This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3137372e3132362e392e302f32342d3332203d3e203232333831.roa
File:                     3137372e3132362e392e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          1ut+TgH5HmGV8znOAgdWTRGjcbGZwF3mrhR+Sw7pZ6g=
Subject key identifier:   D6:B8:20:EA:D1:75:B8:20:25:8A:2C:C7:71:09:48:27:49:09:4F:6B
Certificate issuer:       /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
Certificate serial:       67FDE1F390473217D3AC00F1E49AF61BBB9E4C90
Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3137372e3132362e392e302f32342d3332203d3e203232333831.roa
Signing time:             Tue 11 Nov 2025 15:44:15 +0000
ROA not before:           Tue 11 Nov 2025 15:39:15 +0000
ROA not after:            Tue 10 Nov 2026 15:44:15 +0000
asID:                     22381
IP address blocks:        177.126.9.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fd:e1:f3:90:47:32:17:d3:ac:00:f1:e4:9a:f6:1b:bb:9e:4c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
        Validity
            Not Before: Nov 11 15:39:15 2025 GMT
            Not After : Nov 10 15:44:15 2026 GMT
        Subject: CN=D6B820EAD175B820258A2CC77109482749094F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:e6:91:4e:76:a2:c2:6d:9f:34:d2:00:53:
                    06:aa:1a:e6:1c:a3:75:9a:3e:28:b0:14:6e:90:26:
                    ef:dd:7d:76:41:91:39:c7:12:7c:91:d3:7d:80:d2:
                    f1:99:98:36:f8:d3:99:75:da:6c:d3:df:e8:4c:d1:
                    21:c9:5c:49:6e:03:fc:74:20:62:dc:4f:5e:96:50:
                    0a:1d:db:6e:b7:8d:a9:28:52:44:b8:92:8a:97:1b:
                    aa:cf:19:dd:72:e9:27:29:9f:f4:e3:90:42:ed:7a:
                    1d:e0:8e:fe:1b:78:ca:71:2f:24:a9:28:61:62:14:
                    8c:d5:0b:bc:f9:74:c3:07:c3:0f:61:fb:52:bc:90:
                    c4:56:70:11:c5:e1:0a:a2:4b:8e:40:7d:83:46:ca:
                    81:a1:05:c4:b9:c5:70:1b:ba:64:d5:0e:67:c6:9d:
                    8a:cd:79:8b:35:fc:dd:37:d5:57:8f:08:d6:2d:63:
                    4c:49:7d:78:ca:b7:b9:8c:d0:30:86:3c:d2:b4:3d:
                    71:ed:d6:e7:1d:dc:d2:f8:dc:7e:7a:1c:6a:67:38:
                    7c:81:41:de:67:68:ef:e0:e6:aa:ca:4c:12:f8:66:
                    bb:b9:ad:5c:3f:1e:4e:70:0b:1c:ea:0c:80:c8:79:
                    27:10:c2:04:77:b4:85:08:e0:55:5c:72:92:a1:32:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:20:EA:D1:75:B8:20:25:8A:2C:C7:71:09:48:27:49:09:4F:6B
            X509v3 Authority Key Identifier:
                keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3137372e3132362e392e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:40:a6:28:3b:00:b9:fc:2f:71:c5:02:75:16:d6:ae:12:8c:
         82:6a:c1:7c:00:1b:c1:49:8f:96:45:a5:9c:f6:9c:dc:d1:7f:
         8d:db:f6:db:ac:51:c0:fd:48:fe:cc:58:60:00:3e:fc:5e:71:
         ec:22:a2:93:79:22:19:18:a1:4a:dd:c9:6d:27:91:3e:fb:c1:
         80:f6:0a:a2:26:25:95:ff:cf:0b:36:f6:b9:ed:20:e5:f6:90:
         9d:d8:fb:f4:c3:ef:b8:d3:eb:c6:48:a4:55:b2:a2:8c:f9:eb:
         87:64:6a:42:b3:1f:22:3a:43:77:10:df:2b:7b:32:4e:68:21:
         02:ea:d1:18:5a:34:99:71:00:b5:80:9e:b1:c0:5c:f7:80:4f:
         a0:4f:30:17:69:a7:19:8c:50:c0:af:6e:ae:83:36:62:fb:06:
         ce:11:ae:36:91:98:18:b6:2b:ac:26:ef:84:72:f4:2a:c1:ff:
         66:fd:be:ee:7d:17:fb:47:ee:e5:15:99:bb:1d:3d:e1:f4:cf:
         76:c1:71:ee:63:6e:8a:aa:88:22:ac:dd:68:6d:6b:82:0f:e5:
         cb:c1:f1:ab:b1:53:2a:5b:fe:50:0a:75:29:ad:53:a9:ae:f1:
         ba:e3:38:4f:95:ec:5c:f6:d3:1c:9a:f2:0a:7e:84:8a:48:36:
         7f:85:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:31 2025 by rpki-client