This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32342d3234203d3e20323632363230.roa
File:                     3137372e38362e31362e302f32342d3234203d3e20323632363230.roa (raw, json)
Hash identifier:          fX4ZV9Cyh65y7RYSvFm3x93QbttF1vY8YoRLiPhf3XI=
Subject key identifier:   02:67:65:E6:D3:D8:AB:20:A0:27:65:A0:8D:61:4A:44:27:9D:BF:C2
Certificate issuer:       /CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
Certificate serial:       2205F11FA77A1B97E77BE9FFD881365AC57F0015
Authority key identifier: 88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32342d3234203d3e20323632363230.roa
Signing time:             Fri 28 Nov 2025 13:21:50 +0000
ROA not before:           Fri 28 Nov 2025 13:16:50 +0000
ROA not after:            Fri 27 Nov 2026 13:21:50 +0000
asID:                     262620
IP address blocks:        177.86.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl
                          rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:05:f1:1f:a7:7a:1b:97:e7:7b:e9:ff:d8:81:36:5a:c5:7f:00:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
        Validity
            Not Before: Nov 28 13:16:50 2025 GMT
            Not After : Nov 27 13:21:50 2026 GMT
        Subject: CN=026765E6D3D8AB20A02765A08D614A44279DBFC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:90:03:cb:d0:6e:db:6d:0e:3e:17:9e:b6:16:
                    58:e6:f7:4f:d4:bc:50:fb:ec:6c:63:4a:db:7b:7a:
                    f2:46:b5:ea:9f:e6:3a:e7:11:b7:04:76:da:32:bc:
                    f4:34:e0:83:ab:24:92:a8:9d:47:83:da:29:66:62:
                    0d:c6:ff:93:ac:b5:89:26:c4:0e:35:ba:60:4b:4e:
                    cd:c0:7e:78:3b:33:42:af:2e:bb:81:14:09:3d:2f:
                    80:f8:e1:27:f2:98:5e:1f:f6:81:3d:30:cb:fc:b4:
                    62:da:69:35:90:33:93:da:0e:f9:e8:97:05:7d:bb:
                    7f:9d:b2:a7:88:51:09:ba:db:61:87:02:36:f5:31:
                    cf:62:e0:9d:29:e3:b4:b6:de:c8:ab:29:86:39:36:
                    9f:d9:49:62:54:f8:b7:58:0e:6b:60:ff:1d:a0:13:
                    7e:3a:53:c5:f5:35:5c:0e:7c:d2:52:78:49:2e:e2:
                    b1:60:35:dc:08:eb:9c:50:23:ec:89:db:4e:c6:f4:
                    e6:89:1e:1d:f7:e5:d7:df:b1:82:4e:2f:e8:55:9f:
                    b6:99:42:a1:d8:5c:ad:10:46:95:71:c5:92:c7:53:
                    ba:bc:14:06:1e:14:4a:33:e0:ac:06:1a:31:b8:de:
                    29:f4:1d:29:ca:e0:dd:2f:77:42:58:a1:d9:69:f5:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:67:65:E6:D3:D8:AB:20:A0:27:65:A0:8D:61:4A:44:27:9D:BF:C2
            X509v3 Authority Key Identifier:
                keyid:88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32342d3234203d3e20323632363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:48:40:66:73:56:6c:d4:d6:db:76:a5:bf:c2:b3:49:a3:cc:
         15:be:bc:2e:e1:e3:18:43:23:66:64:e1:6d:88:2d:d6:06:5b:
         52:cc:3a:0c:d9:9c:e0:9f:af:19:7a:5f:02:4b:3c:47:44:5f:
         a5:e1:51:ef:d0:fe:82:e7:85:1c:e3:54:37:8e:24:b9:7e:cf:
         b3:40:81:81:ca:bb:0d:6b:94:01:d6:d4:22:17:e7:9b:be:82:
         f2:6a:76:82:c9:3a:9b:38:38:ba:a4:2a:d2:e2:4c:65:fb:d6:
         b3:a5:73:66:a5:14:6d:34:4d:e3:15:6a:dd:9b:51:0b:67:02:
         f8:0e:59:6f:80:aa:3a:ac:46:de:86:4a:cb:ee:7e:a2:a9:44:
         53:14:bb:5b:ba:04:7f:4c:4b:a3:d5:1f:75:b2:ee:99:2f:ae:
         ff:95:4f:44:dd:2b:7e:5f:10:2a:2d:4e:1b:c6:fa:32:2c:00:
         9f:48:66:5f:19:cf:6d:b0:2c:51:67:81:32:ec:0a:7e:b3:ad:
         c5:1c:41:6d:87:03:c7:3a:fc:2d:27:61:18:9e:ff:70:b8:65:
         12:70:57:bb:e2:84:34:ba:1b:80:d3:7b:e0:f3:fc:84:c0:de:
         c1:a6:15:76:6d:21:a1:48:53:a3:32:d7:17:e6:2f:2d:d4:47:
         bb:b8:10:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:40:29 2025 by rpki-client