This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TGvvDYo8u9a2Ldt5ok8YSnaGgRBJX5AJrCq1ZvVExDF/0/3137372e3232332e3135322e302f32322d3332203d3e20323731323238.roa
File:                     3137372e3232332e3135322e302f32322d3332203d3e20323731323238.roa (raw, json)
Hash identifier:          Fh+EMo7u25Jq7DpJt5jtzcgRWiyDJRBRXksF0naxjF0=
Subject key identifier:   6C:CA:05:01:14:A9:6A:73:9F:F3:64:DF:0D:E2:BA:6E:5A:BE:D7:AD
Certificate issuer:       /CN=7AE8E6F2472A7A5B232CFB0C1FABB450283B107C
Certificate serial:       4F421784630608D68E79A70D054FBC6353A33075
Authority key identifier: 7A:E8:E6:F2:47:2A:7A:5B:23:2C:FB:0C:1F:AB:B4:50:28:3B:10:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AE8E6F2472A7A5B232CFB0C1FABB450283B107C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TGvvDYo8u9a2Ldt5ok8YSnaGgRBJX5AJrCq1ZvVExDF/0/3137372e3232332e3135322e302f32322d3332203d3e20323731323238.roa
Signing time:             Mon 24 Nov 2025 13:09:37 +0000
ROA not before:           Mon 24 Nov 2025 13:04:37 +0000
ROA not after:            Mon 23 Nov 2026 13:09:37 +0000
asID:                     271228
IP address blocks:        177.223.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TGvvDYo8u9a2Ldt5ok8YSnaGgRBJX5AJrCq1ZvVExDF/0/7AE8E6F2472A7A5B232CFB0C1FABB450283B107C.crl
                          rsync://rpki-repo.registro.br/repo/9TGvvDYo8u9a2Ldt5ok8YSnaGgRBJX5AJrCq1ZvVExDF/0/7AE8E6F2472A7A5B232CFB0C1FABB450283B107C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AE8E6F2472A7A5B232CFB0C1FABB450283B107C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:42:17:84:63:06:08:d6:8e:79:a7:0d:05:4f:bc:63:53:a3:30:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AE8E6F2472A7A5B232CFB0C1FABB450283B107C
        Validity
            Not Before: Nov 24 13:04:37 2025 GMT
            Not After : Nov 23 13:09:37 2026 GMT
        Subject: CN=6CCA050114A96A739FF364DF0DE2BA6E5ABED7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:ee:2a:a1:79:a3:9e:35:ec:80:2c:b8:a1:
                    09:41:2e:97:02:fe:36:58:91:34:81:cf:7c:34:ac:
                    c1:92:a3:9c:18:d8:20:2a:0b:12:88:9c:3b:02:43:
                    1b:14:e9:9a:da:57:d4:95:c1:2c:48:a7:18:05:ae:
                    a6:8d:af:70:4a:f3:3a:29:c9:0d:97:d6:8d:f0:05:
                    d2:c0:75:23:2a:ec:f9:26:22:7e:78:5a:94:ef:58:
                    11:db:77:93:37:e8:87:6d:15:19:d2:92:17:99:ad:
                    38:8b:6b:5b:be:12:70:28:1a:88:a1:37:8d:79:de:
                    0f:70:78:0a:a9:ce:93:ed:f7:66:fa:10:86:12:37:
                    26:a5:5b:f9:84:4c:10:db:e9:b9:9f:82:54:8d:42:
                    da:c0:94:3b:dc:91:38:a0:74:fd:4f:aa:ad:2b:6d:
                    ba:51:6c:a4:72:b5:d7:19:08:6f:16:ef:3f:58:91:
                    58:b9:64:57:59:b5:de:1d:91:94:f6:d7:aa:25:28:
                    0f:7a:ad:a6:5f:55:3d:a4:1b:41:b6:8b:ba:0f:ce:
                    48:1d:69:c7:41:ad:9c:47:94:59:6a:3a:41:6c:8f:
                    89:13:0c:bc:d6:51:b7:42:dd:30:1d:33:f1:05:ad:
                    f0:0c:ce:2a:ea:53:00:10:f6:cc:49:78:49:34:d9:
                    1c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CA:05:01:14:A9:6A:73:9F:F3:64:DF:0D:E2:BA:6E:5A:BE:D7:AD
            X509v3 Authority Key Identifier:
                keyid:7A:E8:E6:F2:47:2A:7A:5B:23:2C:FB:0C:1F:AB:B4:50:28:3B:10:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TGvvDYo8u9a2Ldt5ok8YSnaGgRBJX5AJrCq1ZvVExDF/0/7AE8E6F2472A7A5B232CFB0C1FABB450283B107C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AE8E6F2472A7A5B232CFB0C1FABB450283B107C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TGvvDYo8u9a2Ldt5ok8YSnaGgRBJX5AJrCq1ZvVExDF/0/3137372e3232332e3135322e302f32322d3332203d3e20323731323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:e2:7d:76:3c:46:f9:d2:9b:80:dd:ff:63:cb:6b:fc:c6:68:
         b0:f0:3c:af:75:8f:c8:b7:4e:a7:0a:1d:08:ca:65:47:55:95:
         74:03:83:66:6a:b3:3b:bf:8e:3a:b3:0c:22:3f:63:ff:1f:b0:
         bc:96:9a:c9:5d:ea:b5:c6:66:15:bc:0d:0a:2d:f8:a0:66:b1:
         f9:4d:34:2c:32:46:8c:45:04:fe:2d:73:29:29:be:2f:73:cb:
         38:96:82:78:eb:05:c0:90:83:ba:58:a3:d5:c4:24:e4:59:b5:
         e1:88:56:8f:f8:57:96:40:8b:60:22:21:46:04:5d:bb:83:8c:
         64:8b:b3:27:4b:48:ba:be:ea:1e:ae:cf:0f:86:02:17:a1:1e:
         ae:d4:c6:07:d2:a8:ed:c1:da:14:99:85:51:53:e2:03:a9:ad:
         2a:0a:03:fd:41:64:1c:da:72:86:4a:ee:3f:b5:60:79:6c:67:
         2f:59:e0:e9:31:d8:5e:2b:c5:93:0f:61:72:b8:30:b0:9e:8a:
         85:68:8f:9a:13:6e:ca:14:39:7e:07:ae:c2:e7:d0:68:ff:d4:
         8a:39:b5:06:16:cd:b3:79:65:91:21:65:49:9f:04:78:93:5d:
         09:d8:62:08:bb:25:1a:52:5e:89:7d:34:31:31:f8:c4:40:95:
         7e:4e:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:44:57 2025 by rpki-client