This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e3230302e39362e302f32302d3234203d3e203238333036.roa
File:                     3137372e3230302e39362e302f32302d3234203d3e203238333036.roa (raw, json)
Hash identifier:          fCMfenxTExIWmso8nskVgu4zw5TV+Yy4ago17EhssFw=
Subject key identifier:   16:AB:E3:C1:37:F4:75:B6:92:57:76:EC:B6:6C:53:D6:A1:E2:B1:4B
Certificate issuer:       /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
Certificate serial:       115451DD99F3483DDF5C9868D380CADD02FD5712
Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e3230302e39362e302f32302d3234203d3e203238333036.roa
Signing time:             Mon 24 Nov 2025 13:21:39 +0000
ROA not before:           Mon 24 Nov 2025 13:16:39 +0000
ROA not after:            Mon 23 Nov 2026 13:21:39 +0000
asID:                     28306
IP address blocks:        177.200.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 18:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:54:51:dd:99:f3:48:3d:df:5c:98:68:d3:80:ca:dd:02:fd:57:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
        Validity
            Not Before: Nov 24 13:16:39 2025 GMT
            Not After : Nov 23 13:21:39 2026 GMT
        Subject: CN=16ABE3C137F475B6925776ECB66C53D6A1E2B14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:19:20:ab:a7:cc:99:ee:19:07:8f:f2:1a:
                    14:dc:d8:e1:fb:0e:7a:d4:74:92:8a:3f:ad:bc:21:
                    c3:ab:c1:52:88:f2:7f:20:00:f4:c4:fc:d8:4b:57:
                    fa:99:63:ff:2f:d4:33:2f:f5:38:2d:15:b2:62:e7:
                    a8:71:42:8f:bf:96:4d:84:df:d7:da:ef:47:d1:d0:
                    c6:81:74:8a:b0:73:b7:3b:0c:c2:9e:ba:82:92:4f:
                    33:24:f9:74:06:93:6c:32:38:cf:ee:d6:05:43:88:
                    0e:d7:bc:e9:44:16:66:ff:a8:1e:e7:f6:d9:25:98:
                    97:b9:97:bd:b2:e6:c8:1a:d2:92:71:34:44:60:56:
                    82:17:4f:85:bd:47:d5:01:61:02:7f:03:aa:04:7c:
                    92:6c:97:de:1a:28:0e:df:fe:43:6b:44:22:fc:8d:
                    17:38:3b:99:4d:f3:32:96:87:fd:ea:29:f5:02:c7:
                    68:3b:3d:e2:ee:62:3a:9e:29:e7:23:9a:79:92:36:
                    61:8e:d1:b3:e8:7d:b8:ba:c5:9e:0e:c3:5f:63:89:
                    e7:da:36:bc:11:83:d2:6f:fd:60:a6:bf:94:00:c9:
                    6a:21:77:65:14:3a:5e:70:64:35:d9:8a:74:f7:32:
                    6c:12:8c:81:1f:76:71:d6:2e:56:a2:45:63:10:c4:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AB:E3:C1:37:F4:75:B6:92:57:76:EC:B6:6C:53:D6:A1:E2:B1:4B
            X509v3 Authority Key Identifier:
                keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e3230302e39362e302f32302d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:b1:b2:09:74:2e:af:a5:96:70:ee:1a:2b:4d:8f:8b:5e:86:
         df:aa:4e:e4:d9:30:0c:19:38:7b:3c:ae:00:1e:c0:18:23:64:
         b4:8a:84:87:b2:02:2c:d9:3e:ab:c5:a3:d8:17:d8:e4:4e:a4:
         e8:4c:bb:da:d0:df:2f:fe:c2:a6:7f:11:f8:d8:e5:51:18:df:
         8f:11:a4:32:6d:3d:06:69:26:c4:10:2f:33:30:f2:f9:ba:73:
         fb:97:64:68:0e:a1:15:80:06:06:9c:b1:f6:00:dd:5d:c8:6e:
         3c:da:1f:69:eb:53:bf:ef:6d:54:07:2d:0f:90:25:3c:97:4d:
         09:f6:48:cf:12:52:48:57:f5:41:29:37:a0:a0:ce:d2:c3:8c:
         5c:03:f4:4f:f1:68:ee:ab:5e:72:5d:3e:99:be:c3:de:fe:a9:
         80:00:7d:e7:a3:99:c3:26:9c:ea:fd:01:04:01:5a:19:50:4f:
         93:f8:83:5b:5d:2d:45:d1:fc:a3:70:0c:cf:f0:29:17:2e:41:
         50:43:ec:11:75:d4:56:cc:79:7e:7c:24:84:a6:55:5c:d3:2e:
         f8:51:1a:7f:cf:e9:d2:06:b5:00:37:04:b8:8b:3a:bb:e2:9c:
         95:c3:91:89:01:5c:bb:dd:d9:40:83:5a:b3:da:6d:d8:04:91:
         79:4e:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:52 2025 by rpki-client