This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135392e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          EStoz7g6NgVP9LvO4IvsAnHG9swt6RGVRBAEv5bfnZQ=
Subject key identifier:   E1:50:DF:F8:C3:4B:40:B8:94:79:29:F5:93:D3:34:DB:6B:99:05:94
Certificate issuer:       /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial:       7BA4A94A1A1F00A98D3BA507559ACACB19C60328
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa
Signing time:             Thu 04 Dec 2025 20:09:29 +0000
ROA not before:           Thu 04 Dec 2025 20:04:29 +0000
ROA not after:            Thu 03 Dec 2026 20:09:29 +0000
asID:                     52772
IP address blocks:        177.39.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a4:a9:4a:1a:1f:00:a9:8d:3b:a5:07:55:9a:ca:cb:19:c6:03:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
        Validity
            Not Before: Dec  4 20:04:29 2025 GMT
            Not After : Dec  3 20:09:29 2026 GMT
        Subject: CN=E150DFF8C34B40B8947929F593D334DB6B990594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:ea:72:02:2b:6b:33:78:40:92:64:c2:03:
                    17:e0:7b:2f:99:ee:a6:61:4c:a3:49:89:55:5d:b1:
                    af:59:ea:63:a0:3c:25:91:59:71:a9:04:c4:9b:0b:
                    a5:f2:dd:f4:9f:9b:1c:f0:26:67:60:3a:81:15:e4:
                    07:cb:77:93:e2:4f:5e:66:3e:6e:b1:a4:f0:16:d0:
                    31:b3:0d:19:71:8d:f1:b1:d0:80:cb:4e:88:9c:5a:
                    9f:a1:5e:10:a0:77:79:b8:2a:ec:36:9b:39:05:8a:
                    fd:1c:aa:a3:ce:95:eb:d0:e9:3b:da:aa:18:8b:e8:
                    58:d2:5d:13:8f:b5:a3:35:5a:40:db:c4:fd:58:7d:
                    ae:42:c8:2a:cb:c8:48:80:38:b1:22:72:e6:0e:52:
                    cc:d5:c6:50:b4:c0:df:e0:c0:be:6b:f6:de:13:8e:
                    6b:e2:dc:02:98:9e:d8:eb:39:ac:4d:25:20:f9:40:
                    e6:5e:36:3a:9f:89:4a:42:d7:77:1c:2a:3c:36:4c:
                    f7:7d:55:96:bc:64:fa:d2:05:b1:5b:8b:81:8a:1c:
                    78:9b:90:49:df:67:f0:50:4e:3b:cd:fd:07:6f:53:
                    11:60:fa:5d:c2:b1:2d:63:46:f0:88:35:79:0f:60:
                    2c:a5:cd:a2:61:86:18:e3:cf:83:01:87:8a:09:02:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:50:DF:F8:C3:4B:40:B8:94:79:29:F5:93:D3:34:DB:6B:99:05:94
            X509v3 Authority Key Identifier:
                keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135392e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:1c:be:c3:c2:a0:e8:80:fb:c4:08:65:cd:ae:42:d3:06:30:
         07:e9:00:ca:0a:f3:0e:48:dc:70:86:bd:29:44:8a:21:63:3e:
         94:c6:2e:06:83:f9:35:8e:14:c2:70:21:9b:7f:1e:bc:50:a0:
         4c:dc:b7:7b:90:45:f8:b1:9e:1b:b7:99:c9:6f:6a:8a:26:14:
         a9:25:a5:92:e9:29:17:06:38:36:1a:ee:0f:7f:5d:55:bc:f4:
         21:31:5e:2c:f9:a6:b9:86:7b:5d:1b:49:db:61:fb:40:ff:62:
         a9:46:46:5a:aa:9d:c4:ba:c3:6f:5f:b3:94:9d:85:44:2a:16:
         fe:2b:15:72:9f:9d:35:90:1c:54:d5:e7:63:66:9b:9a:4b:c4:
         f9:47:96:9c:3e:e4:8a:50:c9:15:8a:58:16:e8:fb:76:58:af:
         ba:78:16:b4:2f:a5:85:97:97:6c:0c:77:a6:5f:6d:40:41:f5:
         81:30:c0:22:5b:8a:01:40:06:df:4d:05:29:0c:00:18:c2:e3:
         8b:03:d7:6d:42:7a:9d:4c:5c:18:2a:c7:04:aa:6e:a8:2d:01:
         d0:c5:81:ef:f3:e7:f9:06:b3:b0:a4:82:f8:8e:30:d3:55:86:
         5c:c7:69:83:2f:6b:b8:e2:26:83:4a:06:11:68:3f:c1:8f:99:
         35:f5:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:09 2025 by rpki-client