This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa
File:                     3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa (raw, json)
Hash identifier:          TGkEE4M9BzlWVJGoyItVNNg8ZP1LrNzBk5GdAds4BVE=
Subject key identifier:   D3:22:C9:67:F5:63:81:2D:1F:40:35:CB:09:84:3F:AB:3A:8A:74:1C
Certificate issuer:       /CN=7BDBC337C92FD00887738D70F5C844F569B22491
Certificate serial:       6BF75BF1D9F95362EC7BC6C71868A5077CA0A758
Authority key identifier: 7B:DB:C3:37:C9:2F:D0:08:87:73:8D:70:F5:C8:44:F5:69:B2:24:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDBC337C92FD00887738D70F5C844F569B22491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa
Signing time:             Fri 21 Nov 2025 17:08:41 +0000
ROA not before:           Fri 21 Nov 2025 17:03:41 +0000
ROA not after:            Fri 20 Nov 2026 17:08:41 +0000
asID:                     262690
IP address blocks:        187.87.240.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.crl
                          rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDBC337C92FD00887738D70F5C844F569B22491.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f7:5b:f1:d9:f9:53:62:ec:7b:c6:c7:18:68:a5:07:7c:a0:a7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BDBC337C92FD00887738D70F5C844F569B22491
        Validity
            Not Before: Nov 21 17:03:41 2025 GMT
            Not After : Nov 20 17:08:41 2026 GMT
        Subject: CN=D322C967F563812D1F4035CB09843FAB3A8A741C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:fa:71:a7:67:31:a9:f5:c2:c8:38:9e:18:
                    9c:37:03:2d:64:18:a7:d3:50:23:78:c7:2a:82:7a:
                    b6:41:e0:2f:c5:63:11:1a:93:b6:c0:70:c7:c5:16:
                    ec:03:0c:d3:1b:b0:59:e5:a0:a3:e5:ab:bf:40:9b:
                    cb:ac:02:8b:fd:da:3e:49:45:69:c4:8a:26:c2:d6:
                    bd:45:63:af:80:2d:99:64:18:cc:7f:ea:94:38:d1:
                    23:5a:ab:f3:30:d3:f3:e4:79:b8:e2:68:42:98:ee:
                    63:f7:7e:52:dc:20:cb:36:9a:ec:66:d1:a3:20:15:
                    d5:ee:3b:e3:82:e3:62:c8:b6:87:aa:22:f7:a0:4c:
                    2d:8c:de:1f:2e:33:96:54:52:80:23:dd:cf:7a:07:
                    2d:46:3c:26:9a:09:5e:7f:f7:11:7f:a1:0c:85:14:
                    31:39:f7:a1:81:27:37:ed:c7:b2:fe:e4:51:15:c5:
                    55:ef:2c:0c:9b:26:2d:a8:0d:fd:e9:65:80:91:88:
                    54:d7:55:52:cd:a1:d1:36:44:51:2b:30:a2:6f:ed:
                    60:ec:f5:f3:57:d9:0e:77:92:cc:a5:1a:82:64:c2:
                    44:f8:e2:28:fc:c1:30:30:09:7f:d9:4c:c0:f3:bc:
                    38:e4:b7:84:2c:45:76:e7:e0:86:49:70:d0:00:0c:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:22:C9:67:F5:63:81:2D:1F:40:35:CB:09:84:3F:AB:3A:8A:74:1C
            X509v3 Authority Key Identifier:
                keyid:7B:DB:C3:37:C9:2F:D0:08:87:73:8D:70:F5:C8:44:F5:69:B2:24:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDBC337C92FD00887738D70F5C844F569B22491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:5c:b1:22:3f:23:15:6d:96:d3:3a:d4:e9:bb:37:62:df:f4:
         d9:48:c5:a3:f9:14:34:71:fd:25:2b:cf:f7:6b:9f:97:e6:64:
         31:b7:82:92:78:98:98:48:8e:37:67:1d:29:55:d0:6f:3d:9a:
         eb:fd:cb:16:0b:5b:ac:b4:af:af:d9:0a:4e:52:c4:20:2c:d6:
         89:36:0d:7b:2f:34:98:d5:68:25:90:5c:98:e0:42:21:52:a9:
         13:e1:30:59:bb:63:c9:97:1e:40:20:44:9a:b5:48:ce:85:11:
         af:28:8c:9d:7e:1c:63:d5:6c:1b:02:11:b4:63:ad:3b:7a:0f:
         9f:7a:f6:d1:6c:20:2b:3e:c9:3d:51:57:2d:44:9f:25:8d:32:
         1b:c5:03:12:e7:38:62:02:7e:b4:6a:fc:d2:50:c3:9d:4e:43:
         60:9c:2c:17:d1:73:42:e4:15:f2:c5:b7:ef:36:78:b6:ff:0c:
         7a:b8:13:c0:ef:3d:3f:fd:ef:fa:3e:2d:9e:72:ab:b4:ad:ca:
         a0:3e:7e:0b:9f:e6:ce:d6:d4:04:21:4a:73:b9:ef:e4:e0:a3:
         fa:52:db:26:ae:c6:12:1d:51:4a:1c:f5:f3:d3:9a:c1:a8:79:
         8f:e5:d2:1f:ca:b1:da:4f:2b:81:da:72:1a:31:71:c7:84:fd:
         7a:1a:ec:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:35:09 2025 by rpki-client