This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32322e302f32342d3234203d3e20323632363230.roa
File:                     3137372e38362e32322e302f32342d3234203d3e20323632363230.roa (raw, json)
Hash identifier:          kwmAsF4pxnYYnyRmDhRqCW7LkgoVGvgMpe2x/Cyb09s=
Subject key identifier:   8A:CF:84:34:78:AD:E4:40:94:E6:54:5D:8E:93:E8:79:C6:9B:E6:D3
Certificate issuer:       /CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
Certificate serial:       24288441E6FE852B51F15C81F643ADA05D009868
Authority key identifier: 88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32322e302f32342d3234203d3e20323632363230.roa
Signing time:             Fri 28 Nov 2025 13:21:50 +0000
ROA not before:           Fri 28 Nov 2025 13:16:50 +0000
ROA not after:            Fri 27 Nov 2026 13:21:50 +0000
asID:                     262620
IP address blocks:        177.86.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl
                          rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:28:84:41:e6:fe:85:2b:51:f1:5c:81:f6:43:ad:a0:5d:00:98:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
        Validity
            Not Before: Nov 28 13:16:50 2025 GMT
            Not After : Nov 27 13:21:50 2026 GMT
        Subject: CN=8ACF843478ADE44094E6545D8E93E879C69BE6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:5c:59:48:db:74:01:9e:8a:64:3f:43:fb:
                    42:92:96:d3:28:74:96:af:e8:1b:91:33:37:1a:b3:
                    86:17:6e:83:9b:3b:0b:bb:0a:87:d1:ed:34:30:83:
                    b8:fe:b1:23:32:8d:87:33:81:4a:df:b2:39:df:f6:
                    5e:44:ba:40:c4:61:da:27:39:d6:c9:4a:2d:7f:ce:
                    72:c5:40:f8:6d:a8:d5:56:f2:89:be:76:e5:37:6a:
                    a4:b7:dd:0b:55:e3:a4:73:4c:bf:68:39:93:89:54:
                    5a:7e:b9:43:74:1d:f8:ad:b6:35:d2:fa:52:2e:5a:
                    d4:55:71:6d:06:14:85:e7:99:b5:35:63:b6:55:56:
                    be:22:36:50:f9:7a:78:6b:f4:ea:79:02:21:f4:00:
                    e7:0c:35:93:f9:2a:ce:b2:9a:0a:1f:b9:27:9e:3d:
                    45:16:bf:ef:42:63:b8:e2:0c:df:d4:90:5d:5c:66:
                    6a:8f:69:00:eb:0e:66:4f:e2:a4:93:1d:b2:ae:1d:
                    b4:5b:64:95:6f:cc:9e:6d:5a:2c:a8:ae:c2:ea:b9:
                    7b:a3:c4:db:2a:34:9b:4d:d4:99:71:45:11:30:73:
                    03:37:3f:a1:c4:d0:e7:87:26:80:ae:e0:be:57:9a:
                    a7:ac:3a:c0:f3:be:48:72:70:3e:d9:e3:e3:07:d3:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CF:84:34:78:AD:E4:40:94:E6:54:5D:8E:93:E8:79:C6:9B:E6:D3
            X509v3 Authority Key Identifier:
                keyid:88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32322e302f32342d3234203d3e20323632363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:26:e0:5b:33:15:60:fa:9d:69:a1:41:c5:e3:69:85:39:c7:
         4a:fa:3b:0d:3e:77:de:ef:ec:30:6b:44:56:e0:31:bb:08:49:
         5a:ec:f1:5c:1a:c7:d1:08:ee:4d:a1:be:4f:13:11:34:5c:39:
         5c:89:ad:f0:f4:04:1f:30:5c:14:c1:4b:2a:4c:22:b5:25:e4:
         e6:34:ae:43:e4:e5:73:d8:47:0c:ab:c1:df:79:2f:88:22:3b:
         3e:d3:3c:46:70:08:c0:e2:71:a2:24:52:c4:c9:13:35:4c:65:
         1b:20:03:b0:89:75:d4:95:e8:ae:86:39:94:66:20:fc:0e:9f:
         f6:3e:51:ef:24:d0:36:0c:21:be:59:36:98:39:49:c6:f8:84:
         9e:a4:24:46:9f:ec:c4:41:07:76:bd:f7:da:a8:f0:bf:c4:15:
         a3:8d:a7:74:31:f3:7a:8d:b0:c4:6b:1b:a9:2b:35:8a:6b:11:
         84:bb:aa:74:56:2c:d1:c3:a5:28:59:69:ec:91:95:2a:f6:4b:
         f3:6a:45:f9:df:0f:d6:5a:9b:e1:09:21:4e:2c:b7:8f:8b:23:
         15:c1:d4:b0:27:3f:24:8e:b2:c4:71:9c:d7:12:fa:b2:9f:a9:
         f5:1a:a0:82:36:ea:bd:8e:70:44:3a:fd:f3:a2:d6:cf:a8:06:
         10:5b:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:00:28 2025 by rpki-client