This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32372e302f32342d3234203d3e203532363632.roa
File:                     3137372e36372e32372e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier:          QsXK0s8dG+Nfsekqe7jUJxyCgk8J4LZVo02D2nT51Mk=
Subject key identifier:   AB:E8:DF:0E:A8:61:18:BB:DC:EA:AF:07:A2:DD:BC:47:5F:6E:87:04
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       034D0B9A160FF13A225688A5D0E27B4F404C4BD4
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32372e302f32342d3234203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:58 +0000
ROA not before:           Tue 25 Nov 2025 17:12:58 +0000
ROA not after:            Tue 24 Nov 2026 17:17:58 +0000
asID:                     52662
IP address blocks:        177.67.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4d:0b:9a:16:0f:f1:3a:22:56:88:a5:d0:e2:7b:4f:40:4c:4b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:58 2025 GMT
            Not After : Nov 24 17:17:58 2026 GMT
        Subject: CN=ABE8DF0EA86118BBDCEAAF07A2DDBC475F6E8704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:7a:20:f0:51:8a:7a:97:0b:7d:3c:b4:df:
                    5e:fb:58:7c:c3:b6:72:dc:7c:80:f4:95:d6:a6:14:
                    cd:d8:1a:00:af:16:fb:d8:ae:59:1e:33:5c:11:d3:
                    39:23:6a:08:18:6d:08:19:8d:08:4b:07:6e:ae:54:
                    06:26:39:28:33:4f:08:4e:b5:7d:35:fd:2a:a8:05:
                    79:c5:35:71:5e:a4:1d:4b:ca:eb:59:90:37:74:8d:
                    63:9e:ca:01:37:24:35:fc:80:f3:26:8a:8f:80:dd:
                    91:45:c6:5f:2a:00:28:dd:9a:93:d2:f9:5c:5c:f9:
                    be:d8:e2:db:4e:4e:98:bc:63:a1:dc:2d:c0:38:04:
                    ce:6a:f2:e8:f2:10:f8:86:60:b3:2b:1d:88:b4:94:
                    a2:c6:fb:46:80:44:78:43:ad:3f:59:47:93:0c:33:
                    11:46:d8:33:23:1a:f1:a3:37:e4:68:cf:28:bb:93:
                    2f:cc:11:96:33:77:8f:22:9a:64:19:dd:b3:34:45:
                    61:60:35:76:0e:73:b8:c7:44:94:d2:cb:9c:8f:2e:
                    d7:55:0e:af:be:3f:41:46:43:6e:32:a1:2b:4e:04:
                    37:0b:a6:95:b7:d0:8c:f1:6e:a1:25:5a:6a:2b:20:
                    d9:77:13:df:fc:7d:b0:02:9f:96:f3:14:e6:63:76:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E8:DF:0E:A8:61:18:BB:DC:EA:AF:07:A2:DD:BC:47:5F:6E:87:04
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32372e302f32342d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ef:b6:f4:dd:29:3b:66:0c:64:eb:6d:b8:1f:fa:ec:02:93:
         7c:de:31:d4:7e:e0:92:22:9f:dd:46:f4:2c:d0:be:05:63:7b:
         8a:85:88:9f:63:cd:9e:5e:49:38:11:5c:7f:54:a6:77:04:c2:
         ee:16:2a:c3:95:17:ec:fb:98:c3:7e:6d:03:95:74:db:18:43:
         f9:4c:85:6b:08:70:ec:3d:de:59:84:26:c9:fc:fd:87:24:97:
         63:ba:c9:8d:47:36:db:8f:3c:93:61:ae:bb:f3:30:ca:08:ef:
         92:c9:06:2b:72:14:cd:92:44:8f:01:46:43:b2:30:68:27:02:
         c1:e1:dd:48:d4:4f:86:15:9e:34:e1:0d:ec:68:3d:24:b7:fc:
         b9:a7:d3:57:64:8d:73:c8:21:ed:c2:4d:f5:bf:de:ce:98:8f:
         aa:9d:72:b9:22:fd:04:e4:c5:00:00:74:cc:37:33:53:ab:88:
         90:8b:ee:32:6c:36:aa:ef:bf:38:3c:35:e8:de:ae:0b:29:9d:
         e4:e8:b1:ea:7e:fe:04:87:9f:b8:fe:e4:c5:a1:e8:a6:8e:b6:
         b2:b2:95:7c:8b:e2:b6:b8:95:f1:fd:81:34:2f:df:56:f5:f0:
         56:54:73:b8:a5:5d:4d:08:58:0a:9b:ab:bb:84:6a:2e:3a:15:
         de:7a:7e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:18 2025 by rpki-client