This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa
File:                     3137372e35352e3132382e302f32302d3332203d3e203533303033.roa (raw, json)
Hash identifier:          Q/72oY4cibQwqwUH4kMLZ0Q9rhIaZiUPUevjPsZP5xY=
Subject key identifier:   A3:F6:02:17:B4:60:CE:3E:73:BC:CB:5F:7F:0A:C5:FD:FC:97:F9:D0
Certificate issuer:       /CN=7D97FFCCB49C7F4473FB237860EB326C81C6666D
Certificate serial:       59107315EBD46E461DD5C361C0826D1FF6155EAF
Authority key identifier: 7D:97:FF:CC:B4:9C:7F:44:73:FB:23:78:60:EB:32:6C:81:C6:66:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa
Signing time:             Mon 10 Nov 2025 15:40:49 +0000
ROA not before:           Mon 10 Nov 2025 15:35:49 +0000
ROA not after:            Mon 09 Nov 2026 15:40:49 +0000
asID:                     53003
IP address blocks:        177.55.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.crl
                          rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:10:73:15:eb:d4:6e:46:1d:d5:c3:61:c0:82:6d:1f:f6:15:5e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D97FFCCB49C7F4473FB237860EB326C81C6666D
        Validity
            Not Before: Nov 10 15:35:49 2025 GMT
            Not After : Nov  9 15:40:49 2026 GMT
        Subject: CN=A3F60217B460CE3E73BCCB5F7F0AC5FDFC97F9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:85:45:db:fe:b2:29:bb:12:22:6b:22:0e:
                    39:e3:ae:92:a6:73:47:59:67:68:49:ed:0e:04:d8:
                    26:5e:2c:0d:b7:9b:41:0a:56:fc:5c:b2:86:0b:f0:
                    29:f8:f5:b9:a8:ce:17:40:ff:f9:94:24:20:1a:4b:
                    f9:80:24:9c:a8:8c:c0:a3:25:72:35:79:1d:19:8e:
                    17:71:30:e8:0b:16:de:49:a5:82:45:a2:d9:b5:fe:
                    72:a3:4c:cf:8f:39:36:be:07:7a:98:06:9f:13:76:
                    c7:2a:fb:cf:c3:36:e7:5c:cf:8a:55:42:6f:ef:01:
                    2f:06:aa:73:dd:08:c8:06:cc:ef:31:38:56:6b:d4:
                    08:9b:c4:88:56:f5:d5:a9:ee:dd:c8:eb:7a:a2:1b:
                    d4:36:64:07:ee:b9:1e:3a:c5:4d:02:ac:3d:bf:98:
                    49:24:2f:77:78:27:2a:6b:3b:19:f2:57:95:a2:b0:
                    a5:b7:31:55:1d:4d:94:c3:7a:5f:bc:e8:5e:fc:c2:
                    04:81:d8:17:a3:9e:0b:64:32:ee:eb:50:95:85:23:
                    60:fd:93:5a:80:dd:36:66:47:f0:4a:f4:ed:d0:60:
                    c2:9b:35:15:d1:03:ac:d0:cc:f4:f1:74:b5:69:5f:
                    fe:be:01:16:42:9d:56:c0:68:1a:a0:fa:70:e0:f3:
                    4d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F6:02:17:B4:60:CE:3E:73:BC:CB:5F:7F:0A:C5:FD:FC:97:F9:D0
            X509v3 Authority Key Identifier:
                keyid:7D:97:FF:CC:B4:9C:7F:44:73:FB:23:78:60:EB:32:6C:81:C6:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:7a:71:5d:b5:c6:94:c4:b7:a1:1b:44:35:95:af:a7:5c:db:
         bb:aa:0d:8a:79:c1:85:17:20:c5:19:9c:52:a8:b3:35:38:a5:
         16:63:e8:f2:15:41:c5:b4:fd:85:22:52:65:f2:52:7a:80:cb:
         ce:b8:c5:6c:cc:7b:e1:f6:38:58:0b:13:3a:94:ee:11:8d:b1:
         74:8f:0d:e5:89:53:8d:26:80:d3:9c:14:f0:7c:d6:d7:6b:8d:
         dd:f7:87:66:75:a7:c2:e4:c7:29:bd:a4:a6:f8:5b:e1:7a:c5:
         c7:38:b7:b4:bf:d7:ca:67:84:78:d9:1f:2e:79:2e:3b:b5:fa:
         3d:5b:4d:c4:94:2a:a5:61:dc:a7:bf:90:80:27:09:da:44:45:
         42:e8:b8:11:dc:39:8c:c0:24:d3:14:00:13:39:0c:ca:56:a5:
         30:ac:fc:18:53:23:4a:ae:cb:bd:fe:eb:b2:b1:ee:7d:82:64:
         e3:9c:d8:fd:8b:57:fb:a4:41:50:e5:a6:4f:a1:ec:67:93:2b:
         c7:8d:1f:68:34:48:be:fe:96:f3:fd:16:fb:67:bb:d6:e6:ae:
         73:71:34:ea:44:35:0c:51:25:47:58:8a:a0:a3:a1:50:e4:dc:
         8a:b0:f7:e0:35:12:c6:9d:07:66:05:ec:b4:6d:d2:e0:de:3c:
         e5:5e:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:19:41 2025 by rpki-client