This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131362e302f32332d3233203d3e203532363030.roa
File:                     3137372e3133372e3131362e302f32332d3233203d3e203532363030.roa (raw, json)
Hash identifier:          +q7JtbZzXAZuJoRdfjkFaqGM6dHKep2Xx1z/RerUlj8=
Subject key identifier:   D2:D2:2F:17:F7:21:E5:41:40:1F:6A:72:CD:FF:8F:B1:63:28:31:7F
Certificate issuer:       /CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
Certificate serial:       750C58C2F1F1F76ABBD041095AC9D7CF41F4D0B0
Authority key identifier: 29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131362e302f32332d3233203d3e203532363030.roa
Signing time:             Mon 17 Nov 2025 12:55:34 +0000
ROA not before:           Mon 17 Nov 2025 12:50:34 +0000
ROA not after:            Mon 16 Nov 2026 12:55:34 +0000
asID:                     52600
IP address blocks:        177.137.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl
                          rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0c:58:c2:f1:f1:f7:6a:bb:d0:41:09:5a:c9:d7:cf:41:f4:d0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
        Validity
            Not Before: Nov 17 12:50:34 2025 GMT
            Not After : Nov 16 12:55:34 2026 GMT
        Subject: CN=D2D22F17F721E541401F6A72CDFF8FB16328317F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:4d:1f:5b:9b:f3:44:f8:1b:80:00:aa:50:
                    05:bd:cc:c3:3f:95:05:39:b8:f2:08:50:35:37:57:
                    f7:b2:ef:30:ae:d9:82:63:cb:b3:29:d0:5c:91:7a:
                    3d:11:65:19:6d:29:c2:23:7f:81:c8:10:bc:de:d0:
                    5a:bb:9a:bd:f6:37:1c:56:c3:17:fd:85:7b:ff:8f:
                    cd:1e:d5:26:ed:61:bf:87:d6:aa:23:2b:a5:92:27:
                    86:30:27:27:ae:a7:0c:f5:df:44:71:e8:2b:33:46:
                    b5:2b:ed:90:c7:6c:4a:22:58:2a:0c:be:2b:cf:e7:
                    fc:58:08:68:a2:c8:8a:00:a4:17:df:20:a9:2d:0f:
                    8c:d7:a0:84:58:0e:2d:cb:a6:45:0d:0e:97:09:84:
                    85:1d:e2:c2:c9:78:72:45:ca:5d:33:55:45:09:cd:
                    bc:3a:c9:29:16:71:d2:db:3a:1f:4c:18:a8:1e:64:
                    a5:ba:19:d1:88:da:17:1a:88:a4:5a:40:c8:5d:52:
                    d5:c3:a2:16:58:1f:53:cd:99:ad:05:76:3f:97:98:
                    21:03:b7:26:a9:ae:ae:14:79:ad:0e:18:55:db:41:
                    25:49:e2:c2:3c:6e:54:96:d7:c9:b8:a7:1b:0c:41:
                    d7:b1:4c:7b:7f:57:2c:2b:17:d3:c3:f9:1c:db:87:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D2:2F:17:F7:21:E5:41:40:1F:6A:72:CD:FF:8F:B1:63:28:31:7F
            X509v3 Authority Key Identifier:
                keyid:29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/3137372e3133372e3131362e302f32332d3233203d3e203532363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:b6:2d:49:da:42:67:d9:fe:94:f5:9f:8c:35:8a:a4:5e:72:
         a3:28:25:62:f1:c5:1b:1b:c5:ff:4b:e1:c9:b2:12:a1:29:e2:
         6c:c8:34:5e:aa:8f:17:6e:30:8a:3f:3c:2a:57:b8:7d:e5:91:
         b0:8d:d8:4b:d3:4d:09:d7:36:57:45:d9:f3:92:ae:3c:00:e9:
         5b:ed:78:e0:d2:9c:95:d4:b1:93:3f:71:ea:86:db:3c:e3:01:
         6b:09:78:3d:41:15:31:d3:e2:fc:ab:ad:c6:09:f2:a7:63:62:
         75:e6:ef:e0:d9:8e:f3:6f:02:ba:7a:6e:47:1d:9c:1f:5a:e6:
         c4:a9:30:ba:82:83:1e:6a:c6:8b:b0:c5:e3:df:2a:60:f2:a2:
         a8:98:38:13:1e:35:7d:9e:4d:a2:6a:cc:ae:38:61:49:f9:41:
         53:64:1a:fb:36:66:8a:7a:e1:a8:c0:b2:31:7a:30:84:2a:ca:
         0c:50:1a:4c:10:f9:db:64:df:36:bd:3d:7b:6c:cd:2e:11:00:
         f6:36:ee:ec:7a:ea:63:c3:aa:2b:9a:c2:f0:de:35:2f:10:e4:
         a2:1b:ec:d2:35:a7:90:c0:98:84:4b:45:94:3a:e8:32:73:6c:
         0d:18:4c:07:bc:73:fe:56:8a:38:44:1d:59:e4:76:f3:02:90:
         82:24:1a:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdQxYwvHx92q70EEJWsnXz0H00LAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlFRDREMkQ3MkM0NjVENURBMTFFMjI1NzZBRUQwMzcx
MDlGQ0JEMDAeFw0yNTExMTcxMjUwMzRaFw0yNjExMTYxMjU1MzRaMDMxMTAvBgNV
BAMTKEQyRDIyRjE3RjcyMUU1NDE0MDFGNkE3MkNERkY4RkIxNjMyODMxN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSQE0fW5vzRPgbgACqUAW9zMM/
lQU5uPIIUDU3V/ey7zCu2YJjy7Mp0FyRej0RZRltKcIjf4HIELze0Fq7mr32NxxW
wxf9hXv/j80e1SbtYb+H1qojK6WSJ4YwJyeupwz130Rx6CszRrUr7ZDHbEoiWCoM
vivP5/xYCGiiyIoApBffIKktD4zXoIRYDi3LpkUNDpcJhIUd4sLJeHJFyl0zVUUJ
zbw6ySkWcdLbOh9MGKgeZKW6GdGI2hcaiKRaQMhdUtXDohZYH1PNma0Fdj+XmCED
tyaprq4Uea0OGFXbQSVJ4sI8blSW18m4pxsMQdexTHt/VywrF9PD+Rzbh5irAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0tIvF/ch5UFAH2pyzf+PsWMoMX8wHwYDVR0j
BBgwFoAUKe1NLXLEZdXaEeIldq7QNxCfy9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXhORVdqaGNpdnIzdUM1NGtaNUdva3hpWGNyV0w0Ync4alM5WERQR2o1
Mm4vMC8yOUVENEQyRDcyQzQ2NUQ1REExMUUyMjU3NkFFRDAzNzEwOUZDQkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5RUQ0RDJENzJDNDY1RDVE
QTExRTIyNTc2QUVEMDM3MTA5RkNCRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl4TkVXamhjaXZyM3VDNTRrWjVHb2t4aVhjcldMNGJ3OGpTOVhEUEdqNTJuLzAv
MzEzNzM3MmUzMTMzMzcyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNjMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxiXQwDQYJKoZIhvcNAQELBQADggEBAKa2LUna
QmfZ/pT1n4w1iqRecqMoJWLxxRsbxf9L4cmyEqEp4mzINF6qjxduMIo/PCpXuH3l
kbCN2EvTTQnXNldF2fOSrjwA6VvteODSnJXUsZM/ceqG2zzjAWsJeD1BFTHT4vyr
rcYJ8qdjYnXm7+DZjvNvArp6bkcdnB9a5sSpMLqCgx5qxouwxePfKmDyoqiYOBMe
NX2eTaJqzK44YUn5QVNkGvs2Zop64ajAsjF6MIQqygxQGkwQ+dtk3za9PXtszS4R
APY27ux66mPDqiuawvDeNS8Q5KIb7NI1p5DAmIRLRZQ66DJzbA0YTAe8c/5WijhE
HVnkdvMCkIIkGnU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:08:44 2025 by rpki-client