This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134382e302f32322d3232203d3e203532383631.roa
File:                     3137372e39332e3134382e302f32322d3232203d3e203532383631.roa (raw, json)
Hash identifier:          Hh9fDzxpdrX+jmJJ0nHUy+N0RXIyvOBOGI4VGOq5Vsk=
Subject key identifier:   88:C8:0A:0D:98:62:1A:B3:4C:30:7F:76:80:EB:78:38:3C:CD:DA:BE
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       2E1F74BAF016FDEC565A4377DC17E0CA434568C5
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134382e302f32322d3232203d3e203532383631.roa
Signing time:             Tue 25 Nov 2025 14:46:56 +0000
ROA not before:           Tue 25 Nov 2025 14:41:56 +0000
ROA not after:            Tue 24 Nov 2026 14:46:56 +0000
asID:                     52861
IP address blocks:        177.93.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1f:74:ba:f0:16:fd:ec:56:5a:43:77:dc:17:e0:ca:43:45:68:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Nov 25 14:41:56 2025 GMT
            Not After : Nov 24 14:46:56 2026 GMT
        Subject: CN=88C80A0D98621AB34C307F7680EB78383CCDDABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:93:52:0a:5a:f3:f9:87:a7:e0:e2:31:ef:a7:
                    92:f7:3d:78:be:c0:3a:4d:5d:a2:1e:26:47:8f:11:
                    4a:ac:d7:1d:e2:9e:9d:37:de:73:a1:f9:57:ae:ba:
                    dd:0c:cb:40:48:20:0a:24:ae:d8:7e:95:f4:9e:4a:
                    40:fa:a9:f6:36:c7:62:05:f0:47:0e:9d:73:3c:f9:
                    a9:8e:5b:1e:ee:f0:b9:89:1e:9f:9f:e3:cc:6a:4e:
                    75:d5:82:64:e4:80:1c:e1:29:f4:f1:92:dd:ef:3e:
                    f3:0f:19:d6:f3:de:ea:ea:93:79:f2:1a:cb:59:cc:
                    be:5f:c0:ca:56:03:0b:39:d9:12:0a:c2:a4:c7:c9:
                    d6:ce:8a:c5:a7:69:33:8c:55:33:5d:21:d4:f8:ee:
                    79:79:e5:2b:ad:b1:98:d8:7d:82:92:66:6a:7d:0c:
                    a8:e0:6e:c3:97:87:2c:cf:44:5c:a4:08:89:c9:1f:
                    a5:2c:55:aa:2f:fd:e7:f6:da:b1:98:3d:36:67:9c:
                    ce:8d:68:2f:8e:d3:4c:9c:ca:65:93:59:88:23:39:
                    e5:be:6c:a0:26:b4:ec:28:8c:1c:fe:00:84:85:7c:
                    74:40:2f:e3:c7:84:f5:03:b8:34:30:36:b9:01:10:
                    f5:a2:5b:f3:31:14:f2:b0:7d:dc:32:c8:ca:f4:3a:
                    02:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C8:0A:0D:98:62:1A:B3:4C:30:7F:76:80:EB:78:38:3C:CD:DA:BE
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134382e302f32322d3232203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:d0:6b:67:9b:34:18:a5:42:62:5c:09:fc:74:88:15:e3:ac:
         df:93:f3:2a:be:28:ad:50:93:dd:f2:33:e8:19:75:99:ca:8c:
         d1:40:4c:e5:2c:d4:93:07:44:44:65:b5:b3:24:7b:44:e3:68:
         40:9b:5e:37:47:6d:f2:4f:3f:68:52:a6:bf:ed:23:7c:f0:22:
         e8:73:35:97:c7:31:78:c8:76:ef:8f:ba:ed:de:cc:95:64:03:
         3c:08:8a:f1:28:98:9a:23:1d:8d:d2:5b:70:2f:79:09:f9:d6:
         da:f8:83:e5:ec:9c:25:31:27:8c:00:be:4a:d7:e4:18:93:6b:
         5f:06:a4:ce:be:87:1e:52:72:2b:82:8e:b3:0b:32:63:71:f8:
         03:2c:93:96:3d:1a:fb:36:7f:ca:35:3b:c0:6c:67:43:3e:2f:
         a5:46:fd:61:6d:22:66:9e:d2:ba:76:f9:c9:ad:ae:6b:58:b6:
         12:d9:aa:d2:22:f6:aa:89:5e:11:16:22:64:61:16:db:2e:ce:
         5f:ba:2b:95:6d:d7:47:fc:44:bd:04:62:bf:8d:9b:05:79:96:
         7b:c2:93:57:f2:29:1e:11:ba:96:e9:89:7d:20:60:88:25:98:
         cd:c6:6f:61:e1:23:3e:0c:18:75:52:38:74:f3:ca:31:41:ac:
         05:30:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:09 2025 by rpki-client