This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131322e302f32322d3232203d3e203532363030.roa
File:                     3137372e3133372e3131322e302f32322d3232203d3e203532363030.roa (raw, json)
Hash identifier:          9SxVaMXoF4cEBA5/7pnADN7P2kixXY96JXAojQLApJ8=
Subject key identifier:   5C:B1:E3:0E:A1:AE:BD:37:27:B0:36:9A:F2:98:A4:93:F4:99:44:58
Certificate issuer:       /CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
Certificate serial:       36943FD3DC077E9C33411DF1C25F426FF8D5DD17
Authority key identifier: 29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131322e302f32322d3232203d3e203532363030.roa
Signing time:             Mon 17 Nov 2025 12:55:36 +0000
ROA not before:           Mon 17 Nov 2025 12:50:36 +0000
ROA not after:            Mon 16 Nov 2026 12:55:36 +0000
asID:                     52600
IP address blocks:        177.137.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl
                          rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:94:3f:d3:dc:07:7e:9c:33:41:1d:f1:c2:5f:42:6f:f8:d5:dd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
        Validity
            Not Before: Nov 17 12:50:36 2025 GMT
            Not After : Nov 16 12:55:36 2026 GMT
        Subject: CN=5CB1E30EA1AEBD3727B0369AF298A493F4994458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:ef:8a:57:dc:2c:5c:6a:18:92:e3:eb:06:
                    4e:f0:19:fe:76:09:eb:c7:c6:11:b9:69:15:5c:43:
                    a7:37:42:68:90:9d:46:bf:d6:d5:fb:43:38:39:3e:
                    a1:49:10:c1:57:d5:8e:ce:17:6f:1d:d0:8d:cf:ca:
                    d4:10:b5:18:73:3b:0f:d4:86:0e:67:53:c8:9d:fb:
                    9b:ad:0d:a7:cb:6f:81:97:40:13:80:a5:15:a7:9d:
                    6c:16:8b:bf:d6:2e:ef:cf:f1:91:2e:88:a1:2d:3a:
                    f9:77:48:e0:61:05:fd:8a:20:6e:e5:9f:9a:70:cc:
                    57:c6:22:af:98:99:cb:c7:ab:15:90:7a:85:9a:97:
                    ac:4a:63:05:d2:db:2a:79:86:a3:47:e7:55:19:bf:
                    8f:82:0b:ba:ff:47:a3:8d:9c:48:01:c4:16:52:d5:
                    16:7b:3f:00:00:21:13:05:79:2e:2b:e2:ba:e5:10:
                    74:b6:ec:a2:f5:76:5a:10:10:ee:0b:fb:86:0a:eb:
                    2b:f3:ca:83:a8:e4:cd:a1:0e:ca:e5:27:67:e6:66:
                    ac:a8:d9:2a:cb:a7:a6:da:4d:04:74:28:49:ad:47:
                    95:7b:9b:f8:1b:90:fa:43:08:15:b2:33:e2:db:d4:
                    a0:a7:32:3d:dc:e9:d4:ea:c9:eb:27:7c:7f:b4:d2:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B1:E3:0E:A1:AE:BD:37:27:B0:36:9A:F2:98:A4:93:F4:99:44:58
            X509v3 Authority Key Identifier:
                keyid:29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131322e302f32322d3232203d3e203532363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:cf:1b:f3:16:75:9b:77:f4:2e:27:78:88:f1:89:40:35:
         27:d6:b3:44:39:5d:8b:a6:81:ba:1a:20:7d:8f:a1:a4:e0:00:
         6a:cf:e7:6a:85:91:d5:fa:7b:3e:94:11:a4:64:db:4e:ab:f9:
         fe:9e:f1:d2:70:4e:c5:19:aa:f9:4e:c2:b2:7a:44:a7:47:96:
         91:ae:d3:b8:12:19:6f:7b:32:26:c1:16:53:39:b4:f7:a7:01:
         99:47:7c:b8:75:76:88:3d:50:e5:c5:0b:72:02:d9:11:fd:98:
         32:ba:7c:40:82:bf:5f:d9:75:d9:cf:c1:90:e0:62:a2:b2:c8:
         dd:76:d8:d2:77:7d:4c:03:a2:5a:6c:40:e2:66:3b:9e:86:c1:
         a8:39:25:ce:01:08:0c:05:e8:8f:27:07:d9:1e:2b:ed:a1:58:
         12:f5:c3:49:52:4c:cd:2a:d4:79:b6:1b:4d:2b:0e:e0:1f:dc:
         9a:c8:93:11:e2:6e:a0:8d:a4:0e:2d:3d:19:4c:a1:f2:74:37:
         42:cc:60:4e:4f:7b:82:0d:06:83:42:bc:5b:59:89:b6:10:3c:
         e0:6a:c7:ea:4b:c6:bb:78:f9:7d:74:b3:8b:4b:c0:16:2b:9e:
         b5:cc:ca:33:f1:f0:0f:0b:87:53:1b:d8:75:e8:29:e0:30:b6:
         77:17:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:05 2025 by rpki-client