This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa
File:                     3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa (raw, json)
Hash identifier:          G+z8JfK3j6xKGlg1KiMMLj9puCNa4De53EAC5Ng67Us=
Subject key identifier:   5C:FF:14:CA:3C:B2:C6:C6:7F:8C:EA:B3:14:91:EA:5D:CB:E8:01:02
Certificate issuer:       /CN=A7777023904D1D5DE6652ABF10593188DA931795
Certificate serial:       3986C76C2E4724D3BACBE7D572D1D5C23BA9497F
Authority key identifier: A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa
Signing time:             Thu 11 Dec 2025 20:41:46 +0000
ROA not before:           Thu 11 Dec 2025 20:36:46 +0000
ROA not after:            Thu 10 Dec 2026 20:41:46 +0000
asID:                     61792
IP address blocks:        170.247.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 18:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:86:c7:6c:2e:47:24:d3:ba:cb:e7:d5:72:d1:d5:c2:3b:a9:49:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7777023904D1D5DE6652ABF10593188DA931795
        Validity
            Not Before: Dec 11 20:36:46 2025 GMT
            Not After : Dec 10 20:41:46 2026 GMT
        Subject: CN=5CFF14CA3CB2C6C67F8CEAB31491EA5DCBE80102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:58:51:52:5f:0f:f2:6b:88:73:da:16:33:
                    2f:6b:e6:83:53:6f:fd:34:a3:4b:1f:d3:03:29:d0:
                    fd:a5:5a:ab:94:72:9a:e7:d6:67:14:68:ff:0d:f3:
                    f0:2a:94:87:72:ed:cf:78:a8:0e:7d:4e:a2:4e:ae:
                    78:bd:5e:82:e5:68:e2:4f:00:33:2d:2d:6d:e6:0c:
                    01:75:c7:1d:a6:01:f5:d7:97:2d:9d:5f:1b:c8:89:
                    8e:fd:2b:9a:5f:a8:b7:5a:94:43:b6:18:ff:e2:e0:
                    ab:44:74:ac:a1:66:0c:2e:22:4a:3e:a1:46:41:14:
                    70:03:c2:42:08:c1:3c:2b:9b:48:95:53:51:63:3e:
                    c2:78:1c:37:5a:01:a5:6f:cb:b3:b1:38:29:47:3b:
                    56:09:e6:a6:75:f4:21:51:28:2c:32:0b:f2:22:b4:
                    bd:14:52:15:e4:44:5c:9d:f6:43:8d:cd:5a:ba:10:
                    22:40:57:1c:69:2c:3a:44:b8:eb:47:a7:a1:02:ab:
                    67:65:a0:bc:e2:12:d6:15:da:9d:6d:56:d0:8a:3a:
                    49:e0:46:6f:8c:eb:f3:2e:da:bf:2c:e6:26:ca:4e:
                    b7:0f:4a:73:6e:22:e3:16:91:d2:70:d1:16:b9:01:
                    0e:a9:63:f0:ac:dc:c8:1d:20:fc:2b:19:17:f3:6a:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FF:14:CA:3C:B2:C6:C6:7F:8C:EA:B3:14:91:EA:5D:CB:E8:01:02
            X509v3 Authority Key Identifier:
                keyid:A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:17:6a:f0:e6:32:6b:89:9b:f3:19:5c:3d:56:e4:23:27:66:
         69:7b:84:80:98:05:4d:08:18:e3:27:c6:3b:66:1e:b3:83:ac:
         b5:65:13:74:b7:b7:04:82:30:58:47:e1:46:e1:65:29:28:4c:
         50:bd:55:ba:fd:ff:04:a2:1b:49:db:74:a2:0c:db:39:38:42:
         3d:1d:52:6e:e8:cb:4a:39:49:34:ee:f7:cc:e5:a7:19:78:fd:
         97:c0:e9:60:2e:50:65:0b:7e:9b:9a:71:b2:34:f7:54:4b:7a:
         8f:ee:03:e9:67:b2:4c:7f:48:b3:62:ae:f0:7d:38:29:00:33:
         d7:a8:c4:96:ca:fe:10:be:4f:a9:a9:f6:92:b3:eb:e2:e0:6e:
         96:9d:5c:5d:e5:f7:46:f6:3a:e7:01:07:59:39:d2:bb:d5:dc:
         7c:7a:e5:c1:43:72:67:aa:a3:22:60:af:6b:13:f1:f1:98:25:
         de:d7:db:77:44:f0:2d:83:d7:46:49:68:b5:56:c2:f6:10:42:
         01:ce:d0:49:4b:21:ec:51:1b:34:6c:43:d7:dc:20:4a:4e:73:
         31:53:b1:d1:f8:ad:3e:ec:0c:76:10:92:db:c0:d9:ad:02:9e:
         34:9a:49:29:60:db:94:82:66:2e:7e:d4:31:41:1e:b1:79:66:
         ee:a6:10:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOYbHbC5HJNO6y+fVctHVwjupSX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc3NzcwMjM5MDREMUQ1REU2NjUyQUJGMTA1OTMxODhE
QTkzMTc5NTAeFw0yNTEyMTEyMDM2NDZaFw0yNjEyMTAyMDQxNDZaMDMxMTAvBgNV
BAMTKDVDRkYxNENBM0NCMkM2QzY3RjhDRUFCMzE0OTFFQTVEQ0JFODAxMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbiFhRUl8P8muIc9oWMy9r5oNT
b/00o0sf0wMp0P2lWquUcprn1mcUaP8N8/AqlIdy7c94qA59TqJOrni9XoLlaOJP
ADMtLW3mDAF1xx2mAfXXly2dXxvIiY79K5pfqLdalEO2GP/i4KtEdKyhZgwuIko+
oUZBFHADwkIIwTwrm0iVU1FjPsJ4HDdaAaVvy7OxOClHO1YJ5qZ19CFRKCwyC/Ii
tL0UUhXkRFyd9kONzVq6ECJAVxxpLDpEuOtHp6ECq2dloLziEtYV2p1tVtCKOkng
Rm+M6/Mu2r8s5ibKTrcPSnNuIuMWkdJw0Ra5AQ6pY/Cs3MgdIPwrGRfzaq0LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXP8UyjyyxsZ/jOqzFJHqXcvoAQIwHwYDVR0j
BBgwFoAUp3dwI5BNHV3mZSq/EFkxiNqTF5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3pGcTRVRWZiY3dMa3RwZVpoZnlvU1BxaW1HaHhMUU1WTjQ4eGFiYTlS
NU4vMC9BNzc3NzAyMzkwNEQxRDVERTY2NTJBQkYxMDU5MzE4OERBOTMxNzk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3Nzc3MDIzOTA0RDFENURF
NjY1MkFCRjEwNTkzMTg4REE5MzE3OTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N6RnE0VUVmYmN3TGt0cGVaaGZ5b1NQcWltR2h4TFFNVk40OHhhYmE5UjVOLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzNzM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9+wwDQYJKoZIhvcNAQELBQADggEBAIQXavDm
MmuJm/MZXD1W5CMnZml7hICYBU0IGOMnxjtmHrODrLVlE3S3twSCMFhH4UbhZSko
TFC9Vbr9/wSiG0nbdKIM2zk4Qj0dUm7oy0o5STTu98zlpxl4/ZfA6WAuUGULfpua
cbI091RLeo/uA+lnskx/SLNirvB9OCkAM9eoxJbK/hC+T6mp9pKz6+LgbpadXF3l
90b2OucBB1k50rvV3Hx65cFDcmeqoyJgr2sT8fGYJd7X23dE8C2D10ZJaLVWwvYQ
QgHO0ElLIexRGzRsQ9fcIEpOczFTsdH4rT7sDHYQktvA2a0CnjSaSSlg25SCZi5+
1DFBHrF5Zu6mEEQ=
-----END CERTIFICATE-----
Generated at Thu Dec 18 19:52:04 2025 by rpki-client