This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          ZbR1q4a0z+nRVZZdZaw1U2jALcx1f2gZrpmBObbPlz4=
Subject key identifier:   5D:96:EE:88:22:8F:6C:8D:CE:68:87:76:42:05:7E:C4:9F:15:27:39
Certificate issuer:       /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial:       56016DADE8587EF0EA8413EC864B6CC371450C88
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa
Signing time:             Sun 16 Nov 2025 12:41:15 +0000
ROA not before:           Sun 16 Nov 2025 12:36:15 +0000
ROA not after:            Sun 15 Nov 2026 12:41:15 +0000
asID:                     262503
IP address blocks:        177.66.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:01:6d:ad:e8:58:7e:f0:ea:84:13:ec:86:4b:6c:c3:71:45:0c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
        Validity
            Not Before: Nov 16 12:36:15 2025 GMT
            Not After : Nov 15 12:41:15 2026 GMT
        Subject: CN=5D96EE88228F6C8DCE68877642057EC49F152739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:05:c0:76:43:aa:15:80:c5:00:b0:f7:36:
                    e7:4e:02:f4:76:7d:85:45:11:ca:b6:94:68:24:f4:
                    52:48:1f:77:e5:f6:4d:91:3f:ce:d0:8e:dc:7b:4d:
                    f3:66:3f:44:27:f2:b4:55:ba:16:ec:74:58:a9:64:
                    5b:7f:6f:31:8c:ce:ca:1a:3e:33:2e:2b:b4:3d:d9:
                    22:b7:37:62:14:43:45:ee:c1:19:d3:bf:87:96:bc:
                    86:50:7d:bc:0e:35:eb:2d:1c:dc:f9:b5:a3:b4:61:
                    1b:60:a3:fd:89:8e:1c:fd:eb:f2:e8:6a:09:c4:3e:
                    9f:1a:4d:10:ba:6b:0d:62:e0:6c:f6:a5:e0:a0:95:
                    12:92:68:82:b6:0d:45:e1:19:38:24:89:f5:f0:a2:
                    b6:6a:e1:2a:c2:ef:d2:57:ca:c9:1b:dc:cc:59:4b:
                    e3:05:31:8c:cd:d7:4a:24:87:45:49:d3:c9:78:56:
                    aa:72:4e:ca:e3:95:f2:9b:41:f4:48:e4:6c:b1:61:
                    ab:9f:3e:a3:ad:3d:1c:5e:71:cc:b3:ff:9c:45:eb:
                    6d:aa:6b:8b:b6:96:11:1d:ce:2b:fa:4e:23:44:a8:
                    ad:be:22:80:18:6a:45:ca:f3:27:56:07:a0:af:14:
                    8a:b4:44:24:06:6f:93:ba:68:28:ba:34:bc:9e:35:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:96:EE:88:22:8F:6C:8D:CE:68:87:76:42:05:7E:C4:9F:15:27:39
            X509v3 Authority Key Identifier:
                keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:35:d5:38:de:8f:52:c3:e1:3d:b6:b9:d4:fd:38:47:0b:75:
         0c:68:3f:08:f4:7f:55:0c:43:e7:7c:b0:b7:f3:67:13:7f:e2:
         12:96:86:67:8f:e3:24:c3:b7:5a:37:86:e8:eb:c5:92:ab:22:
         34:ad:1e:65:65:f6:ba:89:d2:d1:14:1e:22:8a:4e:3f:49:52:
         d7:e1:fe:09:c2:43:8a:e5:6f:0a:f5:15:df:af:ce:ba:36:5c:
         92:c7:8a:75:05:c3:53:1a:c5:3e:b9:72:4b:b4:c0:05:81:1a:
         61:37:40:63:9e:8d:03:24:e8:11:a2:c0:03:4d:95:62:4a:1b:
         bf:47:65:84:98:97:3d:1f:4d:52:72:08:7e:df:5a:c7:cc:27:
         41:5c:05:4b:e6:3d:d7:6d:ec:e0:f4:fa:6d:ee:b9:30:27:68:
         72:42:62:12:89:7f:36:4b:39:4b:32:c5:f8:9e:67:51:29:a8:
         db:f9:cb:40:45:1e:0f:6a:44:af:b1:d4:d7:dc:7f:20:43:4f:
         e1:95:4d:47:d2:ac:ed:72:b3:a0:23:a8:91:9b:d6:69:07:43:
         de:8e:79:ae:29:a1:18:f3:76:2f:8f:ed:4b:94:6a:26:64:73:
         f3:48:36:22:2d:77:ee:4c:74:a0:9b:60:95:51:4a:54:20:e2:
         60:f8:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:22 2025 by rpki-client