This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3137372e38362e37362e302f32322d3332203d3e203532353631.roa
File:                     3137372e38362e37362e302f32322d3332203d3e203532353631.roa (raw, json)
Hash identifier:          ongX2myxLBi2kKz8f9BkQ8SyVik0OXddc3I/+qbSRaY=
Subject key identifier:   67:77:C8:28:32:AC:5A:3E:45:84:3B:65:38:3B:7F:A3:F9:44:D2:A8
Certificate issuer:       /CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
Certificate serial:       6A2466932A384E64FCD1896523308DF56B8CB4F8
Authority key identifier: 8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3137372e38362e37362e302f32322d3332203d3e203532353631.roa
Signing time:             Thu 20 Nov 2025 22:56:46 +0000
ROA not before:           Thu 20 Nov 2025 22:51:46 +0000
ROA not after:            Thu 19 Nov 2026 22:56:46 +0000
asID:                     52561
IP address blocks:        177.86.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl
                          rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:24:66:93:2a:38:4e:64:fc:d1:89:65:23:30:8d:f5:6b:8c:b4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
        Validity
            Not Before: Nov 20 22:51:46 2025 GMT
            Not After : Nov 19 22:56:46 2026 GMT
        Subject: CN=6777C82832AC5A3E45843B65383B7FA3F944D2A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:66:e3:7a:a5:c3:3c:92:6e:81:ba:95:98:83:
                    9a:e7:6b:a2:e0:e1:2b:1a:9f:0e:31:88:d0:33:04:
                    7f:13:b2:a1:3c:45:6a:bf:7c:5d:e9:49:c9:40:ab:
                    9e:ef:5c:02:a7:8e:73:f2:5d:0f:4c:de:48:11:2b:
                    76:18:2f:0f:e8:28:89:d7:19:f1:93:12:73:21:87:
                    42:fd:74:1d:a7:b8:b4:5c:5f:c5:1c:c0:b0:0a:3e:
                    49:c2:01:ca:11:31:f5:a5:f3:75:74:dc:20:4f:de:
                    ab:cb:61:90:00:0d:64:51:ae:40:a2:cc:23:f8:e6:
                    06:32:da:9e:98:c1:20:d9:2b:02:9a:82:50:c6:54:
                    df:70:ec:5d:37:9c:bd:0b:68:8d:44:d2:b5:6a:ef:
                    76:32:ea:8c:ad:39:a7:88:8b:aa:ed:31:ab:bb:5d:
                    f8:0e:56:55:92:f3:e5:df:9a:41:df:18:a7:67:71:
                    31:ef:cf:bc:ef:2f:75:b8:cb:1a:7c:07:99:9f:da:
                    0a:eb:91:c5:25:e9:1f:68:d6:f9:bd:29:03:69:23:
                    14:14:06:66:c0:f7:bf:a3:45:16:4d:7a:99:5e:75:
                    69:f3:3b:75:02:95:f8:a5:86:f2:0c:14:d7:4b:82:
                    7f:30:07:fc:ba:f2:15:77:30:3f:4c:6c:64:be:f6:
                    b2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:77:C8:28:32:AC:5A:3E:45:84:3B:65:38:3B:7F:A3:F9:44:D2:A8
            X509v3 Authority Key Identifier:
                keyid:8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3137372e38362e37362e302f32322d3332203d3e203532353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:09:39:04:96:8a:3c:b3:a1:f1:e3:ff:ec:e3:d2:69:45:
         e8:be:ec:26:47:6f:34:b2:23:72:9e:02:0c:95:25:b3:90:04:
         7b:f7:81:9f:41:c1:08:e6:7b:46:e0:dd:50:d9:d2:42:ea:5f:
         33:0f:9d:56:49:76:c6:c4:28:01:eb:87:cd:b8:85:11:9c:c4:
         3b:0d:48:15:06:e7:4b:fb:aa:6e:c8:88:1b:28:ac:5c:c0:30:
         bc:c1:5d:6c:a2:8b:43:fc:d3:26:7d:5b:c5:30:5b:98:56:e3:
         99:86:a1:13:03:b1:20:99:e9:17:cc:18:4d:02:46:c4:db:b2:
         11:59:91:41:e8:48:f8:49:bf:bc:9c:10:30:de:a3:89:69:76:
         d2:ad:ee:16:ec:c6:74:95:de:d6:1a:61:8e:bc:12:85:42:98:
         c7:48:d2:7b:4c:53:01:63:fe:b1:cc:a4:83:c8:e3:d5:66:b4:
         83:59:1b:7f:3a:09:ae:56:bb:4c:5d:24:07:a8:1a:da:94:11:
         d1:91:e7:51:63:84:7c:e4:6f:7b:f1:80:f1:fb:e6:39:a1:f5:
         11:cb:c3:70:dd:fb:9e:94:76:7a:12:0c:4b:c2:27:ff:3a:8c:
         18:ad:a5:c9:b6:91:e5:87:da:79:54:84:3e:0d:22:b0:1b:4f:
         c4:8a:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:00:45 2025 by rpki-client