This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3232302e302f32322d3234203d3e20323633353036.roa
File:                     3137372e3130372e3232302e302f32322d3234203d3e20323633353036.roa (raw, json)
Hash identifier:          ELEdj7JypWy6KvS0H2O6BCSgBaYq13mP3IAkqMhPtnc=
Subject key identifier:   71:2A:35:06:B8:FD:C1:27:50:38:38:10:1D:D8:79:89:FF:52:61:24
Certificate issuer:       /CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
Certificate serial:       18CF31D6FB57115C5598D29C4E8356B0F98B83C6
Authority key identifier: 88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3232302e302f32322d3234203d3e20323633353036.roa
Signing time:             Mon 24 Nov 2025 20:42:35 +0000
ROA not before:           Mon 24 Nov 2025 20:37:35 +0000
ROA not after:            Mon 23 Nov 2026 20:42:35 +0000
asID:                     263506
IP address blocks:        177.107.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl
                          rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cf:31:d6:fb:57:11:5c:55:98:d2:9c:4e:83:56:b0:f9:8b:83:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
        Validity
            Not Before: Nov 24 20:37:35 2025 GMT
            Not After : Nov 23 20:42:35 2026 GMT
        Subject: CN=712A3506B8FDC127503838101DD87989FF526124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:08:0f:6e:96:97:bc:26:50:80:1e:41:dc:
                    fa:1d:74:4e:b9:b3:82:4c:ae:45:b6:f4:f1:48:e6:
                    69:64:51:ff:4f:48:f3:db:d2:41:bc:8b:4b:ce:5d:
                    6f:cd:47:46:bf:3e:5d:cd:f2:22:3d:94:77:34:4f:
                    2c:e5:77:7b:a6:0c:11:9d:77:aa:6e:ad:34:de:2c:
                    9c:24:74:64:85:da:8d:46:ef:03:88:cd:71:25:90:
                    d3:3c:e3:52:ff:84:86:de:5c:5d:aa:ab:36:c7:c5:
                    2b:2c:15:a0:f3:0c:68:71:24:c7:eb:e6:d4:e3:e6:
                    25:5c:84:32:1c:04:a9:a0:18:03:d1:e5:41:11:5e:
                    53:fa:b9:9f:92:91:0e:63:9e:c7:a2:fb:2c:0f:a2:
                    1e:13:45:3c:a2:c1:cf:e4:75:cf:10:b3:e5:ee:42:
                    4e:39:e8:54:a7:80:57:bb:0e:af:b9:35:e7:32:de:
                    9e:88:e8:e7:1b:24:5f:14:8e:09:26:df:18:d6:45:
                    86:cb:6b:21:ea:e5:a8:67:7d:48:6c:d6:19:53:75:
                    48:23:e9:a5:5a:5d:dd:cd:f8:03:d1:27:8f:8b:f3:
                    f5:3a:ac:da:6f:ea:04:64:6e:7f:ec:c2:e8:b8:8e:
                    f2:d9:14:cb:c3:0c:2e:17:b0:74:03:63:43:28:d8:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2A:35:06:B8:FD:C1:27:50:38:38:10:1D:D8:79:89:FF:52:61:24
            X509v3 Authority Key Identifier:
                keyid:88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3232302e302f32322d3234203d3e20323633353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:c7:5b:a9:7a:93:42:36:b4:57:d7:9d:1c:f1:17:e1:59:fd:
         17:b1:58:a8:a3:6b:b8:46:4f:ed:28:2c:23:19:44:e3:d3:bf:
         2c:98:25:51:15:d3:aa:4a:86:d3:1c:49:41:4f:32:6d:48:0b:
         5c:28:c9:fe:ef:5a:30:ff:56:19:19:72:c9:c5:70:15:83:40:
         99:2e:46:31:59:54:65:a9:64:c4:81:01:4f:f9:63:80:2f:8d:
         12:e3:f1:f1:47:ca:b4:ab:75:f6:df:a5:91:74:cc:40:bc:f9:
         0e:16:07:99:0c:c7:ee:44:48:fa:1f:a5:04:60:f3:b2:fc:3a:
         a7:e7:76:57:b6:be:5b:4c:9b:e4:cb:0d:42:dd:b7:1e:b8:e5:
         08:93:9b:f6:78:ce:36:de:0b:3f:bb:51:89:e9:75:bd:8c:48:
         33:54:3f:1b:e3:b7:8a:cf:38:e1:9b:93:10:2a:a6:fc:04:1c:
         56:ba:c7:af:16:b4:ae:39:57:2b:34:6a:c4:f5:2b:c9:89:c4:
         c7:d4:c5:0f:8a:ee:1c:ce:de:30:93:6a:de:ef:83:f0:f7:05:
         1e:03:a7:1b:57:69:59:9c:98:7e:db:25:47:a9:2e:49:15:b9:
         c3:e7:de:54:91:94:e9:a7:4b:ef:d7:99:d0:23:c2:ed:27:ee:
         7c:53:51:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:52:15 2025 by rpki-client