This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3134362e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          2FUit/qxUw5Oz26kC15FToXBHSUFL3j2IUN/8a1XmzA=
Subject key identifier:   21:2D:EC:8B:D5:E5:41:3E:AF:E9:F9:78:B1:3E:7E:E8:D7:B8:F2:E4
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       7B083AF6B386475374EF1D0B7CD649F1F40717D9
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 25 Nov 2025 14:46:54 +0000
ROA not before:           Tue 25 Nov 2025 14:41:54 +0000
ROA not after:            Tue 24 Nov 2026 14:46:54 +0000
asID:                     52861
IP address blocks:        177.93.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:08:3a:f6:b3:86:47:53:74:ef:1d:0b:7c:d6:49:f1:f4:07:17:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Nov 25 14:41:54 2025 GMT
            Not After : Nov 24 14:46:54 2026 GMT
        Subject: CN=212DEC8BD5E5413EAFE9F978B13E7EE8D7B8F2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:78:82:5f:ea:b3:9f:da:c7:6b:83:cd:79:ee:
                    01:76:a7:18:da:75:eb:00:bc:87:21:e4:df:4e:5e:
                    43:55:8c:d5:f2:d8:2b:dd:e5:44:ee:c0:71:e4:3b:
                    94:79:a6:a4:94:58:6f:09:57:4c:41:30:fc:e1:29:
                    70:24:dd:78:91:44:61:a2:a0:85:4c:67:13:bd:f8:
                    0c:5b:b8:b2:ff:ab:30:60:b2:d8:b6:6a:5e:d9:1d:
                    4c:b3:2f:88:38:89:05:a8:95:b3:36:07:49:65:23:
                    2b:d2:4d:95:57:db:ed:16:a3:01:f4:05:ad:bb:53:
                    c1:4e:09:4c:6f:63:3b:9d:29:31:d2:e4:96:b7:da:
                    03:47:93:39:86:f6:5f:32:66:ea:ff:e0:39:86:76:
                    f0:aa:24:90:32:55:ae:0d:88:38:01:a0:e7:79:f5:
                    e1:73:d2:81:bc:b2:b7:86:9e:bc:85:2e:1a:e5:1f:
                    77:7c:6e:c6:7a:67:27:dd:33:1a:31:16:26:58:7d:
                    f1:da:7c:fb:31:37:fd:5b:92:8f:dd:b9:5a:0f:16:
                    8d:9f:4f:57:c0:9b:19:aa:5c:c7:2c:5a:8f:e2:bf:
                    e2:67:a4:4c:07:75:f9:4c:a1:24:9a:75:ba:7a:f1:
                    c8:9f:6d:98:e1:b8:45:e7:9a:56:41:df:5a:e2:7c:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2D:EC:8B:D5:E5:41:3E:AF:E9:F9:78:B1:3E:7E:E8:D7:B8:F2:E4
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134362e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:62:2e:70:57:f8:ff:7e:2d:6d:94:d3:aa:8c:04:74:1f:9d:
         18:15:a1:01:67:4d:fc:1b:49:f5:d5:1f:0e:e3:e9:9c:a8:89:
         e6:13:bd:d2:26:70:6e:7c:87:1b:70:63:53:d5:37:0a:74:2f:
         64:2b:1e:6f:fb:9e:5e:4b:53:58:11:fe:05:96:17:de:56:91:
         9c:a6:51:07:4f:48:85:03:30:24:67:36:03:05:e3:9e:1d:ee:
         9f:82:9a:90:89:c8:f5:6c:52:4f:4c:82:59:ac:65:30:f2:87:
         9e:8b:02:40:d4:f8:07:f4:d3:9b:6e:d1:d2:db:dc:4d:34:01:
         4b:39:06:fa:bc:c4:38:81:cc:a2:2f:2d:5e:81:f2:07:6d:a4:
         06:d2:24:0e:c6:79:2f:53:3e:59:61:82:9a:87:8f:14:cb:10:
         77:4f:53:7b:52:ce:65:38:39:fd:c1:99:26:6b:c1:4e:fc:11:
         72:67:65:dc:e8:c5:ee:8a:d8:89:c8:0a:b6:f8:90:d0:3e:d3:
         f6:4f:1e:61:ff:ad:9b:5c:75:2d:0d:cd:4a:22:b3:10:bb:35:
         bb:2e:98:37:55:5d:f1:ef:45:f2:10:8f:e9:c5:42:2d:89:2c:
         97:d1:56:95:f2:70:44:a1:f6:9e:3f:02:ba:3f:51:5e:12:c6:
         98:97:38:75
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUewg69rOGR1N07x0LfNZJ8fQHF9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4RkJFQ0MzRDczNDg3NUNEQzIzQjU1QjlFNTA5MkVB
MjdERjI3MDAeFw0yNTExMjUxNDQxNTRaFw0yNjExMjQxNDQ2NTRaMDMxMTAvBgNV
BAMTKDIxMkRFQzhCRDVFNTQxM0VBRkU5Rjk3OEIxM0U3RUU4RDdCOEYyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1eIJf6rOf2sdrg8157gF2pxja
desAvIch5N9OXkNVjNXy2Cvd5UTuwHHkO5R5pqSUWG8JV0xBMPzhKXAk3XiRRGGi
oIVMZxO9+AxbuLL/qzBgsti2al7ZHUyzL4g4iQWolbM2B0llIyvSTZVX2+0WowH0
Ba27U8FOCUxvYzudKTHS5Ja32gNHkzmG9l8yZur/4DmGdvCqJJAyVa4NiDgBoOd5
9eFz0oG8sreGnryFLhrlH3d8bsZ6ZyfdMxoxFiZYffHafPsxN/1bko/duVoPFo2f
T1fAmxmqXMcsWo/iv+JnpEwHdflMoSSadbp68cifbZjhuEXnmlZB31rifAwLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIS3si9XlQT6v6fl4sT5+6Ne48uQwHwYDVR0j
BBgwFoAUCI++zD1zSHXNwjtVueUJLqJ98nAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjF1VVdpVWtuUkRTV1AzM2ZTSDVuSzdMZndNOU1QMWNnZXZLVjU5eGhB
S1gvMC8wODhGQkVDQzNENzM0ODc1Q0RDMjNCNTVCOUU1MDkyRUEyN0RGMjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4OEZCRUNDM0Q3MzQ4NzVD
REMyM0I1NUI5RTUwOTJFQTI3REYyNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IxdVVXaVVrblJEU1dQMzNmU0g1bks3TGZ3TTlNUDFjZ2V2S1Y1OXhoQUtYLzAv
MzEzNzM3MmUzOTMzMmUzMTM0MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzgzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsV2SMA0GCSqGSIb3DQEBCwUAA4IBAQCxYi5wV/j/
fi1tlNOqjAR0H50YFaEBZ038G0n11R8O4+mcqInmE73SJnBufIcbcGNT1TcKdC9k
Kx5v+55eS1NYEf4FlhfeVpGcplEHT0iFAzAkZzYDBeOeHe6fgpqQicj1bFJPTIJZ
rGUw8oeeiwJA1PgH9NObbtHS29xNNAFLOQb6vMQ4gcyiLy1egfIHbaQG0iQOxnkv
Uz5ZYYKah48UyxB3T1N7Us5lODn9wZkma8FO/BFyZ2Xc6MXuitiJyAq2+JDQPtP2
Tx5h/62bXHUtDc1KIrMQuzW7Lpg3VV3x70XyEI/pxUItiSyX0VaV8nBEofaePwK6
P1FeEsaYlzh1
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:05 2025 by rpki-client