This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa
File:                     3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa (raw, json)
Hash identifier:          5PNI/HMZX6UxDp+VtcSF3SKesm7JZFGDt2xyQkvUeEM=
Subject key identifier:   E7:5C:F9:A7:83:84:23:FC:23:19:ED:64:12:1A:05:FD:92:BC:99:A6
Certificate issuer:       /CN=5ED394D0E587E9DDF89033FC8022DAB74DF90EFE
Certificate serial:       5E98896B22DBCE8CF7162AB08F2B406E441F7A79
Authority key identifier: 5E:D3:94:D0:E5:87:E9:DD:F8:90:33:FC:80:22:DA:B7:4D:F9:0E:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa
Signing time:             Thu 27 Nov 2025 01:02:15 +0000
ROA not before:           Thu 27 Nov 2025 00:57:15 +0000
ROA not after:            Thu 26 Nov 2026 01:02:15 +0000
asID:                     28665
IP address blocks:        177.136.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl
                          rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:98:89:6b:22:db:ce:8c:f7:16:2a:b0:8f:2b:40:6e:44:1f:7a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ED394D0E587E9DDF89033FC8022DAB74DF90EFE
        Validity
            Not Before: Nov 27 00:57:15 2025 GMT
            Not After : Nov 26 01:02:15 2026 GMT
        Subject: CN=E75CF9A7838423FC2319ED64121A05FD92BC99A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:38:c4:b3:53:24:ef:c0:72:a3:60:ed:df:
                    e5:06:6e:20:44:12:16:fe:5c:04:3a:8c:05:53:a4:
                    0c:9d:e7:de:f9:11:3f:30:ee:51:a7:0f:d7:b0:6d:
                    e0:aa:92:b0:46:5e:84:c4:a5:50:44:83:ef:30:f2:
                    42:09:0d:db:b3:91:d5:36:e9:d5:a8:60:65:22:ea:
                    f5:21:fe:3c:66:a7:5e:ce:cc:7e:52:07:96:95:2f:
                    e3:7b:cf:98:2c:dd:8d:0e:42:ae:8c:86:1b:59:e3:
                    83:c9:5f:98:a6:a4:75:7e:2c:09:a1:9c:4f:53:06:
                    e8:65:c7:9a:27:92:60:ba:ee:92:37:ef:f2:0f:f1:
                    10:00:2d:b6:8c:f2:f2:30:a8:30:58:20:e0:f5:2a:
                    d6:82:d3:c0:9d:49:6a:3c:1b:5b:92:6c:76:a6:e6:
                    15:ac:51:c5:40:90:21:b5:43:d0:d9:af:ca:82:81:
                    f4:e0:f0:62:e8:25:d3:28:fe:c6:60:9a:64:d4:0c:
                    31:da:25:3a:85:fc:b3:f7:8c:a5:73:1b:f0:40:91:
                    54:70:59:47:96:55:1f:bb:2d:e0:54:82:3f:61:3b:
                    ef:70:96:4e:18:54:10:b6:f3:80:47:64:10:3f:e3:
                    9a:1f:3b:62:0b:06:45:50:db:53:21:3c:6a:24:10:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5C:F9:A7:83:84:23:FC:23:19:ED:64:12:1A:05:FD:92:BC:99:A6
            X509v3 Authority Key Identifier:
                keyid:5E:D3:94:D0:E5:87:E9:DD:F8:90:33:FC:80:22:DA:B7:4D:F9:0E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:59:01:0f:7a:df:09:ec:ce:ba:ab:36:de:14:91:76:7e:
         1a:d1:8f:c2:c8:94:78:84:ed:3d:31:19:7d:9a:d0:e8:1e:d3:
         9f:f3:5f:b6:4c:dd:b3:8b:4d:a9:30:49:c1:43:80:53:e2:f8:
         db:81:24:f2:17:da:32:24:6d:92:35:d9:36:c9:3e:6b:d6:ae:
         ad:fb:ed:2a:ac:c1:b5:1d:76:fe:13:ae:ff:12:71:d2:4b:1c:
         55:25:9f:d0:2a:a8:9d:9d:e6:18:e0:32:48:2d:5a:da:3b:6d:
         b3:67:ed:a4:39:25:52:55:cf:03:45:c5:24:9e:e6:e5:14:d8:
         b3:c1:69:93:d7:cc:63:e1:13:be:eb:4a:a3:89:95:b3:8b:65:
         2b:a4:b4:0f:de:9a:e8:d1:59:24:a0:88:9e:9d:55:7b:9f:16:
         1a:99:a4:f3:43:6f:03:26:d1:2a:5a:3b:24:e6:a6:c6:54:20:
         d4:f1:38:3f:05:fd:17:4b:b1:0c:07:31:37:b6:72:30:7e:2e:
         04:ce:7b:84:ed:f5:c9:36:e9:24:5f:48:90:1a:90:1f:68:76:
         96:0a:d5:aa:72:b8:a4:64:f8:a9:14:ec:99:7f:01:8f:12:46:
         57:11:98:10:4c:cb:eb:53:95:b3:78:3f:1f:40:69:4f:ca:42:
         a5:9a:d0:42
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXpiJayLbzoz3FiqwjytAbkQfenkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVEMzk0RDBFNTg3RTlEREY4OTAzM0ZDODAyMkRBQjc0
REY5MEVGRTAeFw0yNTExMjcwMDU3MTVaFw0yNjExMjYwMTAyMTVaMDMxMTAvBgNV
BAMTKEU3NUNGOUE3ODM4NDIzRkMyMzE5RUQ2NDEyMUEwNUZEOTJCQzk5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/TjEs1Mk78Byo2Dt3+UGbiBE
Ehb+XAQ6jAVTpAyd5975ET8w7lGnD9ewbeCqkrBGXoTEpVBEg+8w8kIJDduzkdU2
6dWoYGUi6vUh/jxmp17OzH5SB5aVL+N7z5gs3Y0OQq6MhhtZ44PJX5impHV+LAmh
nE9TBuhlx5onkmC67pI37/IP8RAALbaM8vIwqDBYIOD1KtaC08CdSWo8G1uSbHam
5hWsUcVAkCG1Q9DZr8qCgfTg8GLoJdMo/sZgmmTUDDHaJTqF/LP3jKVzG/BAkVRw
WUeWVR+7LeBUgj9hO+9wlk4YVBC284BHZBA/45ofO2ILBkVQ21MhPGokEFoVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU51z5p4OEI/wjGe1kEhoF/ZK8maYwHwYDVR0j
BBgwFoAUXtOU0OWH6d34kDP8gCLat035Dv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjdCRnZmZnRlTG1SRk5yVGRnM1BNa3BzbVYxUGRyQW50d3d0TUNGR3Fk
b3YvMC81RUQzOTREMEU1ODdFOURERjg5MDMzRkM4MDIyREFCNzRERjkwRUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFRDM5NEQwRTU4N0U5RERG
ODkwMzNGQzgwMjJEQUI3NERGOTBFRkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3QkZ2ZmZ0ZUxtUkZOclRkZzNQTWtwc21WMVBkckFudHd3dE1DRkdxZG92LzAv
MzEzNzM3MmUzMTMzMzYyZTMxMzIzODJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzgzNjM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWxiIAwDQYJKoZIhvcNAQELBQADggEBAFrUWQEP
et8J7M66qzbeFJF2fhrRj8LIlHiE7T0xGX2a0Oge05/zX7ZM3bOLTakwScFDgFPi
+NuBJPIX2jIkbZI12TbJPmvWrq377SqswbUddv4Trv8ScdJLHFUln9AqqJ2d5hjg
MkgtWto7bbNn7aQ5JVJVzwNFxSSe5uUU2LPBaZPXzGPhE77rSqOJlbOLZSuktA/e
mujRWSSgiJ6dVXufFhqZpPNDbwMm0SpaOyTmpsZUINTxOD8F/RdLsQwHMTe2cjB+
LgTOe4Tt9ck26SRfSJAakB9odpYK1apyuKRk+KkU7Jl/AY8SRlcRmBBMy+tTlbN4
Px9AaU/KQqWa0EI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:32:02 2025 by rpki-client