This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32362e302f32342d3234203d3e203532363632.roa
File:                     3137372e36372e32362e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier:          bmX5bZuNaTrDtMpJmoCBoP0fxUqo1TsT07TJI/+YNaY=
Subject key identifier:   29:C9:57:1C:3E:99:C1:36:18:6C:57:B1:96:A5:A4:E5:FE:19:E5:14
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       445D58FB4B4FAE5349942B58802E4655DF1F460A
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32362e302f32342d3234203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:53 +0000
ROA not before:           Tue 25 Nov 2025 17:12:53 +0000
ROA not after:            Tue 24 Nov 2026 17:17:53 +0000
asID:                     52662
IP address blocks:        177.67.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5d:58:fb:4b:4f:ae:53:49:94:2b:58:80:2e:46:55:df:1f:46:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:53 2025 GMT
            Not After : Nov 24 17:17:53 2026 GMT
        Subject: CN=29C9571C3E99C136186C57B196A5A4E5FE19E514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:9e:63:7b:c9:0c:7f:ea:80:b5:82:04:83:
                    e2:54:23:33:7e:0f:75:f9:c5:e1:9f:8e:2f:41:bb:
                    8a:7e:0c:ed:27:bd:9b:20:23:3e:aa:d0:48:27:ea:
                    10:00:a5:79:a0:8a:65:65:0a:b5:93:f4:22:18:04:
                    5f:fb:02:33:8c:c1:ba:34:6c:37:fe:e7:bc:6e:5e:
                    78:89:be:09:35:ca:a3:1e:2e:99:72:fa:02:fe:3e:
                    3f:99:f3:b3:80:09:e3:b6:47:d8:4c:d4:11:8d:9e:
                    74:49:93:0f:24:8e:9e:12:d8:f9:92:7e:0c:67:86:
                    7e:05:61:97:85:e3:5c:bd:ae:49:2f:70:e7:a2:08:
                    69:24:b5:05:98:51:11:be:f9:9d:aa:2d:eb:aa:19:
                    db:96:2f:75:8b:c7:d7:85:4d:47:7e:7c:b9:7b:74:
                    78:0a:18:31:52:94:05:bf:73:b0:75:e0:1d:ad:25:
                    75:47:5c:80:17:21:6d:6a:30:2e:fa:eb:08:34:76:
                    ec:94:42:51:cc:05:94:7f:c9:25:c3:ed:4a:a2:ff:
                    b5:f2:8b:e5:40:f2:9f:d6:34:81:b2:a0:66:c5:0a:
                    56:b1:64:ec:3c:2e:cc:ec:6e:81:84:ea:c1:61:0b:
                    9c:8b:d4:4f:6d:8a:b0:39:b1:c3:8a:cb:dd:45:6a:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C9:57:1C:3E:99:C1:36:18:6C:57:B1:96:A5:A4:E5:FE:19:E5:14
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32362e302f32342d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:11:a0:3b:b9:d9:16:e4:8e:1a:3c:03:2a:28:c1:c9:94:d8:
         cd:bc:0b:ce:b9:06:67:02:5c:3e:11:0e:4a:30:ac:90:3c:ad:
         a7:fe:17:6f:7e:fc:bd:d7:d9:a1:b6:f3:bd:a4:84:95:c9:d0:
         d0:a8:3b:8b:f0:9c:56:ad:0a:3e:35:1a:7a:04:7c:8f:38:d8:
         c9:da:53:b2:e1:bf:cb:e3:4d:17:80:fe:b3:fb:68:fa:b6:a8:
         5e:72:1c:5c:1b:86:65:a8:79:ed:af:74:99:0b:0d:12:c8:a8:
         96:13:78:45:ae:a3:1c:cd:61:65:d0:32:bf:bd:c8:68:16:db:
         ef:c0:b0:ad:79:62:da:d0:60:fe:65:b5:7b:ac:dc:22:5f:2e:
         7b:65:74:0d:71:00:3c:48:fb:d0:4f:15:d6:76:c6:b7:2e:47:
         8c:5b:44:b4:b8:93:67:7c:34:b5:e4:0f:1a:90:c9:36:d6:08:
         43:6d:19:f3:91:15:0a:37:60:2b:5c:9a:79:6d:03:2e:63:a6:
         e5:c3:59:60:60:8f:34:8a:75:01:59:e3:dd:b9:e6:0c:3f:3a:
         7c:8d:d6:f5:37:8f:44:9a:03:27:77:72:7d:3b:e9:63:cf:3d:
         54:11:9b:fc:26:ed:a5:35:7e:b2:cf:82:04:d2:46:7b:12:3c:
         2c:0e:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:11 2025 by rpki-client