This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3134342e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          NXa8ro4CnzoKr6T6pQxqCU1FuprKRB27jrlvIvqWFms=
Subject key identifier:   0F:CF:17:7E:6E:63:AB:BF:68:74:B6:77:1C:96:C5:39:0A:EE:8C:EA
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       14CC44E65122144B8C6D49CF7AC9E0430321E954
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 25 Nov 2025 14:46:55 +0000
ROA not before:           Tue 25 Nov 2025 14:41:55 +0000
ROA not after:            Tue 24 Nov 2026 14:46:55 +0000
asID:                     52861
IP address blocks:        177.93.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 21:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cc:44:e6:51:22:14:4b:8c:6d:49:cf:7a:c9:e0:43:03:21:e9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Nov 25 14:41:55 2025 GMT
            Not After : Nov 24 14:46:55 2026 GMT
        Subject: CN=0FCF177E6E63ABBF6874B6771C96C5390AEE8CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e6:f5:9c:22:18:54:2f:70:dc:53:08:cd:aa:
                    59:94:4b:aa:50:d8:88:f6:37:11:e4:31:ed:c5:05:
                    3e:5a:3f:71:4f:5c:b3:b8:36:31:3f:bd:dc:b0:be:
                    6a:2f:3d:ac:e1:5c:44:6d:74:0f:ce:a4:26:98:51:
                    d2:05:35:d4:de:34:8a:d7:fd:71:01:01:28:d6:29:
                    4e:df:53:47:8a:9a:66:f8:25:ea:2d:c7:8a:d6:af:
                    83:b9:c9:7a:b7:4a:fc:1f:75:57:a7:87:ce:9a:63:
                    bc:38:d7:87:f9:88:9b:36:41:dc:5c:da:f2:38:60:
                    3f:c4:55:4f:1c:67:68:77:c7:2d:2a:2e:bc:56:11:
                    73:56:8a:f8:29:65:09:fe:7a:df:e1:d1:8f:41:87:
                    58:56:53:96:90:c5:c8:0f:b9:20:75:52:6e:e7:f0:
                    41:9d:c4:f7:7e:15:5a:40:fe:ed:d9:1d:94:8b:e1:
                    63:a5:d0:b3:b9:a0:94:ad:76:02:d5:cf:58:2f:d1:
                    6b:2b:14:c1:49:d3:6e:d5:1e:96:7d:7b:81:b5:5a:
                    24:36:6f:3f:dd:f4:d3:c3:84:ae:c0:81:79:58:db:
                    dc:bc:26:81:fd:bc:bc:cd:6d:8f:13:ab:79:f3:85:
                    32:98:0f:d2:a5:2a:d2:6b:62:c2:3c:c5:9a:49:40:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CF:17:7E:6E:63:AB:BF:68:74:B6:77:1C:96:C5:39:0A:EE:8C:EA
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:84:98:a9:1a:f7:e8:34:75:89:d5:b1:e1:d6:6d:29:aa:0f:
         a2:29:71:34:0f:fe:49:14:45:17:3d:ab:af:fc:cf:90:49:f6:
         65:10:46:03:fd:c8:72:d5:71:36:95:c9:d4:d3:e2:d9:0b:a6:
         7f:08:3b:83:93:7e:3d:99:f7:fb:8d:0c:3e:17:12:a1:85:67:
         be:1f:61:e8:42:98:f7:5c:32:4e:0b:7f:73:c1:14:2c:03:19:
         5e:42:cb:66:0a:b6:d2:79:a2:c7:92:d7:12:d9:61:bf:99:5f:
         e2:02:fe:90:d4:c6:8c:1b:ab:4a:76:f2:28:29:fc:68:ca:c7:
         0f:e5:fc:c9:05:97:82:26:53:d6:2b:0f:05:96:a1:14:94:ff:
         c7:6d:fb:f7:61:e5:c0:d5:2c:50:82:ab:cf:f8:1d:f2:ad:70:
         61:a9:c1:9b:fc:ab:4a:93:bc:a0:4b:d2:ea:9b:47:fd:41:d7:
         3b:e2:12:bc:ff:51:38:f3:c8:d5:3e:2d:1c:5e:0d:13:6a:0c:
         cc:66:78:2b:8c:99:f4:6c:5b:ee:9d:67:1c:62:c7:98:33:46:
         aa:b6:2c:3f:46:ba:71:e5:91:ab:75:d7:d1:f3:e5:81:95:4e:
         78:dd:28:28:8b:a5:1f:d7:3c:18:a7:9b:a6:31:b7:0d:3b:2c:
         1b:d3:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:58:06 2025 by rpki-client