This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39362e302f32322d3232203d3e20323633363038.roa
File:                     3137372e3133362e39362e302f32322d3232203d3e20323633363038.roa (raw, json)
Hash identifier:          JHe06mbC2Vk7FOhop4UDuT3U8LAskXbyAr6XGtyjTD0=
Subject key identifier:   34:5B:82:88:28:95:9E:52:40:CA:34:78:B2:BB:24:D8:2C:BC:FE:F4
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       73F9A676A005D7D467BAA278F0C59C53D3BE5010
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39362e302f32322d3232203d3e20323633363038.roa
Signing time:             Mon 24 Nov 2025 13:40:08 +0000
ROA not before:           Mon 24 Nov 2025 13:35:08 +0000
ROA not after:            Mon 23 Nov 2026 13:40:08 +0000
asID:                     263608
IP address blocks:        177.136.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 07:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f9:a6:76:a0:05:d7:d4:67:ba:a2:78:f0:c5:9c:53:d3:be:50:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Nov 24 13:35:08 2025 GMT
            Not After : Nov 23 13:40:08 2026 GMT
        Subject: CN=345B828828959E5240CA3478B2BB24D82CBCFEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:01:0f:3c:10:98:2a:54:47:a7:34:46:bb:
                    ae:d3:a5:37:a2:f7:ef:e6:c5:d3:be:11:6d:c3:8d:
                    08:dd:83:28:74:24:16:7f:f8:7c:ea:16:59:71:3a:
                    41:17:40:12:36:03:00:2a:27:06:ef:b8:14:df:c6:
                    5a:99:0d:13:3c:d6:9f:23:75:a0:06:e0:04:53:cd:
                    e1:f8:3e:a5:26:e6:4b:c1:d1:af:1b:20:35:f2:23:
                    7e:6c:fc:8a:c1:e2:17:4c:8d:65:9e:14:b9:ee:03:
                    ba:f3:0e:2b:11:50:bd:54:9c:18:ff:1b:43:69:bb:
                    e2:67:d4:0e:df:4d:b3:82:f9:b0:9b:ba:cf:ed:eb:
                    c3:98:aa:f4:c9:3b:36:e6:3d:23:2f:ac:5e:af:9e:
                    dc:37:cb:e2:49:df:8d:c9:6a:52:0d:61:08:0c:75:
                    6e:3e:b2:b3:32:d8:8e:4e:23:3c:f8:63:dd:20:c8:
                    75:65:72:eb:d4:d8:3f:d1:99:d5:86:16:8a:86:34:
                    16:54:56:c3:53:dd:de:65:52:a9:66:1d:3b:6d:53:
                    6a:0d:32:1f:59:13:96:94:d0:55:5a:2d:35:33:89:
                    f3:d5:f7:4c:96:cf:bd:e1:3d:8b:a0:7b:87:19:29:
                    c6:0f:f0:c2:1f:9e:34:72:55:44:05:da:29:1c:2c:
                    7b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5B:82:88:28:95:9E:52:40:CA:34:78:B2:BB:24:D8:2C:BC:FE:F4
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39362e302f32322d3232203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:d3:80:9d:05:ea:be:0f:e0:e4:aa:c8:ae:a0:48:f2:ee:4c:
         80:17:1c:26:9d:b0:18:a3:f3:c6:49:f1:d8:e0:3c:fe:3a:90:
         c2:a0:7e:7f:d0:99:c7:61:83:51:c9:27:4e:2c:4d:69:1d:44:
         a5:33:23:2b:c7:94:33:27:c9:78:89:37:e0:29:b0:21:ae:a4:
         da:00:23:d7:a7:be:43:2e:79:64:9c:10:83:3b:78:de:15:45:
         ba:62:b7:6f:af:e4:a3:5e:d5:3c:52:59:32:09:9d:04:47:2e:
         80:3d:e5:eb:cb:d4:8f:57:51:a4:0b:06:e5:d9:a1:34:99:f3:
         11:47:df:0e:9c:18:da:23:aa:6a:2c:29:a3:f2:6b:aa:66:77:
         bd:5f:75:c6:78:59:e0:68:34:17:c2:b5:90:c8:45:ab:a6:26:
         14:73:9b:72:ed:e7:d0:f6:b4:ad:b6:11:a4:1b:c9:18:25:55:
         70:1d:90:60:37:03:f9:93:7e:90:b2:d2:af:cb:4e:cf:4b:e5:
         8a:b1:9f:59:7e:5a:69:b6:ac:d5:6c:46:57:7f:2b:3a:2c:18:
         93:3d:39:ed:4c:5e:4b:fb:d0:23:bc:8e:04:08:cd:3a:76:8f:
         22:05:5d:7a:cc:a3:55:d0:61:c8:7f:58:fa:ed:39:89:a0:63:
         8c:60:39:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:09:26 2025 by rpki-client