This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32332d3233203d3e203631373932.roa
File:                     3137302e3234372e3233362e302f32332d3233203d3e203631373932.roa (raw, json)
Hash identifier:          rzDb/dj8VwrS7wTBYmSrRR/NxtItIaOsX/v/uvnQb5E=
Subject key identifier:   EB:10:28:BA:63:D6:77:24:21:02:8B:C4:DB:1D:9E:AE:33:04:DB:B1
Certificate issuer:       /CN=A7777023904D1D5DE6652ABF10593188DA931795
Certificate serial:       40FD128246317B88B6F0EAE87D431DDB628664CC
Authority key identifier: A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32332d3233203d3e203631373932.roa
Signing time:             Thu 11 Dec 2025 20:41:47 +0000
ROA not before:           Thu 11 Dec 2025 20:36:47 +0000
ROA not after:            Thu 10 Dec 2026 20:41:47 +0000
asID:                     61792
IP address blocks:        170.247.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 18:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fd:12:82:46:31:7b:88:b6:f0:ea:e8:7d:43:1d:db:62:86:64:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7777023904D1D5DE6652ABF10593188DA931795
        Validity
            Not Before: Dec 11 20:36:47 2025 GMT
            Not After : Dec 10 20:41:47 2026 GMT
        Subject: CN=EB1028BA63D6772421028BC4DB1D9EAE3304DBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:52:d9:56:c2:6f:b4:5d:c0:a4:79:f7:7a:
                    7d:da:f0:e5:8a:f4:f5:22:a7:f7:ab:f1:91:15:1b:
                    61:45:8b:75:f5:24:12:63:1d:9a:04:f8:0f:cc:96:
                    95:8b:5f:3e:38:f8:75:06:b7:a6:0a:57:a8:e8:f1:
                    66:8e:c0:12:89:e9:16:51:f9:bc:ca:52:7d:42:d5:
                    02:71:88:bf:01:97:aa:d5:58:d9:77:21:df:d3:0c:
                    a7:9b:28:7f:4b:44:ae:74:dd:f0:48:83:fb:a1:87:
                    07:60:fe:79:53:dc:fc:b9:f6:58:ab:6e:eb:67:e6:
                    07:e9:e8:a9:e3:a6:9c:04:c7:7f:cb:e4:a4:cc:c9:
                    08:ae:80:4c:90:46:42:28:0c:35:4b:c2:bf:25:56:
                    b0:26:42:f1:a0:f4:2c:0b:7c:e4:a5:bd:6b:23:7e:
                    94:92:8a:12:2c:e8:2c:fe:24:3b:3b:a1:e2:3c:6a:
                    b8:20:97:f3:ea:49:39:76:6a:e9:90:e9:14:55:7d:
                    11:19:49:3c:6c:90:c7:d5:77:1d:f2:bc:a8:47:6e:
                    8f:c9:09:ef:64:e6:d1:6b:a6:7c:29:b6:c1:5b:a8:
                    ee:2b:5e:15:cc:90:de:64:b5:dc:26:83:86:d4:d5:
                    08:4d:71:4a:93:08:f9:27:83:91:01:e2:fd:a3:f7:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:10:28:BA:63:D6:77:24:21:02:8B:C4:DB:1D:9E:AE:33:04:DB:B1
            X509v3 Authority Key Identifier:
                keyid:A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32332d3233203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:03:61:fb:66:01:65:7a:04:79:35:e7:13:85:17:c5:9d:a8:
         53:73:7e:d6:fd:66:ba:44:7c:e6:9b:2d:c2:00:27:ca:e4:38:
         15:17:fb:ed:e9:5a:b1:23:90:7e:0a:74:7b:3b:70:5f:ba:1c:
         8a:95:ad:6d:90:f7:66:bb:37:9f:0e:27:a7:88:5f:6b:9a:95:
         f6:3e:7d:dd:7f:11:15:ef:e1:14:33:2c:f6:c5:3b:e8:c1:9f:
         f5:17:c6:fc:50:ef:1a:0d:36:00:90:02:c5:75:ed:76:c3:a3:
         bb:bf:c7:82:7e:e3:2d:8a:64:61:32:dc:6a:13:f5:df:32:2a:
         8d:1a:37:95:5e:67:66:86:c9:eb:8b:dc:52:83:1a:17:eb:b1:
         36:ea:81:16:76:3f:58:72:41:7f:77:83:82:cf:05:14:82:71:
         5c:0e:46:4d:ee:e3:19:15:1b:47:f0:83:8a:43:bd:2d:8a:fa:
         10:04:e0:74:16:20:d7:3a:69:7d:7b:d9:60:26:0a:05:bd:dc:
         bd:82:b4:72:f9:eb:4d:cd:43:3a:f1:26:04:c4:71:ae:69:10:
         32:d7:c0:ed:f0:0e:ee:13:4d:60:1d:45:19:13:62:22:47:7e:
         3c:78:fb:ff:54:40:96:e0:b8:1d:ee:bf:25:c1:02:65:3f:7d:
         78:d0:25:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQP0SgkYxe4i28OrofUMd22KGZMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc3NzcwMjM5MDREMUQ1REU2NjUyQUJGMTA1OTMxODhE
QTkzMTc5NTAeFw0yNTEyMTEyMDM2NDdaFw0yNjEyMTAyMDQxNDdaMDMxMTAvBgNV
BAMTKEVCMTAyOEJBNjNENjc3MjQyMTAyOEJDNERCMUQ5RUFFMzMwNERCQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKClLZVsJvtF3ApHn3en3a8OWK
9PUip/er8ZEVG2FFi3X1JBJjHZoE+A/MlpWLXz44+HUGt6YKV6jo8WaOwBKJ6RZR
+bzKUn1C1QJxiL8Bl6rVWNl3Id/TDKebKH9LRK503fBIg/uhhwdg/nlT3Py59lir
butn5gfp6KnjppwEx3/L5KTMyQiugEyQRkIoDDVLwr8lVrAmQvGg9CwLfOSlvWsj
fpSSihIs6Cz+JDs7oeI8arggl/PqSTl2aumQ6RRVfREZSTxskMfVdx3yvKhHbo/J
Ce9k5tFrpnwptsFbqO4rXhXMkN5ktdwmg4bU1QhNcUqTCPkng5EB4v2j90FTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6xAoumPWdyQhAovE2x2erjME27EwHwYDVR0j
BBgwFoAUp3dwI5BNHV3mZSq/EFkxiNqTF5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3pGcTRVRWZiY3dMa3RwZVpoZnlvU1BxaW1HaHhMUU1WTjQ4eGFiYTlS
NU4vMC9BNzc3NzAyMzkwNEQxRDVERTY2NTJBQkYxMDU5MzE4OERBOTMxNzk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3Nzc3MDIzOTA0RDFENURF
NjY1MkFCRjEwNTkzMTg4REE5MzE3OTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N6RnE0VUVmYmN3TGt0cGVaaGZ5b1NQcWltR2h4TFFNVk40OHhhYmE5UjVOLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNzM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq9+wwDQYJKoZIhvcNAQELBQADggEBABADYftm
AWV6BHk15xOFF8WdqFNzftb9ZrpEfOabLcIAJ8rkOBUX++3pWrEjkH4KdHs7cF+6
HIqVrW2Q92a7N58OJ6eIX2ualfY+fd1/ERXv4RQzLPbFO+jBn/UXxvxQ7xoNNgCQ
AsV17XbDo7u/x4J+4y2KZGEy3GoT9d8yKo0aN5VeZ2aGyeuL3FKDGhfrsTbqgRZ2
P1hyQX93g4LPBRSCcVwORk3u4xkVG0fwg4pDvS2K+hAE4HQWINc6aX172WAmCgW9
3L2CtHL5603NQzrxJgTEca5pEDLXwO3wDu4TTWAdRRkTYiJHfjx4+/9UQJbguB3u
vyXBAmU/fXjQJZA=
-----END CERTIFICATE-----
Generated at Thu Dec 18 19:53:23 2025 by rpki-client