This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/3137372e39332e38302e302f32312d3332203d3e20323633313432.roa
File:                     3137372e39332e38302e302f32312d3332203d3e20323633313432.roa (raw, json)
Hash identifier:          JyZfkIOLq33nnCJFS0DfBN/aauusqE3Y9f6Bn1ZJobI=
Subject key identifier:   81:9B:D5:1C:44:6E:2D:1E:7F:36:B9:6B:C6:1F:AB:89:0B:B0:67:DA
Certificate issuer:       /CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35
Certificate serial:       672E45F160720A6DE850CAF0E553983938306A1E
Authority key identifier: 1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/3137372e39332e38302e302f32312d3332203d3e20323633313432.roa
Signing time:             Tue 11 Nov 2025 11:55:42 +0000
ROA not before:           Tue 11 Nov 2025 11:50:42 +0000
ROA not after:            Tue 10 Nov 2026 11:55:42 +0000
asID:                     263142
IP address blocks:        177.93.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl
                          rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2e:45:f1:60:72:0a:6d:e8:50:ca:f0:e5:53:98:39:38:30:6a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35
        Validity
            Not Before: Nov 11 11:50:42 2025 GMT
            Not After : Nov 10 11:55:42 2026 GMT
        Subject: CN=819BD51C446E2D1E7F36B96BC61FAB890BB067DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:28:f4:12:e8:04:bd:0a:e8:62:93:f6:62:
                    70:2d:c7:13:01:3f:24:b9:e9:bd:07:5d:fd:b7:02:
                    a4:e7:df:f0:2a:12:9d:25:f0:1e:c6:4d:5a:5b:6b:
                    8b:5f:d8:87:d4:c8:32:bd:0d:87:36:51:b8:41:d0:
                    0d:a4:17:7a:b0:b7:09:a8:8c:89:ae:b5:66:30:76:
                    f8:7c:c4:f8:55:31:d1:d9:da:fc:2c:39:d1:75:f3:
                    12:c0:00:f9:0e:dc:fe:ea:a4:b9:36:ba:31:8f:07:
                    4b:8b:ae:4c:f1:b4:94:64:ea:56:b1:fd:a4:af:f1:
                    10:b1:7e:ee:f5:a4:4c:ab:95:a3:d1:fb:8b:40:b9:
                    10:95:78:86:40:49:3b:ea:06:c8:b1:d0:70:60:b6:
                    3b:37:00:ed:3a:23:d4:79:b5:08:99:26:05:8e:23:
                    ad:36:42:66:ff:5d:9b:9c:85:51:b8:93:7a:72:19:
                    f5:1e:79:46:1f:79:fb:64:25:02:f9:83:dc:ff:14:
                    33:63:3b:ab:f0:d1:cf:bb:76:cf:3c:64:57:58:90:
                    68:8b:eb:53:5d:4f:84:05:2c:73:38:6d:50:0e:68:
                    8c:8a:e6:41:0c:56:4e:66:24:f3:09:f7:e0:60:5e:
                    07:c0:3b:32:ff:0d:61:b8:17:7e:c2:d8:71:93:ab:
                    19:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9B:D5:1C:44:6E:2D:1E:7F:36:B9:6B:C6:1F:AB:89:0B:B0:67:DA
            X509v3 Authority Key Identifier:
                keyid:1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/3137372e39332e38302e302f32312d3332203d3e20323633313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:cc:af:78:f4:5b:4c:a4:7d:83:38:0f:4b:01:85:7d:bf:7f:
         a3:51:d8:a7:05:b8:61:7f:96:dd:40:bc:ab:05:ce:fb:f6:84:
         b5:4f:64:9a:47:7c:80:74:0a:94:59:45:9f:b4:3d:75:ca:45:
         70:c5:c6:3c:31:60:0e:eb:de:3c:77:f9:ea:25:64:f1:b5:73:
         c1:84:01:17:fd:a6:b5:19:f9:25:26:59:4f:05:e5:35:bc:83:
         80:9c:5b:06:08:74:27:07:f5:d0:ea:fe:39:9d:b2:c7:a5:96:
         a5:7f:e9:85:34:49:ff:0e:5e:4b:fa:d4:67:6d:54:f6:f4:f2:
         2a:e3:c6:ec:e3:a2:4a:13:63:39:22:4f:3b:c0:e6:e9:08:aa:
         95:0b:3b:40:51:b6:bc:ab:11:16:a8:5a:cc:d1:8a:f8:8c:fb:
         bd:8b:d3:38:d8:59:56:a0:29:0b:8c:78:25:b5:11:5e:d6:13:
         5e:4c:fb:1b:c7:cd:de:c9:28:ff:38:ad:74:17:78:7b:d2:35:
         fe:c7:d9:82:b8:fa:11:5c:04:a9:91:02:c3:46:d0:01:c3:07:
         2f:46:e9:05:90:87:d0:7a:1e:59:22:67:81:be:41:42:c1:4f:
         2d:0b:b9:f5:d9:a7:06:0c:b5:21:61:bb:b3:79:81:ac:38:fd:
         c2:e8:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:29 2025 by rpki-client