This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/3137372e38342e3234302e302f32312d3332203d3e20323632353934.roa
File:                     3137372e38342e3234302e302f32312d3332203d3e20323632353934.roa (raw, json)
Hash identifier:          3zB2FSeh+NJPJNGWiVbuq5aynYc1XkNU14DQAsUk4NQ=
Subject key identifier:   0B:9A:CF:F4:F2:B4:69:D0:9D:2B:57:F5:29:F8:B1:2B:B0:BE:34:A3
Certificate issuer:       /CN=42F151EC6332FC2768F7C46E57772FDBBFA6D092
Certificate serial:       30B73ABE4CE29E6A07807B6C42D4613813B6335B
Authority key identifier: 42:F1:51:EC:63:32:FC:27:68:F7:C4:6E:57:77:2F:DB:BF:A6:D0:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/3137372e38342e3234302e302f32312d3332203d3e20323632353934.roa
Signing time:             Wed 03 Dec 2025 16:53:02 +0000
ROA not before:           Wed 03 Dec 2025 16:48:02 +0000
ROA not after:            Wed 02 Dec 2026 16:53:02 +0000
asID:                     262594
IP address blocks:        177.84.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.crl
                          rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b7:3a:be:4c:e2:9e:6a:07:80:7b:6c:42:d4:61:38:13:b6:33:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42F151EC6332FC2768F7C46E57772FDBBFA6D092
        Validity
            Not Before: Dec  3 16:48:02 2025 GMT
            Not After : Dec  2 16:53:02 2026 GMT
        Subject: CN=0B9ACFF4F2B469D09D2B57F529F8B12BB0BE34A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:1f:de:91:93:81:e6:13:5e:a3:e9:8c:cb:
                    e8:2d:65:04:78:c4:32:53:d3:dd:87:a2:2b:4b:2c:
                    b5:36:2c:5e:c2:b4:1b:69:7e:ae:fd:60:8d:4e:6d:
                    2e:33:42:1e:9d:83:f0:21:52:58:d5:76:f5:6a:55:
                    29:8e:e4:1d:29:97:97:7d:b5:56:13:d3:90:a0:db:
                    b4:e9:c1:64:d7:84:0e:92:c1:0c:22:b7:95:79:a0:
                    32:81:85:9b:63:35:60:2f:be:61:17:ab:0f:ec:15:
                    43:ee:05:f1:95:26:68:a4:2b:00:fb:86:6c:e8:f0:
                    76:f4:29:03:f7:8f:bc:e4:c2:c9:67:b9:f2:de:08:
                    0c:bb:a5:4a:42:3d:fd:76:0e:e8:a4:87:ba:83:c6:
                    60:a6:b2:cf:d4:69:9d:e6:8f:05:3e:b1:09:78:92:
                    e3:2b:e8:23:95:43:8b:8c:20:b0:63:02:4f:ce:5e:
                    34:a0:ca:d1:c2:e5:41:7e:92:6b:a8:8a:89:60:6e:
                    9f:e9:6c:4c:15:a5:1d:f7:ae:8c:4c:64:6a:24:70:
                    18:e9:6a:28:e1:1e:24:87:62:0a:1f:27:9b:a8:37:
                    9d:e6:37:1e:82:f8:a9:35:45:2d:fd:93:a0:9a:5e:
                    1f:92:02:41:92:9c:12:b0:0d:5d:2b:7f:94:6c:12:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9A:CF:F4:F2:B4:69:D0:9D:2B:57:F5:29:F8:B1:2B:B0:BE:34:A3
            X509v3 Authority Key Identifier:
                keyid:42:F1:51:EC:63:32:FC:27:68:F7:C4:6E:57:77:2F:DB:BF:A6:D0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/3137372e38342e3234302e302f32312d3332203d3e20323632353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:3a:da:66:f2:a5:b2:8e:b3:f0:a7:ee:39:a3:ac:c0:f2:
         d1:4a:ef:da:bf:79:46:26:a2:ff:aa:f4:c8:4a:30:5b:05:03:
         e1:f3:bd:ee:23:d2:6e:64:50:96:a9:a2:86:85:6d:71:d2:cc:
         d4:ac:62:34:40:61:d2:2c:95:6e:06:d1:f7:8e:0d:b2:d9:a1:
         90:ea:84:03:f4:23:f3:29:b4:96:75:80:2b:97:e4:02:e7:9a:
         86:27:38:f1:25:dc:18:fe:d6:21:d1:e2:14:3e:5e:8b:f8:e1:
         d3:1c:88:5d:90:ff:78:1b:a8:8d:b5:b3:69:9a:f5:78:1c:b9:
         ec:4b:fb:8a:6e:c9:39:e6:91:01:b0:a8:18:cb:a6:e7:e3:3c:
         66:80:ad:99:bc:8f:73:bd:a4:11:08:5c:e8:4d:09:23:4b:29:
         ba:0e:5d:68:f5:d1:09:4f:84:64:54:ed:ad:cf:b8:79:46:c7:
         4d:c2:ce:6b:44:50:ae:3b:d3:85:37:f7:84:2e:ef:23:63:4f:
         d4:b9:be:e1:ba:09:96:a1:d0:ce:c1:83:2f:51:f8:1a:a2:0b:
         4f:76:84:b7:c1:b7:dc:f4:38:54:55:29:2d:96:20:80:7a:5a:
         9b:23:8c:0e:72:fa:12:a4:30:d9:d9:12:6f:17:bd:a7:05:75:
         57:6b:22:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMLc6vkzinmoHgHtsQtRhOBO2M1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJGMTUxRUM2MzMyRkMyNzY4RjdDNDZFNTc3NzJGREJC
RkE2RDA5MjAeFw0yNTEyMDMxNjQ4MDJaFw0yNjEyMDIxNjUzMDJaMDMxMTAvBgNV
BAMTKDBCOUFDRkY0RjJCNDY5RDA5RDJCNTdGNTI5RjhCMTJCQjBCRTM0QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKh/ekZOB5hNeo+mMy+gtZQR4
xDJT092HoitLLLU2LF7CtBtpfq79YI1ObS4zQh6dg/AhUljVdvVqVSmO5B0pl5d9
tVYT05Cg27TpwWTXhA6SwQwit5V5oDKBhZtjNWAvvmEXqw/sFUPuBfGVJmikKwD7
hmzo8Hb0KQP3j7zkwslnufLeCAy7pUpCPf12Duikh7qDxmCmss/UaZ3mjwU+sQl4
kuMr6COVQ4uMILBjAk/OXjSgytHC5UF+kmuoiolgbp/pbEwVpR33roxMZGokcBjp
aijhHiSHYgofJ5uoN53mNx6C+Kk1RS39k6CaXh+SAkGSnBKwDV0rf5RsElHRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUC5rP9PK0adCdK1f1KfixK7C+NKMwHwYDVR0j
BBgwFoAUQvFR7GMy/Cdo98RuV3cv27+m0JIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZGaHhCSjU1SnI3eEpTa3JhM3NUdGp6RkJzcFdrcXhHNkxBdFB5eUs0
Z28vMC80MkYxNTFFQzYzMzJGQzI3NjhGN0M0NkU1Nzc3MkZEQkJGQTZEMDkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyRjE1MUVDNjMzMkZDMjc2
OEY3QzQ2RTU3NzcyRkRCQkZBNkQwOTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZGRmh4Qko1NUpyN3hKU2tyYTNzVHRqekZCc3BXa3F4RzZMQXRQeXlLNGdvLzAv
MzEzNzM3MmUzODM0MmUzMjM0MzAyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxVPAwDQYJKoZIhvcNAQELBQADggEBAHHGOtpm
8qWyjrPwp+45o6zA8tFK79q/eUYmov+q9MhKMFsFA+Hzve4j0m5kUJapooaFbXHS
zNSsYjRAYdIslW4G0feODbLZoZDqhAP0I/MptJZ1gCuX5ALnmoYnOPEl3Bj+1iHR
4hQ+Xov44dMciF2Q/3gbqI21s2ma9XgcuexL+4puyTnmkQGwqBjLpufjPGaArZm8
j3O9pBEIXOhNCSNLKboOXWj10QlPhGRU7a3PuHlGx03CzmtEUK4704U394Qu7yNj
T9S5vuG6CZah0M7Bgy9R+BqiC092hLfBt9z0OFRVKS2WIIB6WpsjjA5y+hKkMNnZ
Em8XvacFdVdrIrA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:00 2025 by rpki-client