This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/3137372e3130312e3134342e302f32302d3234203d3e20323632373930.roa
File:                     3137372e3130312e3134342e302f32302d3234203d3e20323632373930.roa (raw, json)
Hash identifier:          Oa4KTKx1tqTir0qNBTMn7lQIOr/blg+xnjW9I8TXiAg=
Subject key identifier:   A2:43:CF:50:D5:F1:B5:68:81:58:EE:CD:93:20:B0:46:F0:C1:67:42
Certificate issuer:       /CN=67261DDE7301C73857B84C1EFD17E1F8573F23E5
Certificate serial:       0AAA26D38E6FC06AE5D4164E58CD5BCF3403C4A4
Authority key identifier: 67:26:1D:DE:73:01:C7:38:57:B8:4C:1E:FD:17:E1:F8:57:3F:23:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/3137372e3130312e3134342e302f32302d3234203d3e20323632373930.roa
Signing time:             Thu 04 Dec 2025 14:57:38 +0000
ROA not before:           Thu 04 Dec 2025 14:52:38 +0000
ROA not after:            Thu 03 Dec 2026 14:57:38 +0000
asID:                     262790
IP address blocks:        177.101.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.crl
                          rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:aa:26:d3:8e:6f:c0:6a:e5:d4:16:4e:58:cd:5b:cf:34:03:c4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67261DDE7301C73857B84C1EFD17E1F8573F23E5
        Validity
            Not Before: Dec  4 14:52:38 2025 GMT
            Not After : Dec  3 14:57:38 2026 GMT
        Subject: CN=A243CF50D5F1B5688158EECD9320B046F0C16742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:35:5e:85:b0:d4:eb:19:e5:56:b8:1f:a9:
                    06:77:ed:44:36:aa:3a:ee:50:e6:5e:76:b8:98:b9:
                    0c:36:92:74:fb:fb:32:f9:fc:cd:07:a1:a6:05:6a:
                    44:d5:08:7f:13:d6:34:de:c5:27:04:8d:33:b2:07:
                    32:aa:44:fc:3c:56:79:9d:93:63:3b:8c:bb:23:01:
                    f2:08:6d:57:10:48:b1:96:2e:8d:d7:ab:56:dd:a3:
                    4d:57:1b:87:b9:36:2c:ae:25:ba:c3:8a:59:7e:18:
                    48:6b:a0:4b:83:fe:04:26:b3:1b:de:62:00:69:8e:
                    1c:81:3c:03:14:9b:7f:ef:cd:33:28:a9:e9:3c:66:
                    8e:07:43:1f:d6:88:4c:fc:e6:b0:04:ad:8d:f0:4c:
                    a6:cb:38:7b:05:92:3c:f0:db:b0:1f:d8:08:0f:8c:
                    47:0c:1d:9d:c2:fe:8d:3e:83:92:84:52:ea:fb:b3:
                    19:df:f4:f3:fd:7c:e5:49:ec:55:72:87:6d:59:ce:
                    7c:70:a8:00:51:69:fd:1e:fd:c9:07:76:7d:5c:19:
                    0b:0a:8a:10:44:7b:eb:79:22:1a:0f:ef:a9:24:4a:
                    83:11:0d:89:52:3b:94:70:3b:e8:3c:9b:f1:f8:19:
                    0f:91:1c:4c:27:fa:cd:19:3e:81:51:b2:b7:7e:33:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:43:CF:50:D5:F1:B5:68:81:58:EE:CD:93:20:B0:46:F0:C1:67:42
            X509v3 Authority Key Identifier:
                keyid:67:26:1D:DE:73:01:C7:38:57:B8:4C:1E:FD:17:E1:F8:57:3F:23:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/3137372e3130312e3134342e302f32302d3234203d3e20323632373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:54:cb:d3:c5:8d:fd:0a:bf:cd:ea:ae:74:05:18:91:27:df:
         a2:ef:a6:96:64:8a:17:85:d2:80:e2:d4:93:fe:82:dc:d7:db:
         61:53:4e:5f:7b:61:91:31:3a:1c:e1:15:b5:b3:9d:e8:e3:14:
         19:45:ef:53:65:d2:f3:88:2e:59:7f:05:7d:d3:7d:cf:70:69:
         c5:4a:d6:24:d4:9b:81:fe:c3:c2:61:13:24:93:b9:d1:25:99:
         e0:58:fb:c6:cc:18:1f:74:4f:98:7c:b7:14:1d:b6:0a:95:66:
         80:cd:53:22:75:c6:a6:5f:a3:8a:eb:8b:b8:e8:ba:ab:d7:2f:
         7e:03:2d:7e:d4:86:b7:41:68:e8:bf:ff:e4:06:27:e3:c1:9d:
         d3:0d:9a:f8:ca:75:1c:a6:9c:2b:e2:d1:6c:c3:34:2e:02:84:
         84:34:6f:e1:32:37:d4:e6:48:df:a3:c1:49:78:7a:eb:5e:5b:
         28:8e:90:70:f2:82:46:58:01:fd:44:7f:3f:57:f4:96:d7:85:
         d0:23:aa:71:9b:20:18:59:5e:5f:a1:01:5a:db:03:24:a0:b6:
         48:85:59:e8:2b:ff:a2:30:93:fa:4f:f8:ad:b2:e5:3b:78:19:
         a6:16:3a:63:02:b8:d8:25:17:d2:c8:2b:88:0a:e0:66:7e:da:
         dc:20:69:ed
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCqom045vwGrl1BZOWM1bzzQDxKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcyNjFEREU3MzAxQzczODU3Qjg0QzFFRkQxN0UxRjg1
NzNGMjNFNTAeFw0yNTEyMDQxNDUyMzhaFw0yNjEyMDMxNDU3MzhaMDMxMTAvBgNV
BAMTKEEyNDNDRjUwRDVGMUI1Njg4MTU4RUVDRDkzMjBCMDQ2RjBDMTY3NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjIzVehbDU6xnlVrgfqQZ37UQ2
qjruUOZedriYuQw2knT7+zL5/M0HoaYFakTVCH8T1jTexScEjTOyBzKqRPw8Vnmd
k2M7jLsjAfIIbVcQSLGWLo3Xq1bdo01XG4e5NiyuJbrDill+GEhroEuD/gQmsxve
YgBpjhyBPAMUm3/vzTMoqek8Zo4HQx/WiEz85rAErY3wTKbLOHsFkjzw27Af2AgP
jEcMHZ3C/o0+g5KEUur7sxnf9PP9fOVJ7FVyh21ZznxwqABRaf0e/ckHdn1cGQsK
ihBEe+t5IhoP76kkSoMRDYlSO5RwO+g8m/H4GQ+RHEwn+s0ZPoFRsrd+M54hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUokPPUNXxtWiBWO7NkyCwRvDBZ0IwHwYDVR0j
BBgwFoAUZyYd3nMBxzhXuEwe/Rfh+Fc/I+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHlWejlHVW1wQ2hKSnh3R0ViYWVpQzd2eG41NU1XYUFuQ3dmZUZCbXBO
cEIvMC82NzI2MURERTczMDFDNzM4NTdCODRDMUVGRDE3RTFGODU3M0YyM0U1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3MjYxRERFNzMwMUM3Mzg1
N0I4NEMxRUZEMTdFMUY4NTczRjIzRTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R5Vno5R1VtcENoSkp4d0dFYmFlaUM3dnhuNTVNV2FBbkN3ZmVGQm1wTnBCLzAv
MzEzNzM3MmUzMTMwMzEyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLFlkDANBgkqhkiG9w0BAQsFAAOCAQEAMFTL
08WN/Qq/zequdAUYkSffou+mlmSKF4XSgOLUk/6C3NfbYVNOX3thkTE6HOEVtbOd
6OMUGUXvU2XS84guWX8FfdN9z3BpxUrWJNSbgf7DwmETJJO50SWZ4Fj7xswYH3RP
mHy3FB22CpVmgM1TInXGpl+jiuuLuOi6q9cvfgMtftSGt0Fo6L//5AYn48Gd0w2a
+Mp1HKacK+LRbMM0LgKEhDRv4TI31OZI36PBSXh6615bKI6QcPKCRlgB/UR/P1f0
lteF0COqcZsgGFleX6EBWtsDJKC2SIVZ6Cv/ojCT+k/4rbLlO3gZphY6YwK42CUX
0sgriArgZn7a3CBp7Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:53:36 2025 by rpki-client