This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35322e302f32322d3232203d3e20323632353033.roa
File:                     3137372e39312e35322e302f32322d3232203d3e20323632353033.roa (raw, json)
Hash identifier:          iLyY1fZcDlwEbuQcVYKrD1QI7Kp0czM5UDo0a6/TE6I=
Subject key identifier:   A1:2D:48:D5:32:A1:26:57:9E:56:B3:72:FE:46:84:54:12:BE:90:89
Certificate issuer:       /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial:       438ED312D224157CF4BDBC72E489847C18AAB53D
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35322e302f32322d3232203d3e20323632353033.roa
Signing time:             Sun 16 Nov 2025 19:00:25 +0000
ROA not before:           Sun 16 Nov 2025 18:55:25 +0000
ROA not after:            Sun 15 Nov 2026 19:00:25 +0000
asID:                     262503
IP address blocks:        177.91.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8e:d3:12:d2:24:15:7c:f4:bd:bc:72:e4:89:84:7c:18:aa:b5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
        Validity
            Not Before: Nov 16 18:55:25 2025 GMT
            Not After : Nov 15 19:00:25 2026 GMT
        Subject: CN=A12D48D532A126579E56B372FE46845412BE9089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:1c:42:24:4a:07:e4:7d:ed:e9:4c:1c:c4:
                    58:11:46:b4:d8:35:d2:d5:27:b7:cd:0a:b6:a1:be:
                    d9:a9:1c:eb:2e:59:87:a2:f2:ae:2c:db:16:49:6c:
                    32:cf:fa:a2:dd:eb:12:8e:08:a0:de:7b:b9:ee:98:
                    d2:41:ce:64:51:d5:07:93:81:d7:25:68:10:b5:93:
                    f9:fc:67:bd:6c:b3:de:10:ce:78:b3:63:20:6d:0d:
                    de:d9:eb:22:79:aa:a0:fd:35:1f:ad:d8:e2:d4:6d:
                    c3:25:46:36:1b:45:07:99:85:e3:64:13:e6:91:48:
                    f7:4e:11:10:2d:c2:71:9d:07:93:f0:e1:02:1e:a1:
                    c9:90:54:20:86:26:2e:77:64:d0:9f:a4:e1:c3:08:
                    04:05:57:c8:0d:d3:67:d9:a5:30:9e:bd:9e:30:77:
                    8b:a4:46:46:b2:b3:5e:e0:0e:5e:42:b3:a0:94:eb:
                    27:2a:b4:d7:31:97:6f:b3:ea:c2:9e:5d:5c:6f:72:
                    a5:16:10:40:20:92:52:ef:5b:42:32:89:4f:fa:e9:
                    72:0b:34:dd:6f:95:8d:04:9f:43:d1:be:29:50:67:
                    6b:91:fd:74:05:69:49:c0:f8:4c:ae:74:f5:68:28:
                    2c:b6:55:31:5d:32:b4:fd:57:55:50:c5:8c:fc:bd:
                    00:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2D:48:D5:32:A1:26:57:9E:56:B3:72:FE:46:84:54:12:BE:90:89
            X509v3 Authority Key Identifier:
                keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35322e302f32322d3232203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:0e:10:06:63:b3:f3:b9:46:39:3e:2e:d9:31:cd:cd:3b:17:
         db:6f:11:d9:86:7a:02:db:e7:d5:f6:d9:93:de:58:b9:3c:b6:
         c9:79:38:3e:92:66:20:4b:1d:c8:a7:e7:26:d5:14:dc:fa:3e:
         e7:a1:2b:3b:25:82:fa:4b:02:0a:52:5e:cd:0a:a3:01:21:99:
         f7:75:29:5e:12:9d:2e:79:0f:94:46:c9:46:4a:23:76:b7:1f:
         40:09:d9:18:0f:ce:e9:40:b3:d0:67:b2:4f:20:bd:aa:44:90:
         8f:c7:61:22:7b:96:e9:80:76:c8:d6:7a:c8:c6:f3:21:a9:c1:
         db:3b:2b:fb:32:05:21:22:35:c6:37:0b:97:74:08:3d:a2:3e:
         9d:18:c3:27:53:7f:42:c0:c7:4d:44:94:09:90:e9:db:0b:d5:
         be:ba:c2:ac:7d:6e:55:cd:51:73:73:88:90:52:9d:6d:17:35:
         b6:99:a0:24:47:ce:b8:f9:94:1f:1a:35:6e:1b:ff:9c:93:f2:
         32:9a:db:ed:5e:a9:5c:58:70:bb:d7:b1:e1:1a:8e:71:3a:14:
         07:7f:f7:5c:7a:ee:5d:1e:3c:b7:8e:f7:07:54:b2:16:5b:88:
         71:ed:11:60:8f:fb:ca:de:b5:a0:65:ed:20:4b:b2:13:38:e2:
         6b:d6:98:f3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ47TEtIkFXz0vbxy5ImEfBiqtT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgxQzYzMkQxMUNCQTkzQzZGQTA4RTMwQzcxM0Q1QTI3
MjA5ODkwNjAeFw0yNTExMTYxODU1MjVaFw0yNjExMTUxOTAwMjVaMDMxMTAvBgNV
BAMTKEExMkQ0OEQ1MzJBMTI2NTc5RTU2QjM3MkZFNDY4NDU0MTJCRTkwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6xxCJEoH5H3t6UwcxFgRRrTY
NdLVJ7fNCrahvtmpHOsuWYei8q4s2xZJbDLP+qLd6xKOCKDee7numNJBzmRR1QeT
gdclaBC1k/n8Z71ss94QznizYyBtDd7Z6yJ5qqD9NR+t2OLUbcMlRjYbRQeZheNk
E+aRSPdOERAtwnGdB5Pw4QIeocmQVCCGJi53ZNCfpOHDCAQFV8gN02fZpTCevZ4w
d4ukRkays17gDl5Cs6CU6ycqtNcxl2+z6sKeXVxvcqUWEEAgklLvW0IyiU/66XIL
NN1vlY0En0PRvilQZ2uR/XQFaUnA+EyudPVoKCy2VTFdMrT9V1VQxYz8vQDtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoS1I1TKhJleeVrNy/kaEVBK+kIkwHwYDVR0j
BBgwFoAU2BxjLRHLqTxvoI4wxxPVonIJiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC9EODFDNjMyRDExQ0JBOTNDNkZBMDhFMzBDNzEzRDVBMjcyMDk4OTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4MUM2MzJEMTFDQkE5M0M2
RkEwOEUzMEM3MTNENUEyNzIwOTg5MDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNzM3MmUzOTMxMmUzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVs0MA0GCSqGSIb3DQEBCwUAA4IBAQDADhAGY7Pz
uUY5Pi7ZMc3NOxfbbxHZhnoC2+fV9tmT3li5PLbJeTg+kmYgSx3Ip+cm1RTc+j7n
oSs7JYL6SwIKUl7NCqMBIZn3dSleEp0ueQ+URslGSiN2tx9ACdkYD87pQLPQZ7JP
IL2qRJCPx2Eie5bpgHbI1nrIxvMhqcHbOyv7MgUhIjXGNwuXdAg9oj6dGMMnU39C
wMdNRJQJkOnbC9W+usKsfW5VzVFzc4iQUp1tFzW2maAkR864+ZQfGjVuG/+ck/Iy
mtvtXqlcWHC717HhGo5xOhQHf/dceu5dHjy3jvcHVLIWW4hx7RFgj/vK3rWgZe0g
S7ITOOJr1pjz
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:11:44 2025 by rpki-client