This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35342e302f32342d3234203d3e20323632353033.roa
File:                     3137372e39312e35342e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          qgmBnKVep5aM5OH2+VPk52Y5T9XmSrvGXxU1uK0tQzY=
Subject key identifier:   DA:EB:3C:D2:3C:D7:DC:E4:92:DA:D3:78:78:CE:90:05:41:B7:34:D8
Certificate issuer:       /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial:       208A4D8E6D853146A2195DB1910883298C9E3439
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35342e302f32342d3234203d3e20323632353033.roa
Signing time:             Sun 16 Nov 2025 12:41:13 +0000
ROA not before:           Sun 16 Nov 2025 12:36:13 +0000
ROA not after:            Sun 15 Nov 2026 12:41:13 +0000
asID:                     262503
IP address blocks:        177.91.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8a:4d:8e:6d:85:31:46:a2:19:5d:b1:91:08:83:29:8c:9e:34:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
        Validity
            Not Before: Nov 16 12:36:13 2025 GMT
            Not After : Nov 15 12:41:13 2026 GMT
        Subject: CN=DAEB3CD23CD7DCE492DAD37878CE900541B734D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:25:2e:9a:88:65:e0:f4:5e:ee:a5:6f:59:
                    63:52:c8:f8:aa:bb:63:4d:be:5f:0f:c1:e9:05:de:
                    0e:e8:dc:24:83:de:12:b7:32:b6:83:5a:ac:94:37:
                    38:b0:5a:51:45:df:64:a6:f0:95:55:73:34:05:da:
                    57:3e:37:2f:16:28:fd:54:03:bb:97:ab:f7:25:77:
                    99:59:d7:6a:bf:da:19:93:2d:7a:ca:42:4a:1b:83:
                    32:ea:95:c6:34:78:93:57:7e:84:77:23:8f:e8:c7:
                    5c:fd:25:df:70:08:85:79:73:02:57:c8:5f:79:4b:
                    2f:b2:8d:d2:bb:c6:d3:3b:cb:95:47:c2:cc:7d:4a:
                    62:4b:f1:f4:43:22:8b:fc:b7:cc:b0:51:80:b1:67:
                    88:5f:f2:c5:85:c9:ee:92:bd:dd:f0:c2:f6:e1:d6:
                    dd:06:da:d0:16:32:17:96:1b:d2:19:2a:3f:2e:aa:
                    c3:b2:3b:67:4c:f4:0c:8e:19:c5:5a:c8:c7:2f:05:
                    e9:7e:4d:64:d2:5d:c7:4c:6c:9a:01:00:39:ea:dc:
                    71:28:ed:fe:fa:6c:ac:6c:76:5d:e6:c4:92:05:e6:
                    e3:a8:55:31:a8:e3:ac:92:94:cf:9b:9f:72:16:a3:
                    6a:5e:e1:ff:d1:46:33:dd:93:e0:c1:1f:52:49:e6:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EB:3C:D2:3C:D7:DC:E4:92:DA:D3:78:78:CE:90:05:41:B7:34:D8
            X509v3 Authority Key Identifier:
                keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35342e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:6e:3f:72:59:21:9c:e1:1e:db:b7:b5:c1:fd:1c:9f:db:6a:
         26:cb:3e:54:ae:b1:28:b1:20:8f:d6:3d:8f:2f:64:1f:79:54:
         1e:f7:bc:d0:a0:06:b2:e0:dc:8d:b7:cc:13:e4:e4:6f:59:0f:
         76:36:94:77:03:c8:93:4e:5e:da:e4:2f:31:b3:6c:30:08:1b:
         5e:de:a2:28:7c:d4:93:e0:1e:16:9a:50:19:c6:15:94:0b:20:
         1f:68:2a:f8:22:66:87:02:b6:eb:89:39:89:d3:3f:1f:2d:46:
         f5:01:70:bd:8d:26:34:67:fc:33:0f:2b:46:76:4a:c6:ee:52:
         7a:19:c7:af:56:df:ee:72:96:b8:0a:fc:49:60:d0:4f:3f:cb:
         ce:48:60:ee:31:d7:04:0d:45:64:97:a8:09:63:bf:04:89:76:
         4c:a0:6e:fb:72:3d:01:15:a3:78:f9:31:29:80:5a:21:d0:f5:
         b1:a5:24:a2:04:6e:3b:ba:e0:ed:ee:0d:a1:6b:94:10:83:bc:
         21:8a:25:7d:73:9a:d9:a0:5d:b2:e0:eb:cb:6c:f5:ff:14:5c:
         1b:72:ad:0c:94:99:20:0c:a9:f0:fa:ad:fd:80:4d:d2:92:53:
         d0:ff:1b:67:44:20:d9:61:01:0b:64:75:7b:91:bf:5a:28:b8:
         a6:e1:97:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIIpNjm2FMUaiGV2xkQiDKYyeNDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgxQzYzMkQxMUNCQTkzQzZGQTA4RTMwQzcxM0Q1QTI3
MjA5ODkwNjAeFw0yNTExMTYxMjM2MTNaFw0yNjExMTUxMjQxMTNaMDMxMTAvBgNV
BAMTKERBRUIzQ0QyM0NEN0RDRTQ5MkRBRDM3ODc4Q0U5MDA1NDFCNzM0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDSUumohl4PRe7qVvWWNSyPiq
u2NNvl8PwekF3g7o3CSD3hK3MraDWqyUNziwWlFF32Sm8JVVczQF2lc+Ny8WKP1U
A7uXq/cld5lZ12q/2hmTLXrKQkobgzLqlcY0eJNXfoR3I4/ox1z9Jd9wCIV5cwJX
yF95Sy+yjdK7xtM7y5VHwsx9SmJL8fRDIov8t8ywUYCxZ4hf8sWFye6Svd3wwvbh
1t0G2tAWMheWG9IZKj8uqsOyO2dM9AyOGcVayMcvBel+TWTSXcdMbJoBADnq3HEo
7f76bKxsdl3mxJIF5uOoVTGo46ySlM+bn3IWo2pe4f/RRjPdk+DBH1JJ5tXRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2us80jzX3OSS2tN4eM6QBUG3NNgwHwYDVR0j
BBgwFoAU2BxjLRHLqTxvoI4wxxPVonIJiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC9EODFDNjMyRDExQ0JBOTNDNkZBMDhFMzBDNzEzRDVBMjcyMDk4OTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4MUM2MzJEMTFDQkE5M0M2
RkEwOEUzMEM3MTNENUEyNzIwOTg5MDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNzM3MmUzOTMxMmUzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVs2MA0GCSqGSIb3DQEBCwUAA4IBAQAbbj9yWSGc
4R7bt7XB/Ryf22omyz5UrrEosSCP1j2PL2QfeVQe97zQoAay4NyNt8wT5ORvWQ92
NpR3A8iTTl7a5C8xs2wwCBte3qIofNST4B4WmlAZxhWUCyAfaCr4ImaHArbriTmJ
0z8fLUb1AXC9jSY0Z/wzDytGdkrG7lJ6GcevVt/ucpa4CvxJYNBPP8vOSGDuMdcE
DUVkl6gJY78EiXZMoG77cj0BFaN4+TEpgFoh0PWxpSSiBG47uuDt7g2ha5QQg7wh
iiV9c5rZoF2y4OvLbPX/FFwbcq0MlJkgDKnw+q39gE3SklPQ/xtnRCDZYQELZHV7
kb9aKLim4Zcp
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:18 2025 by rpki-client