This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32362e302f32332d3233203d3e203532363632.roa
File:                     3137372e36372e32362e302f32332d3233203d3e203532363632.roa (raw, json)
Hash identifier:          UNWtumW6PXOohRddAA5bYSQddgOEvkiAKMwaJLWkbsE=
Subject key identifier:   15:98:42:42:DC:58:42:74:65:20:72:5C:EA:B8:08:00:DF:E6:54:88
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       0F8080E9EA12B9537C45E49B19749A599210D17B
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32362e302f32332d3233203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:58 +0000
ROA not before:           Tue 25 Nov 2025 17:12:58 +0000
ROA not after:            Tue 24 Nov 2026 17:17:58 +0000
asID:                     52662
IP address blocks:        177.67.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:80:80:e9:ea:12:b9:53:7c:45:e4:9b:19:74:9a:59:92:10:d1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:58 2025 GMT
            Not After : Nov 24 17:17:58 2026 GMT
        Subject: CN=15984242DC5842746520725CEAB80800DFE65488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:bc:b6:40:5d:e7:95:39:b9:ed:94:1b:db:
                    eb:f4:8d:29:c7:38:0b:13:8b:59:db:e0:3b:87:3c:
                    5e:67:29:d1:39:db:70:a6:1b:e5:01:92:c9:f3:78:
                    ef:c2:d3:90:93:16:94:23:91:a9:5a:4e:fa:0a:f6:
                    41:50:bb:d1:2f:86:df:47:d7:3c:d7:36:37:20:89:
                    90:f5:84:1b:23:82:6e:20:27:a6:3c:09:fd:71:00:
                    1e:e0:9a:32:2b:6a:6e:67:c6:78:f0:26:4e:e3:ee:
                    27:f1:bc:70:9f:4f:35:bd:a1:f3:0a:cd:0a:88:17:
                    0c:f9:f4:5c:3b:32:f9:8e:df:3f:f4:0a:9d:9a:b7:
                    58:54:8f:31:7a:43:89:e5:0a:73:33:e0:fa:a1:dc:
                    d8:c5:eb:07:9f:26:e4:65:5c:0a:4e:09:ea:8e:e2:
                    8d:70:32:89:a5:12:06:d4:52:9c:b9:51:1f:ca:a0:
                    52:b7:74:d9:7c:bd:53:d0:fa:3c:9f:f8:e4:1c:7f:
                    3f:21:37:4e:26:67:e0:7e:ba:d7:cd:2e:cd:82:4d:
                    91:0a:f7:5f:2c:24:10:a2:e5:8a:5c:6a:c0:d4:15:
                    70:c6:1a:c5:c1:9c:05:16:db:91:d2:1d:f5:c1:4c:
                    a9:4b:13:54:fa:ea:8f:0d:66:9c:77:19:3d:4f:21:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:98:42:42:DC:58:42:74:65:20:72:5C:EA:B8:08:00:DF:E6:54:88
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32362e302f32332d3233203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:76:2b:d0:85:e7:17:df:13:44:6d:40:18:af:2b:ed:e6:cb:
         3f:df:cb:c5:ac:4b:5c:e1:7f:02:b5:d7:58:bc:c5:85:a6:d0:
         70:7c:c6:6f:c5:33:3f:ca:17:9a:b1:8e:ee:fd:a3:12:fe:27:
         5d:22:f5:c7:57:b7:3a:3f:4d:3b:75:58:a0:f1:74:2a:7e:b4:
         41:19:23:94:9d:c8:b0:99:e7:26:b3:38:93:22:da:ad:19:cb:
         2a:46:3a:18:99:6b:7a:4d:70:79:f4:f9:d8:e5:11:fe:1a:e6:
         72:c6:c6:48:53:64:18:a2:3c:f9:01:d4:44:5c:48:44:4a:fd:
         6c:89:1f:83:b8:84:22:31:4d:6c:f4:f3:a3:75:32:f0:20:4f:
         2f:5b:d6:49:bd:00:6b:0d:a4:3e:6f:d0:4b:47:b0:75:0d:c2:
         08:f7:e0:57:c3:29:7a:5b:b2:3e:3f:5b:2c:d3:e5:08:a0:de:
         f7:53:50:e3:44:de:33:fa:a2:89:61:6a:3e:c1:58:3f:5c:1f:
         33:e6:24:9b:59:d9:0f:ec:1f:f1:69:d2:7d:24:85:b2:be:9b:
         0b:9e:02:ef:52:e4:a6:e9:20:20:d2:7a:ca:95:98:b4:67:8c:
         c5:a1:97:ba:20:fa:28:2f:4a:66:d0:31:1a:6a:52:94:aa:6d:
         11:9b:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:18:28 2025 by rpki-client