6xj7ilHr/DNHko4IyPnSHwlK0xVkWS6mnOXfgapzweKgwp2IpzvkeU/u
QhjFtdKbLhLlubZH0lRc41oiZPNPuDPFhbR24dE5xlbWoOvGoqSC5J6kSVycK96o
OhuekRHRl+RftwVP+stEcACZhzSqzrL42VUsXkgFjvQrwevoDKyFgXSYqtHsgQfi
evONOmwTp2pWGXT5VzHMC11kGcqoLcjQK4dFQdh+40x5QQDJVgmejAZ6OFiC7RN3
0tjv4aFo+0DmMrmw1vMLQ6cUwclRxukv2omcDaOfiiiqDwGbzbNj+HyIViM9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUa1/3OvcJKanIS4OHsMUufYKb44wHwYDVR0j
BBgwFoAUyJ0hsHAhBdSu57Jls5ddNBVLHAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD
RFQvMC9DODlEMjFCMDcwMjEwNUQ0QUVFN0IyNjVCMzk3NUQzNDE1NEIxQzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OUQyMUIwNzAyMTA1RDRB
RUU3QjI2NUIzOTc1RDM0MTU0QjFDMDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv
MzEzNzM3MmUzNjM3MmUzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM2
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFDGDANBgkqhkiG9w0BAQsFAAOCAQEAdg8tMDKrKuxq
+4BHnRlyVfGFDH8qKZNLzP/5EkcJT9NJbPokLKrIDWtz/XR5cD76oHVfWDpbOXK2
VLoTT6M1Lf6cEvhLRgx0TGcK4qJxDTwNfn4nUS2mEKMrzmWuXyQ+qGVj8y3HlrWW
ay3Z8xPnSTXdCTDWqoU/K4C0klDUTs4iST55vv44JS0S6C677LPp3lzcR5P5gIMJ
gad9ekAZo53bbCp8l4oR3J15nKywUmjTsRTnst8CAkH/Mp4OcWlWT1hmqP7lFFNU
QFvspVuMhwZVtoZxINdLQRjGCy8eqhqnMA6Y6R1lUTc5oLNvVCD4SVjTRLf6ZItw
E4HUm+EdEg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:14 2025 by rpki-client