This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e3130302e302f32332d3233203d3e20323633363038.roa
File:                     3137372e3133362e3130302e302f32332d3233203d3e20323633363038.roa (raw, json)
Hash identifier:          7rgm5+e798FUpeaIWaP0KdctCXyt+vduDH4FwQ+ThdY=
Subject key identifier:   F3:A1:4E:0F:96:94:B7:E7:4B:40:A7:25:74:8F:19:42:B9:F2:68:07
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       5FCFEDD5A30567B72246137F5C19E2F5E98E650C
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e3130302e302f32332d3233203d3e20323633363038.roa
Signing time:             Mon 24 Nov 2025 13:40:06 +0000
ROA not before:           Mon 24 Nov 2025 13:35:06 +0000
ROA not after:            Mon 23 Nov 2026 13:40:06 +0000
asID:                     263608
IP address blocks:        177.136.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 07:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cf:ed:d5:a3:05:67:b7:22:46:13:7f:5c:19:e2:f5:e9:8e:65:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Nov 24 13:35:06 2025 GMT
            Not After : Nov 23 13:40:06 2026 GMT
        Subject: CN=F3A14E0F9694B7E74B40A725748F1942B9F26807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:d2:f0:55:79:15:73:9b:f4:b9:68:a4:08:
                    7c:f6:a5:a0:20:c1:fb:38:06:9c:3a:3c:4b:b0:7b:
                    47:26:c9:4b:8c:da:aa:82:b3:d8:63:85:ec:58:e6:
                    fc:22:02:bd:ae:3f:f3:77:63:0a:79:55:d8:0c:e2:
                    24:a8:51:6f:e1:ef:e8:c2:b0:63:0e:e9:e2:8f:d2:
                    83:e3:c6:27:50:44:8a:e9:64:b8:64:d8:a8:5c:d8:
                    a2:9c:78:5e:19:cb:47:23:6e:66:f4:ef:35:1d:86:
                    cd:34:ff:ac:d1:8f:fd:db:60:03:ce:07:d1:34:e9:
                    57:53:cf:16:0a:4b:12:f4:13:09:37:08:9b:bb:2c:
                    05:11:65:f9:01:1e:ca:68:27:fe:40:d0:c1:24:ff:
                    cc:88:4e:00:ea:e0:66:8c:64:df:b7:34:d8:74:7c:
                    e6:c3:79:a2:56:15:7c:09:71:e7:97:e5:be:cc:33:
                    6e:dc:cc:8b:63:6a:0b:46:ca:46:6e:43:5a:06:cd:
                    0c:32:b3:02:42:6c:cd:bd:f6:52:51:e4:fd:15:ab:
                    a2:49:07:b7:ae:44:1d:ec:1a:82:e6:e4:a7:2a:c9:
                    46:ba:54:b0:ea:aa:ac:92:c3:c6:2f:73:99:24:fb:
                    c9:4d:eb:ba:cd:36:a7:bb:cf:5b:60:27:dc:c9:22:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A1:4E:0F:96:94:B7:E7:4B:40:A7:25:74:8F:19:42:B9:F2:68:07
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e3130302e302f32332d3233203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:a9:12:8a:7a:77:c6:f1:a7:1d:35:9f:b7:e2:fc:e8:f0:e2:
         12:37:b9:be:21:fb:e9:ad:e7:e2:05:dc:b0:65:7a:2c:e0:5e:
         da:5c:a4:48:c5:2c:d8:f7:56:0e:1d:cb:78:71:db:4f:1a:9c:
         5e:78:0c:d8:8d:17:ce:a1:c8:e6:44:7f:f8:ef:4f:dd:78:fe:
         e4:33:a2:10:ea:cc:60:bb:dd:83:6d:32:c3:cf:71:1d:ae:98:
         70:32:00:cc:5c:d8:fa:8a:43:10:25:1b:43:4f:6f:b0:6c:95:
         fb:0f:9a:76:8b:10:05:67:95:08:ab:ea:cd:51:b3:3f:64:8c:
         d6:a3:36:3f:d3:66:c0:54:a2:fa:23:e9:1e:e5:9e:18:d9:e1:
         6f:32:63:b7:e3:59:6d:f0:c4:22:e8:61:6a:9f:a2:48:8e:51:
         14:5e:dd:8c:bd:0f:8f:47:ee:0e:da:b1:8a:13:d5:2b:97:c8:
         81:1b:08:0f:d9:d4:ec:d9:01:4d:2d:fb:ae:18:a3:8a:1a:63:
         e3:b6:bf:aa:7b:60:27:36:08:14:3d:91:f0:05:03:b0:bd:23:
         9f:c8:a5:80:fe:79:fa:b7:48:1b:72:d7:d4:4f:16:78:38:73:
         50:85:0d:ba:38:89:fb:be:d5:f8:23:92:6b:86:8d:d5:02:3a:
         e9:2a:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:08:54 2025 by rpki-client