This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32332e302f32342d3234203d3e20323632363230.roa
File:                     3137372e38362e32332e302f32342d3234203d3e20323632363230.roa (raw, json)
Hash identifier:          A2J1OlwHcPVniXtZT686DcoibuRY2IcQPsOHbCdVBvs=
Subject key identifier:   56:65:6A:2B:B0:26:B7:6C:00:7A:34:AE:58:8D:E7:F0:12:B7:2C:EB
Certificate issuer:       /CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
Certificate serial:       6F47C67B426913A358BD09F9746B06F088198D2A
Authority key identifier: 88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32332e302f32342d3234203d3e20323632363230.roa
Signing time:             Fri 28 Nov 2025 13:21:50 +0000
ROA not before:           Fri 28 Nov 2025 13:16:50 +0000
ROA not after:            Fri 27 Nov 2026 13:21:50 +0000
asID:                     262620
IP address blocks:        177.86.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl
                          rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:47:c6:7b:42:69:13:a3:58:bd:09:f9:74:6b:06:f0:88:19:8d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
        Validity
            Not Before: Nov 28 13:16:50 2025 GMT
            Not After : Nov 27 13:21:50 2026 GMT
        Subject: CN=56656A2BB026B76C007A34AE588DE7F012B72CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:26:36:96:de:25:fe:6e:9f:21:73:ad:cf:
                    cf:a9:ea:e3:e0:dd:9b:95:1c:06:50:34:c9:be:b1:
                    cd:f2:1e:39:f0:91:09:f5:37:2b:9e:ca:04:fb:1f:
                    37:3b:67:56:b0:a9:0f:cf:1b:90:af:4a:44:32:d2:
                    26:93:b7:ff:25:fc:46:43:51:32:f7:f0:53:0e:c9:
                    d2:46:b7:cd:15:22:ee:cc:4b:95:a7:dc:5f:dd:50:
                    23:97:3d:cd:1c:f9:e1:6f:b1:83:a3:96:12:9f:b3:
                    67:11:19:eb:a0:55:d8:4f:0d:0d:1e:57:3c:4f:f8:
                    60:a0:ce:8c:33:da:10:44:34:89:6d:80:48:22:1e:
                    58:47:8a:f9:12:21:2c:de:b2:d4:13:e3:7d:11:77:
                    64:5c:04:61:29:a5:ca:75:43:1c:17:09:50:8d:d0:
                    df:9f:92:73:05:a6:97:da:3c:17:b7:59:69:be:56:
                    3e:da:e1:86:0c:7a:f5:d0:12:03:9d:27:0a:e5:0e:
                    36:5b:09:a8:6d:a1:cd:1f:cb:a7:a5:48:d1:98:f1:
                    51:ec:a7:11:1c:5e:58:da:00:97:e7:bd:dc:dd:a7:
                    7a:6a:04:b9:69:66:f0:0d:9c:e0:04:0b:a3:ef:9b:
                    ff:ed:fe:b0:7d:7a:ef:71:04:cc:49:7c:02:59:86:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:65:6A:2B:B0:26:B7:6C:00:7A:34:AE:58:8D:E7:F0:12:B7:2C:EB
            X509v3 Authority Key Identifier:
                keyid:88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32332e302f32342d3234203d3e20323632363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:6e:ce:81:3e:cf:01:de:00:7a:ce:04:57:5a:72:d8:f7:
         39:c0:6f:bc:e8:43:b7:6f:7c:8b:e9:ce:4c:64:ae:26:a5:c4:
         b5:e4:07:7b:79:b3:13:c4:1d:b4:ba:ae:79:93:c3:87:54:0b:
         e7:5f:f8:7e:18:25:04:04:82:10:8e:1b:a6:26:6e:b7:ce:7e:
         6e:e7:d0:0e:7a:07:68:25:a1:b4:14:03:4b:6b:eb:ae:68:24:
         72:12:58:4c:a5:0f:08:95:6b:32:ad:89:39:93:5b:a9:72:ed:
         bb:18:52:f3:e9:fa:a5:64:bf:01:9c:42:f8:54:be:6b:c4:2b:
         59:de:ec:ab:bb:9c:7d:80:30:4c:58:54:40:15:8b:d4:58:e4:
         09:6c:50:6e:b3:0c:cb:e0:78:4e:d7:4e:f2:1a:37:f6:53:74:
         ad:22:49:03:c0:72:29:04:34:e2:b1:d4:0e:b2:1c:cd:26:49:
         15:9d:cd:e3:c1:c3:62:fd:95:78:de:ff:df:c3:d7:d8:f1:4f:
         d4:7a:25:32:5f:ce:a1:45:07:17:ab:73:df:03:46:3f:bb:fb:
         37:f1:11:ff:87:19:c9:4c:74:1a:f9:9c:7c:c9:2f:51:43:d1:
         90:ff:d2:15:ee:93:46:42:b8:b8:aa:8c:dc:c6:d5:e6:b9:00:
         87:6c:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:51:46 2025 by rpki-client