This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32332d3233203d3e203532373732.roa (raw, json)
Hash identifier:          ALX6KMg3Ze8VHCHIAcAg0n13xYhjclLLScn/XjezNbU=
Subject key identifier:   86:BC:EE:8A:33:48:9A:33:24:57:7C:CE:05:66:50:35:24:3F:AC:AD
Certificate issuer:       /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial:       470D0AC9840399C3099872C8798CB7C059736F0B
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa
Signing time:             Thu 04 Dec 2025 20:09:29 +0000
ROA not before:           Thu 04 Dec 2025 20:04:29 +0000
ROA not after:            Thu 03 Dec 2026 20:09:29 +0000
asID:                     52772
IP address blocks:        177.39.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0d:0a:c9:84:03:99:c3:09:98:72:c8:79:8c:b7:c0:59:73:6f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
        Validity
            Not Before: Dec  4 20:04:29 2025 GMT
            Not After : Dec  3 20:09:29 2026 GMT
        Subject: CN=86BCEE8A33489A3324577CCE05665035243FACAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:8d:79:79:5a:36:a2:f4:ac:33:e2:c5:14:
                    ab:0b:d6:d9:06:e2:9c:37:ae:60:76:3d:01:98:b9:
                    07:ee:16:03:43:bf:0f:6b:30:b0:b8:90:96:08:e1:
                    3e:eb:eb:ac:c8:c9:ac:02:fd:8c:5f:f6:ae:d3:eb:
                    3f:f1:6b:0a:e6:d8:96:4e:c8:2b:32:c6:8b:cf:59:
                    23:bf:1e:60:e7:11:18:9a:43:63:15:a5:cc:44:c4:
                    66:52:d9:f1:6a:bd:b2:d9:2e:d9:89:9d:14:38:38:
                    24:23:09:2a:58:f1:aa:f2:ce:b5:aa:db:76:a4:29:
                    4a:4c:10:eb:06:60:8f:ee:46:01:2f:0e:c4:3d:6c:
                    2b:54:15:2c:91:43:de:09:3a:62:f2:e0:8b:0b:fd:
                    ed:90:28:1d:ca:9f:eb:1f:a7:83:6c:63:4f:d9:00:
                    8e:05:63:ba:9a:6a:05:2b:18:20:46:08:ff:0e:cb:
                    31:e6:97:bf:2f:b3:8c:7e:91:bf:de:51:6c:e5:42:
                    39:63:44:17:42:22:20:a0:1e:02:75:d7:0c:c9:9a:
                    67:f5:a8:06:28:6f:14:40:9a:c8:1d:d1:b8:c4:3a:
                    c0:d5:bf:bd:2a:51:ee:4b:c7:f4:f7:63:81:af:a1:
                    d3:17:0e:88:93:84:34:75:0f:62:19:fb:3b:db:50:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BC:EE:8A:33:48:9A:33:24:57:7C:CE:05:66:50:35:24:3F:AC:AD
            X509v3 Authority Key Identifier:
                keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:5a:e4:1a:0c:22:79:db:17:45:56:fd:5e:1f:b7:15:be:4f:
         51:e0:98:26:29:74:d6:ab:dd:a3:05:6e:6d:de:72:7d:c3:07:
         1a:d0:0a:fb:3a:6f:63:3c:cf:ac:3e:5d:89:09:54:6a:28:80:
         10:e9:c4:b5:a3:da:72:e2:28:19:4f:51:3a:fb:89:3e:e5:23:
         f7:04:d7:f8:18:b1:5e:90:ef:78:5b:f4:16:1c:78:77:28:c0:
         1d:c5:94:34:f4:90:e5:36:dd:94:08:4c:40:8c:46:ea:57:94:
         b8:d3:40:9a:bc:75:0d:b1:fc:a9:22:9c:14:58:53:f6:fd:29:
         ac:89:5c:08:6d:c5:54:85:ab:fe:3d:03:0d:bf:e7:57:78:f1:
         e7:08:86:ca:df:08:aa:93:12:31:21:a6:28:a7:da:b1:6c:d1:
         b8:1c:f4:09:a5:21:45:8f:98:9c:2c:10:db:19:de:16:80:06:
         8a:8d:a3:f9:de:2d:c3:48:03:3a:da:c2:a9:31:b1:5a:57:e1:
         14:1f:08:27:60:84:5e:4c:8e:3e:ea:9e:01:a4:2f:da:50:48:
         1e:44:42:6b:3a:7e:13:f0:85:14:62:08:f0:16:72:d4:fd:de:
         fe:32:73:5f:55:3a:5e:4e:e6:81:95:d7:d9:97:36:0e:15:3a:
         eb:f1:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:56:10 2025 by rpki-client