This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39372e302f32342d3234203d3e20323633363038.roa
File:                     3137372e3133362e39372e302f32342d3234203d3e20323633363038.roa (raw, json)
Hash identifier:          CYgONaKz85IoRy2fN76Rh/cckmHRQrEKDMmd1yLslis=
Subject key identifier:   8F:A1:35:B1:30:35:4E:FF:0B:C2:A6:DA:CE:9B:5E:AD:12:35:2C:28
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       7BB83371B471F0C64D1DCD33DD97BEABC44C0FF9
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39372e302f32342d3234203d3e20323633363038.roa
Signing time:             Mon 24 Nov 2025 13:40:09 +0000
ROA not before:           Mon 24 Nov 2025 13:35:09 +0000
ROA not after:            Mon 23 Nov 2026 13:40:09 +0000
asID:                     263608
IP address blocks:        177.136.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 07:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b8:33:71:b4:71:f0:c6:4d:1d:cd:33:dd:97:be:ab:c4:4c:0f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Nov 24 13:35:09 2025 GMT
            Not After : Nov 23 13:40:09 2026 GMT
        Subject: CN=8FA135B130354EFF0BC2A6DACE9B5EAD12352C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:99:2c:36:51:f6:53:10:f6:58:3a:36:4c:
                    dc:af:8e:21:16:10:58:f7:fb:a1:d2:96:31:b9:06:
                    19:64:46:40:f4:22:46:65:7b:a7:a3:6a:41:ea:ce:
                    d0:7b:8c:71:d7:4e:d3:b6:dc:70:44:c1:be:d6:ae:
                    f4:f8:03:7a:ac:9c:80:90:7c:e5:9d:99:d8:49:f5:
                    7e:16:73:71:67:e6:27:d8:da:2c:ef:8c:47:e1:e3:
                    f5:23:91:2f:d1:bc:04:91:98:fc:52:6c:fe:99:95:
                    c1:c7:72:5c:d0:4d:b1:14:82:04:f5:1b:92:b8:b4:
                    f9:0c:92:62:07:29:f4:e0:b8:dd:87:bd:73:cb:ef:
                    ea:7d:16:df:0d:1d:6c:64:3e:8d:70:13:6a:a7:ec:
                    91:b6:1b:5c:b2:ed:05:46:81:36:49:95:7e:86:7d:
                    ce:1d:3c:70:79:ef:16:85:03:66:89:d7:64:57:ad:
                    a9:ef:a6:89:66:c6:c8:ac:c3:5e:3b:d9:66:62:cb:
                    39:4e:91:10:9d:27:3f:fe:43:50:5b:d1:a6:0b:50:
                    26:ff:e9:b9:1b:76:c1:ab:9e:66:b8:6f:de:65:6f:
                    9c:50:98:8f:ed:b8:58:cf:9f:51:cb:ad:8a:76:11:
                    40:d3:d7:75:34:47:14:15:74:4e:d9:30:bb:40:f2:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A1:35:B1:30:35:4E:FF:0B:C2:A6:DA:CE:9B:5E:AD:12:35:2C:28
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39372e302f32342d3234203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:6a:1d:d8:92:1a:a8:f2:7e:8a:d2:bb:bf:cc:b7:1e:5c:1f:
         2d:aa:53:1b:14:40:e3:5a:dd:23:e4:83:3c:0d:a0:b7:21:b8:
         b5:54:43:28:93:6c:65:18:f3:95:49:ef:dd:1b:22:a2:bb:49:
         a5:45:08:2a:a4:60:42:e0:36:b7:55:de:49:05:e1:98:70:21:
         dd:db:05:2f:8b:e0:d4:59:c3:e2:f7:c4:45:4e:8a:64:28:43:
         0c:44:8f:72:53:d9:46:fe:93:e1:40:43:85:18:3c:33:5a:d0:
         64:1e:23:e5:33:fa:49:c9:01:ac:27:32:02:05:67:e7:68:b6:
         b0:82:bc:89:20:94:8a:16:92:13:74:33:96:35:1f:b9:47:37:
         5b:e8:d8:37:15:b7:c0:75:b0:46:0a:7a:79:f3:76:af:01:2e:
         a7:0c:d6:c7:ec:0d:9e:e8:f7:70:32:36:8a:c7:18:0b:6d:f1:
         03:ed:df:27:3b:60:22:41:cd:da:cf:cb:a4:fb:09:e4:ee:87:
         03:27:e2:2a:2c:dd:d9:a4:d1:8a:16:5f:cf:0b:e4:0b:05:f4:
         f5:23:82:6b:36:1c:eb:45:00:a5:94:ee:1c:18:83:b7:be:6d:
         9d:fe:7c:47:8d:35:75:da:82:c5:f7:9c:99:85:4d:7f:c9:76:
         9c:45:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:08:55 2025 by rpki-client