This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3135302e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          c4nGnUO4/KAHul4HuOvbm9gVFkAlrnDEjkOEwyk4EgE=
Subject key identifier:   A7:9C:71:5D:DF:C8:F4:9F:D6:D8:2E:6E:9B:8E:78:5F:44:78:9F:30
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       46B91FB4F5EA7224D71640E22A6BB6CABB2E39C1
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 25 Nov 2025 14:46:55 +0000
ROA not before:           Tue 25 Nov 2025 14:41:55 +0000
ROA not after:            Tue 24 Nov 2026 14:46:55 +0000
asID:                     52861
IP address blocks:        177.93.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b9:1f:b4:f5:ea:72:24:d7:16:40:e2:2a:6b:b6:ca:bb:2e:39:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Nov 25 14:41:55 2025 GMT
            Not After : Nov 24 14:46:55 2026 GMT
        Subject: CN=A79C715DDFC8F49FD6D82E6E9B8E785F44789F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:73:0d:da:9c:b7:81:ae:9a:6f:40:bb:fa:
                    f4:66:b8:5d:b3:8b:c9:8c:af:37:d9:6f:df:3a:ec:
                    6c:dd:89:bd:21:d6:aa:95:a3:d9:09:46:87:5e:17:
                    2b:a9:4e:59:d8:a3:03:8c:7f:4a:bb:5c:7f:eb:03:
                    f8:19:44:53:07:73:94:d6:f8:44:d6:82:23:64:c2:
                    87:9d:fc:29:4c:3c:59:8e:ef:c2:8f:68:65:05:22:
                    13:ed:5a:97:19:ce:43:eb:31:43:ff:3e:e3:96:f1:
                    9b:c4:12:e4:7a:0b:17:98:15:00:fa:a5:01:e6:28:
                    a4:c0:72:81:a8:f7:3c:60:54:ce:aa:15:f6:32:93:
                    4e:c7:87:28:3f:3e:ca:ec:65:d1:87:f7:03:a7:dc:
                    90:74:dd:8e:1f:de:62:e2:08:4b:51:8a:c8:44:aa:
                    cf:60:ca:d4:90:1d:5c:77:d3:ca:77:af:a8:94:ee:
                    31:de:b1:69:d4:e0:12:9c:65:99:49:92:67:e7:52:
                    67:f8:5c:cd:d9:c7:71:c9:17:8f:53:08:8c:8a:7a:
                    00:d0:da:45:0c:e9:11:d7:f0:74:1d:97:08:4a:f4:
                    42:d0:8d:4a:45:44:16:39:c4:7f:af:97:34:92:35:
                    ea:c9:e2:65:17:c1:10:3e:81:b0:a4:97:6c:c3:55:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9C:71:5D:DF:C8:F4:9F:D6:D8:2E:6E:9B:8E:78:5F:44:78:9F:30
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:c2:e4:6b:f3:1a:8b:9b:5b:4c:15:58:1b:21:d6:67:ca:25:
         2b:d0:e6:84:62:eb:0b:d5:ac:20:dc:62:5d:8d:ed:13:c1:d6:
         df:8c:ff:a1:72:31:f8:ab:94:3c:7e:25:85:82:93:48:33:38:
         ef:58:5b:49:b6:c1:00:a2:9b:82:31:50:40:b4:1c:00:b0:5e:
         d1:60:ba:cf:74:9a:b2:d1:21:4a:4a:40:89:3d:5b:d8:ad:83:
         31:9d:e1:2b:d2:b2:31:91:70:91:13:a5:82:33:f7:40:19:98:
         9f:34:07:82:1b:d6:12:64:19:35:64:bd:77:e9:bc:e3:5e:c3:
         38:85:25:be:cd:c3:25:5e:7b:26:bf:23:dd:db:4f:db:2c:1f:
         b1:dc:a4:74:cc:5c:4b:1a:06:26:86:15:68:a2:26:47:e7:d5:
         f6:c9:93:56:b5:27:44:86:54:2e:7d:df:5d:34:4c:db:6a:68:
         ca:fb:bd:50:9a:88:4a:db:f1:8c:40:dd:c4:49:5a:dd:98:2b:
         cf:f2:28:d5:ff:64:47:78:71:e7:3c:bb:a8:3c:02:e9:71:0b:
         24:da:b0:5a:b9:0a:a5:5c:e0:ad:d8:c8:d6:56:6f:75:c7:57:
         be:68:46:0f:93:bf:e2:ad:cd:4b:37:59:55:a3:fb:ca:b7:b0:
         a8:c6:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:41 2025 by rpki-client