This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3137372e3130372e33322e302f31392d3332203d3e203238333239.roa
File:                     3137372e3130372e33322e302f31392d3332203d3e203238333239.roa (raw, json)
Hash identifier:          62JsLG0KW9O4Sn4jKUzM60Bz8Tc9g9cP4iTLc9QRtsM=
Subject key identifier:   F6:CE:3B:16:0F:A4:41:4C:FE:17:73:E8:3E:8B:26:A2:44:71:07:CC
Certificate issuer:       /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
Certificate serial:       494B53E282480A85E1D0F183C580F4C4FE1230B1
Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3137372e3130372e33322e302f31392d3332203d3e203238333239.roa
Signing time:             Tue 11 Nov 2025 15:44:15 +0000
ROA not before:           Tue 11 Nov 2025 15:39:15 +0000
ROA not after:            Tue 10 Nov 2026 15:44:15 +0000
asID:                     28329
IP address blocks:        177.107.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4b:53:e2:82:48:0a:85:e1:d0:f1:83:c5:80:f4:c4:fe:12:30:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
        Validity
            Not Before: Nov 11 15:39:15 2025 GMT
            Not After : Nov 10 15:44:15 2026 GMT
        Subject: CN=F6CE3B160FA4414CFE1773E83E8B26A2447107CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:13:52:04:87:68:d8:27:f6:7d:dc:de:1b:
                    e0:89:f6:7d:02:15:cf:1e:d6:8b:e2:9e:30:cf:e9:
                    1c:6f:8a:73:a2:22:84:ae:fa:6a:2b:bd:17:8d:c2:
                    c2:6c:77:ec:5b:b0:1f:20:1b:f3:a7:40:61:39:09:
                    78:44:81:c9:8c:de:69:ff:7b:ef:19:f5:df:a9:36:
                    50:ed:99:00:33:e1:54:73:90:21:a1:75:89:d0:ad:
                    6a:5c:dc:00:7b:f9:db:af:e0:df:e7:02:0a:fb:db:
                    02:f5:ca:a7:65:46:59:0b:c5:06:dd:c6:3e:62:db:
                    ea:b5:d9:c3:17:ad:d9:23:f1:2d:f3:ef:9f:e5:5a:
                    00:a9:5f:75:95:d3:1a:ad:44:e9:3c:71:8b:15:2d:
                    b9:7d:89:e6:52:d8:2c:86:59:0a:1f:0a:10:75:3f:
                    f9:35:53:ba:39:72:9b:86:1e:9b:c5:10:5e:1a:7a:
                    d2:1b:48:61:1a:69:10:ba:f0:cb:41:de:3c:e0:03:
                    ce:bf:20:b9:29:f1:33:d9:95:54:9c:e3:04:85:9c:
                    a3:3e:e1:4a:43:33:4f:ea:7e:17:77:7e:6b:68:4b:
                    7b:aa:0a:b5:50:ef:8e:3f:92:d4:41:fb:3e:de:16:
                    85:d5:c9:0c:ce:45:10:ac:9e:b6:49:90:73:84:46:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CE:3B:16:0F:A4:41:4C:FE:17:73:E8:3E:8B:26:A2:44:71:07:CC
            X509v3 Authority Key Identifier:
                keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3137372e3130372e33322e302f31392d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:9e:08:1b:df:88:f6:2f:87:9e:aa:b5:9d:25:ae:43:c4:
         34:fc:00:43:48:5b:c6:6a:f4:10:04:c1:7e:8e:70:b3:f0:0f:
         2c:2a:c6:8b:24:92:ab:01:9e:e0:4f:13:6d:b0:36:c8:46:b7:
         93:77:87:48:87:d2:7b:d1:e7:e6:a0:59:c7:18:42:5e:22:ab:
         66:e4:3a:fd:ba:97:c0:a5:38:bd:59:aa:c3:1c:aa:80:bf:b1:
         27:6d:fd:e5:9f:d9:0f:91:93:c9:dc:9b:a0:2d:19:40:99:cf:
         da:b2:eb:74:ed:11:17:63:27:57:9c:fa:b3:45:37:0e:b7:de:
         38:b6:e0:40:3b:58:bc:5a:40:87:d7:9e:24:75:56:1a:80:e2:
         ff:b6:fc:25:d7:ff:e7:32:ed:49:1a:79:e0:2c:7d:c8:e8:2f:
         6b:34:81:2f:8d:d7:f4:f9:ee:2e:10:b0:67:59:d8:1c:65:f9:
         b0:80:f6:bc:08:33:ee:f4:7c:58:00:a8:ce:44:0e:c4:3f:9d:
         91:d1:79:fe:69:92:48:0d:85:63:3e:a6:06:7e:87:aa:9a:ae:
         7c:50:85:b5:7f:68:22:e7:78:c0:43:89:23:be:8e:1d:f2:ee:
         52:b4:a7:10:b2:2d:c1:24:8d:04:39:c2:5d:e5:8f:17:eb:75:
         ed:26:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:44 2025 by rpki-client