This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e31322e302e302f31382d3234203d3e203238363635.roa
File:                     3137372e31322e302e302f31382d3234203d3e203238363635.roa (raw, json)
Hash identifier:          TQb3lzwk+rMlFTHDn++OSM8a3b/qc2hsPMXimmgc8KI=
Subject key identifier:   9B:F4:73:CB:AE:52:91:AB:D9:13:FE:1F:57:F7:76:68:15:7C:45:52
Certificate issuer:       /CN=5ED394D0E587E9DDF89033FC8022DAB74DF90EFE
Certificate serial:       1486F72793A93F94BF17EEFAD9D7862681CE9680
Authority key identifier: 5E:D3:94:D0:E5:87:E9:DD:F8:90:33:FC:80:22:DA:B7:4D:F9:0E:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e31322e302e302f31382d3234203d3e203238363635.roa
Signing time:             Thu 27 Nov 2025 01:02:14 +0000
ROA not before:           Thu 27 Nov 2025 00:57:14 +0000
ROA not after:            Thu 26 Nov 2026 01:02:14 +0000
asID:                     28665
IP address blocks:        177.12.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl
                          rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:86:f7:27:93:a9:3f:94:bf:17:ee:fa:d9:d7:86:26:81:ce:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ED394D0E587E9DDF89033FC8022DAB74DF90EFE
        Validity
            Not Before: Nov 27 00:57:14 2025 GMT
            Not After : Nov 26 01:02:14 2026 GMT
        Subject: CN=9BF473CBAE5291ABD913FE1F57F77668157C4552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:05:1c:62:c2:64:39:8c:e4:eb:43:03:da:41:
                    9d:d5:05:db:bc:54:4c:9f:1f:13:2e:9e:fe:95:7a:
                    06:20:a0:14:7c:d0:b7:f8:b6:71:71:0a:83:9c:94:
                    4a:05:26:20:fc:69:f5:70:99:01:37:bd:6f:cc:f9:
                    74:c7:5a:2d:2f:88:0f:a5:dc:ae:7c:f1:6e:02:2a:
                    21:ae:72:c3:33:04:a3:2f:ba:9f:dd:ba:0a:72:27:
                    2e:4f:22:f0:56:81:e2:78:9b:32:b0:36:fd:ea:6b:
                    fe:03:4a:38:7f:53:47:e7:6d:53:b5:f7:b5:0f:09:
                    74:04:d8:d7:78:df:aa:f4:16:f1:41:95:79:5e:0c:
                    d1:18:b5:52:69:0d:41:cf:f8:7c:b6:07:0c:9c:77:
                    38:40:0c:6e:32:94:85:7e:bd:8a:c2:13:84:0b:a3:
                    36:ab:90:45:d8:f2:89:81:d7:1f:01:93:ee:30:7a:
                    8e:4f:1f:74:e8:e8:48:cf:4b:35:2f:96:7f:d2:f7:
                    0d:87:ed:95:b6:fc:e6:26:00:b9:24:8f:0b:87:8e:
                    09:a0:35:95:38:cc:21:60:ef:b1:83:49:73:43:a5:
                    c6:57:92:10:2d:cf:5a:82:58:3c:86:65:d9:82:b3:
                    d8:05:a5:69:fc:51:94:cf:63:98:95:20:f5:34:89:
                    05:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F4:73:CB:AE:52:91:AB:D9:13:FE:1F:57:F7:76:68:15:7C:45:52
            X509v3 Authority Key Identifier:
                keyid:5E:D3:94:D0:E5:87:E9:DD:F8:90:33:FC:80:22:DA:B7:4D:F9:0E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e31322e302e302f31382d3234203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:67:6e:95:3d:eb:3b:41:05:a8:b3:a7:26:dd:b7:84:1f:
         e0:02:92:6a:60:17:06:5b:82:ee:48:c8:cc:97:5c:42:8a:be:
         c8:0e:fb:a4:6f:e0:73:17:67:f0:fd:05:5c:c8:32:75:8d:e4:
         18:36:35:a5:3c:ff:73:57:b9:41:e4:a7:c7:68:9f:f3:42:56:
         a7:ef:84:4b:a5:5c:25:fa:0a:51:66:24:aa:6b:c6:0b:01:28:
         43:cd:35:f7:9e:75:d0:fb:b2:7b:fa:90:6b:db:04:97:96:39:
         d9:01:1a:6f:e1:65:68:80:73:b2:28:52:7b:c0:db:35:d6:7a:
         16:b0:12:e0:08:94:df:87:26:12:c3:68:cb:b8:cd:0c:e1:25:
         e8:dc:21:19:63:31:88:67:33:80:29:de:71:6c:59:33:0e:21:
         77:39:ae:86:87:f6:e3:b5:86:93:94:62:a7:70:f4:d2:e8:ed:
         9d:18:2b:96:aa:04:06:7f:2c:55:22:5e:b3:df:73:56:b1:e1:
         1a:3e:61:fc:13:be:ae:d0:68:4f:ca:2e:db:48:ac:ae:c4:73:
         12:92:ec:ee:bc:6f:3f:c4:bf:23:03:7e:72:19:53:14:7f:be:
         5a:c7:90:6e:82:19:de:82:7a:af:bd:a6:c8:03:e0:2d:64:0a:
         01:18:3e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:34:25 2025 by rpki-client