This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233392e302f32342d3234203d3e203631373932.roa
File:                     3137302e3234372e3233392e302f32342d3234203d3e203631373932.roa (raw, json)
Hash identifier:          /XLR3yDJndoWA90HBB/5ydUKFJ6BtX6XdYnl6Me781Q=
Subject key identifier:   19:37:5D:AC:63:89:33:9F:EA:71:41:AF:91:98:8C:1C:E2:2D:83:75
Certificate issuer:       /CN=A7777023904D1D5DE6652ABF10593188DA931795
Certificate serial:       2BA37751BD2BB47BDF27427F9119DD35EB7D41DC
Authority key identifier: A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233392e302f32342d3234203d3e203631373932.roa
Signing time:             Thu 11 Dec 2025 20:41:51 +0000
ROA not before:           Thu 11 Dec 2025 20:36:51 +0000
ROA not after:            Thu 10 Dec 2026 20:41:51 +0000
asID:                     61792
IP address blocks:        170.247.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 18:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a3:77:51:bd:2b:b4:7b:df:27:42:7f:91:19:dd:35:eb:7d:41:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7777023904D1D5DE6652ABF10593188DA931795
        Validity
            Not Before: Dec 11 20:36:51 2025 GMT
            Not After : Dec 10 20:41:51 2026 GMT
        Subject: CN=19375DAC6389339FEA7141AF91988C1CE22D8375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:77:5d:37:fc:5b:24:af:e3:eb:3f:8b:e9:
                    90:f1:98:ec:1d:9a:a1:71:2e:f9:a1:84:2d:c7:a9:
                    54:94:fd:16:60:3f:01:0b:1f:26:5a:16:6f:34:93:
                    3c:20:3e:66:ab:04:1b:83:fa:4a:e0:77:62:1d:f8:
                    a6:9f:6b:9f:ce:1f:3b:be:eb:97:86:c2:01:97:c9:
                    5e:75:df:31:17:d8:43:6e:d9:2a:85:f0:88:8f:7b:
                    fd:59:d6:ff:0f:1e:44:b8:f1:d5:4e:ff:02:76:ad:
                    18:18:ec:7c:7e:42:94:63:c0:e7:b7:4d:40:72:80:
                    50:99:63:d8:2e:1f:87:2a:e2:22:a7:20:dc:9e:16:
                    b4:73:09:6e:c3:17:7b:0e:76:24:3e:67:7e:94:47:
                    65:23:4c:f1:fe:2f:9d:f4:e5:c7:ec:ea:42:27:32:
                    95:27:d6:de:4e:51:0e:8a:e6:2b:d2:7f:d4:a2:ce:
                    89:fc:13:b1:fa:2e:aa:39:08:90:25:4f:8b:2c:b9:
                    d2:01:14:1b:fa:d4:56:16:e8:0a:a7:e9:9e:19:f2:
                    e9:63:ce:41:0f:bf:73:98:07:a3:01:ea:65:1c:26:
                    e3:e9:6f:85:43:20:af:81:89:0c:61:5a:c7:4a:51:
                    ef:7c:86:48:ac:bb:67:4e:35:66:1a:4f:9d:5b:fd:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:37:5D:AC:63:89:33:9F:EA:71:41:AF:91:98:8C:1C:E2:2D:83:75
            X509v3 Authority Key Identifier:
                keyid:A7:77:70:23:90:4D:1D:5D:E6:65:2A:BF:10:59:31:88:DA:93:17:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/A7777023904D1D5DE6652ABF10593188DA931795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7777023904D1D5DE6652ABF10593188DA931795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233392e302f32342d3234203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:fb:17:29:17:c4:5b:93:d2:1c:bb:85:25:23:5f:91:dd:18:
         ee:76:63:bc:9e:12:b2:f3:68:42:12:05:3e:9f:ad:6a:22:81:
         48:95:26:59:43:27:7d:70:8c:f5:90:b8:d4:96:71:f0:02:f4:
         24:62:74:29:c0:cc:ce:a5:ad:dc:91:42:ac:a9:ce:24:b9:5a:
         01:9e:7d:52:77:b3:73:9c:35:61:88:19:df:0c:d4:01:c5:02:
         9b:b1:03:94:d1:bf:41:1e:bf:ce:10:69:f7:d6:2c:23:14:66:
         10:7d:dc:8f:f5:dd:5d:d4:71:5c:71:23:8c:98:f6:d7:62:cb:
         6b:e8:ee:a1:76:28:8a:ae:5c:e6:c9:c5:65:eb:18:90:cc:03:
         0a:98:44:6e:23:c1:5b:b9:57:04:89:65:40:77:fb:1f:19:1c:
         1b:d0:4c:42:0b:f5:be:99:7d:1e:9b:90:17:40:25:46:79:d2:
         43:fd:9a:44:00:2d:7e:d3:34:cd:6d:b4:9c:48:c4:b1:21:f3:
         cd:77:15:8a:bc:d2:5a:62:f7:9a:f6:5b:87:ce:51:35:0e:2e:
         50:9c:eb:d3:a0:e9:0d:94:1e:1e:34:dd:93:cd:18:60:04:43:
         46:05:ed:eb:cb:da:3d:32:a7:72:a5:9d:48:ef:ff:5e:6e:c2:
         43:7e:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:53:14 2025 by rpki-client