This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3137372e35332e34382e302f32312d3234203d3e20323632343538.roa
File:                     3137372e35332e34382e302f32312d3234203d3e20323632343538.roa (raw, json)
Hash identifier:          YVE7NH+mdIYF4qQ3TLI6q0p7hQ4d2SL2VdI0yLkk6f0=
Subject key identifier:   A6:BF:62:58:FA:8C:3B:71:81:4C:92:70:1D:45:B5:8F:4A:40:E5:6C
Certificate issuer:       /CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
Certificate serial:       0FE602B931EFF2E192A00D059534FB8690F606C5
Authority key identifier: FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3137372e35332e34382e302f32312d3234203d3e20323632343538.roa
Signing time:             Mon 22 Dec 2025 18:12:05 +0000
ROA not before:           Mon 22 Dec 2025 18:07:05 +0000
ROA not after:            Mon 21 Dec 2026 18:12:05 +0000
asID:                     262458
IP address blocks:        177.53.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl
                          rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e6:02:b9:31:ef:f2:e1:92:a0:0d:05:95:34:fb:86:90:f6:06:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
        Validity
            Not Before: Dec 22 18:07:05 2025 GMT
            Not After : Dec 21 18:12:05 2026 GMT
        Subject: CN=A6BF6258FA8C3B71814C92701D45B58F4A40E56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:40:a0:0e:fc:f8:ea:45:03:ea:63:21:5c:0e:
                    1f:d0:1c:1a:40:e4:31:57:33:b4:51:16:35:83:3c:
                    50:69:71:fb:f1:c1:b9:ed:6d:a6:1f:d9:12:84:ce:
                    9f:de:d4:2d:9a:9d:75:85:86:43:73:22:b6:ad:d4:
                    6c:4f:1e:18:f4:ec:1a:aa:48:21:94:21:37:c8:83:
                    ec:fe:38:ea:97:20:93:13:66:d4:a8:b6:b0:6a:4c:
                    09:5c:27:12:23:2e:79:91:ab:2a:ba:5f:35:4b:af:
                    43:ad:0e:4e:0f:7a:10:40:8b:63:3c:c3:bb:e5:27:
                    f0:bc:c3:84:df:0a:3f:d4:dd:f5:73:b5:dc:63:eb:
                    19:db:89:76:4f:cd:bf:93:ea:99:1c:69:be:03:7d:
                    4d:d5:23:95:8d:64:f0:ed:24:03:ea:3f:27:96:6d:
                    1f:0d:50:61:be:f4:d0:e8:45:2a:ed:86:80:06:1c:
                    72:2d:42:4e:8d:ad:2d:e9:d0:cb:7f:8f:72:0c:ff:
                    46:e6:93:ab:5b:8f:61:6d:35:93:55:ce:88:40:29:
                    ff:31:07:a0:77:51:77:18:49:b8:f6:db:58:86:63:
                    73:4c:8f:db:5d:36:0d:4f:40:9f:24:15:c8:7e:dc:
                    c7:cc:4c:4c:22:18:9e:13:ba:fd:36:e7:c1:8a:e7:
                    0c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BF:62:58:FA:8C:3B:71:81:4C:92:70:1D:45:B5:8F:4A:40:E5:6C
            X509v3 Authority Key Identifier:
                keyid:FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3137372e35332e34382e302f32312d3234203d3e20323632343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:5b:a2:07:2f:e0:66:56:63:16:78:85:be:20:da:de:03:
         32:53:cb:ea:33:d4:5f:bd:82:30:88:75:c2:f9:60:3f:c1:b9:
         6d:a1:04:4d:42:08:de:1a:bd:2a:a8:58:42:ea:8a:e5:1b:7c:
         33:88:18:5b:70:68:3a:96:a1:ba:ce:ce:2e:0c:33:8a:b7:12:
         a0:47:53:c9:dc:4b:c8:11:72:8c:fc:ab:b2:90:e7:6d:1b:18:
         af:68:1b:7c:b3:61:82:bb:91:62:cf:79:20:29:8a:2e:0e:ee:
         44:d7:07:75:08:08:c2:b5:89:bf:ed:6a:a6:bd:7d:ed:63:9e:
         8b:85:01:1a:8a:57:7f:27:a0:db:bb:59:29:1c:14:e5:6d:b7:
         ae:b1:4d:6d:81:9c:14:ca:32:c2:71:85:85:0c:bf:d4:24:07:
         74:1f:45:cf:15:27:06:f8:36:bf:7e:28:58:67:7e:47:cd:57:
         fc:f7:de:3c:40:48:a5:4f:05:5e:c1:5b:23:b6:9c:4e:a4:74:
         18:0d:b8:92:27:8e:5d:16:fd:74:78:bf:df:94:22:22:47:92:
         65:12:9c:36:46:4a:97:db:ac:55:ae:77:d1:9e:a3:00:d5:f1:
         fd:83:18:65:f9:01:ba:1a:0b:c9:5d:f5:91:63:5c:c2:c5:70:
         1b:f9:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:43 2026 by rpki-client