This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32322d3234203d3e20323633353036.roa
File:                     3137372e3130372e3231362e302f32322d3234203d3e20323633353036.roa (raw, json)
Hash identifier:          +w+vlx814iurVcGphl1A6sXPylC3/9HLUeDL1zR60FI=
Subject key identifier:   45:70:B1:0D:34:22:E4:74:EA:89:56:DD:25:5E:E5:B9:A0:18:2E:B6
Certificate issuer:       /CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
Certificate serial:       568CFDD8FD0BCC4A9629F4BED78322EAC206B391
Authority key identifier: 88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32322d3234203d3e20323633353036.roa
Signing time:             Mon 24 Nov 2025 20:41:51 +0000
ROA not before:           Mon 24 Nov 2025 20:36:51 +0000
ROA not after:            Mon 23 Nov 2026 20:41:51 +0000
asID:                     263506
IP address blocks:        177.107.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl
                          rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8c:fd:d8:fd:0b:cc:4a:96:29:f4:be:d7:83:22:ea:c2:06:b3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
        Validity
            Not Before: Nov 24 20:36:51 2025 GMT
            Not After : Nov 23 20:41:51 2026 GMT
        Subject: CN=4570B10D3422E474EA8956DD255EE5B9A0182EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:47:d5:5a:64:03:c2:b5:a0:01:bd:9b:1e:
                    23:d9:5f:64:5e:58:7c:d9:eb:fe:fe:0c:86:c6:83:
                    a3:4a:e7:75:49:d3:e0:f9:a0:fa:78:16:2e:8d:ae:
                    9e:62:3b:cc:d0:fd:85:7b:b9:01:5b:ac:49:93:5d:
                    33:52:45:97:75:58:3f:17:77:31:aa:c4:df:a6:b2:
                    4f:02:7b:02:81:95:6d:36:77:a5:61:00:aa:00:d7:
                    70:0f:72:da:87:89:1a:80:e0:ad:1c:23:c9:71:a5:
                    61:b8:9d:af:d8:4b:d9:f0:67:0f:e8:38:8a:86:52:
                    c4:06:17:64:7a:e6:f7:45:b4:d2:d8:56:8d:08:f4:
                    1b:39:97:83:d0:99:20:1a:68:5e:0f:f7:06:ea:30:
                    fd:55:25:19:31:d6:a0:f7:69:55:e6:9f:30:3e:af:
                    f6:a1:9e:c4:3a:69:84:1c:cb:2d:eb:72:27:83:ab:
                    51:e6:18:ea:ee:8a:91:c8:3c:6a:80:b9:0d:e1:d2:
                    d7:ec:1a:4e:35:ba:d8:97:ef:50:37:3a:24:f8:d0:
                    f2:cf:df:a9:cc:56:28:d6:f3:a0:88:55:63:26:96:
                    65:d3:8d:c6:32:0d:08:e6:98:d2:f5:d5:6c:ab:54:
                    49:56:4f:d5:45:58:00:59:79:32:81:e2:82:03:fe:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:70:B1:0D:34:22:E4:74:EA:89:56:DD:25:5E:E5:B9:A0:18:2E:B6
            X509v3 Authority Key Identifier:
                keyid:88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32322d3234203d3e20323633353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:28:50:7f:88:58:63:9b:ea:6b:b0:ff:50:64:1c:13:70:88:
         c3:c0:c8:1b:3c:4f:d0:47:39:f7:20:33:f2:a2:98:df:61:de:
         5c:a2:9f:4f:ca:9a:5a:33:ae:3d:81:47:28:b2:e6:e2:cf:bd:
         bb:64:47:d2:f2:e0:43:03:5d:10:a8:91:fd:6c:80:6d:c0:ad:
         83:21:7f:43:e1:ae:11:47:ec:22:96:a0:e9:7d:29:9f:7b:8f:
         9d:d9:5c:a7:48:9d:e3:02:7c:2a:d8:d4:1f:53:f0:f4:ef:39:
         2d:89:e1:24:a7:7a:cf:9e:dd:76:43:bc:b8:51:9f:c8:cc:99:
         85:02:22:16:56:39:d1:d0:90:69:2a:28:9a:3a:dc:19:eb:34:
         91:e5:2f:a1:79:32:4f:cf:47:12:83:1c:cd:b6:da:29:db:44:
         6e:ee:bf:93:3f:22:90:88:7b:11:6d:bf:fb:11:eb:81:12:2e:
         6e:e8:7e:c1:69:aa:46:67:7a:95:cf:30:18:e1:fc:94:9f:38:
         3e:f9:36:3b:49:0f:b9:67:90:f7:0d:00:48:99:21:38:c5:c3:
         d3:9f:0d:9e:b6:1d:c3:b2:cc:fc:ac:0b:97:e0:de:5e:c9:f8:
         c3:bf:2e:65:7c:4f:f4:48:88:e8:f6:2a:40:03:33:77:fa:54:
         ee:cf:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:52:09 2025 by rpki-client