This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32312d3231203d3e20323632363230.roa
File:                     3137372e38362e31362e302f32312d3231203d3e20323632363230.roa (raw, json)
Hash identifier:          vyjSBtjXUoxXv78kqTMBGV6SIhklCI/oPOez1cCITFM=
Subject key identifier:   0D:E0:9A:90:87:4B:E6:CC:8C:C2:3D:A8:A0:8D:12:D8:E3:FE:9F:7A
Certificate issuer:       /CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
Certificate serial:       5017F56EA56EF3618EA338D8C264D36D0465C329
Authority key identifier: 88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32312d3231203d3e20323632363230.roa
Signing time:             Fri 28 Nov 2025 13:21:50 +0000
ROA not before:           Fri 28 Nov 2025 13:16:50 +0000
ROA not after:            Fri 27 Nov 2026 13:21:50 +0000
asID:                     262620
IP address blocks:        177.86.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl
                          rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:17:f5:6e:a5:6e:f3:61:8e:a3:38:d8:c2:64:d3:6d:04:65:c3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
        Validity
            Not Before: Nov 28 13:16:50 2025 GMT
            Not After : Nov 27 13:21:50 2026 GMT
        Subject: CN=0DE09A90874BE6CC8CC23DA8A08D12D8E3FE9F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:c6:64:c1:b7:0a:23:7d:82:53:c5:8b:96:
                    52:32:8c:aa:75:1b:dd:3b:2e:e3:81:11:29:02:cd:
                    f2:c3:f0:e9:2b:65:b6:e4:2e:90:45:ca:f3:26:04:
                    e0:7a:57:8e:c9:56:b8:1e:c1:1c:f8:8d:b0:7b:90:
                    46:e2:6a:4d:da:17:37:7a:5a:f8:2a:a2:78:67:53:
                    77:e0:43:24:b2:e7:f0:b7:b2:79:92:4c:67:71:79:
                    69:e6:40:27:1c:0a:34:97:dc:93:18:9a:ea:87:42:
                    52:97:78:9e:c5:9f:9f:53:2c:b7:ee:3c:62:5f:8a:
                    ac:8c:fc:78:59:28:fc:00:5d:2c:49:9e:82:c3:80:
                    57:8b:a1:86:67:a0:45:08:00:59:42:46:69:ba:a5:
                    c6:9b:72:53:a1:3a:d4:e1:14:06:aa:6c:b6:72:83:
                    3c:1e:7f:cd:e6:d2:c8:bd:86:f5:f2:0b:3d:58:9b:
                    6d:4e:90:83:f9:28:fe:9f:0a:67:09:61:cb:05:9a:
                    42:fc:42:b7:14:bd:c2:30:4f:8a:64:eb:a8:f5:90:
                    9b:bb:90:37:f7:f3:0a:f8:92:50:27:30:63:59:06:
                    2e:78:48:13:48:23:f5:f1:d4:7d:b6:ff:44:a0:14:
                    91:29:e3:64:9f:64:8e:b9:7a:79:a9:d6:3d:a9:65:
                    58:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E0:9A:90:87:4B:E6:CC:8C:C2:3D:A8:A0:8D:12:D8:E3:FE:9F:7A
            X509v3 Authority Key Identifier:
                keyid:88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32312d3231203d3e20323632363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:d9:f7:3d:7c:8e:1d:9c:c8:50:59:5c:8e:55:ed:31:71:85:
         3c:3c:3a:bd:9a:75:13:c3:23:27:2f:cc:dc:ef:fc:74:38:45:
         f1:2d:19:62:19:32:3c:c3:07:37:da:85:39:23:e5:0b:bb:89:
         99:e0:00:ff:3c:c9:e0:50:19:02:b2:b6:fa:bf:4c:95:f1:47:
         e5:f3:3f:87:e0:95:ba:54:cd:c7:34:ca:b2:74:3e:17:2b:ac:
         3d:18:37:26:3d:d7:c8:cc:f9:9c:d6:bc:60:74:03:e7:37:1e:
         c2:52:f6:9e:8a:ce:a1:ec:ac:58:4a:30:5c:a9:89:0f:14:7d:
         87:9c:78:3b:ae:e8:89:01:f5:27:49:8a:a4:d3:91:98:d3:e9:
         5b:b8:c7:fd:45:55:24:28:dd:44:0e:92:c6:f1:4c:22:c2:79:
         8a:62:6d:ae:9f:87:34:4a:74:0b:69:26:be:ab:c8:93:3b:53:
         a7:42:fe:ad:2e:fb:44:bc:33:77:d4:0b:c5:9c:12:8d:00:d6:
         b4:f1:80:4e:18:33:97:a6:24:e2:e5:69:d3:85:21:f8:89:7f:
         16:d1:75:bc:b8:41:d8:a7:c8:28:b8:b2:ac:49:08:cb:b9:96:
         1c:4a:f4:f2:78:37:38:3d:d7:64:06:e1:9d:dc:7b:62:c0:d7:
         aa:f9:d3:52
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUBf1bqVu82GOozjYwmTTbQRlwykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgxRUMxRTQ2RUU5MkQ3RTI0OTQxMERDQUYwRTVBRUY2
OEY1OEQ4NzAeFw0yNTExMjgxMzE2NTBaFw0yNjExMjcxMzIxNTBaMDMxMTAvBgNV
BAMTKDBERTA5QTkwODc0QkU2Q0M4Q0MyM0RBOEEwOEQxMkQ4RTNGRTlGN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColsZkwbcKI32CU8WLllIyjKp1
G907LuOBESkCzfLD8OkrZbbkLpBFyvMmBOB6V47JVrgewRz4jbB7kEbiak3aFzd6
WvgqonhnU3fgQySy5/C3snmSTGdxeWnmQCccCjSX3JMYmuqHQlKXeJ7Fn59TLLfu
PGJfiqyM/HhZKPwAXSxJnoLDgFeLoYZnoEUIAFlCRmm6pcabclOhOtThFAaqbLZy
gzwef83m0si9hvXyCz1Ym21OkIP5KP6fCmcJYcsFmkL8QrcUvcIwT4pk66j1kJu7
kDf38wr4klAnMGNZBi54SBNII/Xx1H22/0SgFJEp42SfZI65enmp1j2pZVjXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDeCakIdL5syMwj2ooI0S2OP+n3owHwYDVR0j
BBgwFoAUiB7B5G7pLX4klBDcrw5a72j1jYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHB3aWlSWjRhZllNeHdudEJ2S05TSEc4VlNhTHJWNVYyUGl0ZkRHTjJN
QlEvMC84ODFFQzFFNDZFRTkyRDdFMjQ5NDEwRENBRjBFNUFFRjY4RjU4RDg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MUVDMUU0NkVFOTJEN0Uy
NDk0MTBEQ0FGMEU1QUVGNjhGNThEODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhwd2lpUlo0YWZZTXh3bnRCdktOU0hHOFZTYUxyVjVWMlBpdGZER04yTUJRLzAv
MzEzNzM3MmUzODM2MmUzMTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMy
MzYzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsVYQMA0GCSqGSIb3DQEBCwUAA4IBAQB32fc9fI4d
nMhQWVyOVe0xcYU8PDq9mnUTwyMnL8zc7/x0OEXxLRliGTI8wwc32oU5I+ULu4mZ
4AD/PMngUBkCsrb6v0yV8Ufl8z+H4JW6VM3HNMqydD4XK6w9GDcmPdfIzPmc1rxg
dAPnNx7CUvaeis6h7KxYSjBcqYkPFH2HnHg7ruiJAfUnSYqk05GY0+lbuMf9RVUk
KN1EDpLG8UwiwnmKYm2un4c0SnQLaSa+q8iTO1OnQv6tLvtEvDN31AvFnBKNANa0
8YBOGDOXpiTi5WnThSH4iX8W0XW8uEHYp8gouLKsSQjLuZYcSvTyeDc4PddkBuGd
3HtiwNeq+dNS
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:06:03 2025 by rpki-client