This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3137372e382e36392e302f32342d3234203d3e20323733373739.roa
File:                     3137372e382e36392e302f32342d3234203d3e20323733373739.roa (raw, json)
Hash identifier:          OKXxnTEL6+eVpf5eqSf2lzLkYsl027AFWda6UbaE+M4=
Subject key identifier:   AD:BC:A1:69:4C:1C:76:6F:B8:BD:2B:F9:D4:67:D5:2D:C2:D3:93:EA
Certificate issuer:       /CN=1664676300D4BA487C597BD83DEA3EAE106DAB85
Certificate serial:       35FF8DED3B9073895D5E20DFDFCC3A27D8606CCE
Authority key identifier: 16:64:67:63:00:D4:BA:48:7C:59:7B:D8:3D:EA:3E:AE:10:6D:AB:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1664676300D4BA487C597BD83DEA3EAE106DAB85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3137372e382e36392e302f32342d3234203d3e20323733373739.roa
Signing time:             Wed 12 Nov 2025 14:12:40 +0000
ROA not before:           Wed 12 Nov 2025 14:07:40 +0000
ROA not after:            Wed 11 Nov 2026 14:12:40 +0000
asID:                     273779
IP address blocks:        177.8.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1664676300D4BA487C597BD83DEA3EAE106DAB85.crl
                          rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1664676300D4BA487C597BD83DEA3EAE106DAB85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1664676300D4BA487C597BD83DEA3EAE106DAB85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ff:8d:ed:3b:90:73:89:5d:5e:20:df:df:cc:3a:27:d8:60:6c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1664676300D4BA487C597BD83DEA3EAE106DAB85
        Validity
            Not Before: Nov 12 14:07:40 2025 GMT
            Not After : Nov 11 14:12:40 2026 GMT
        Subject: CN=ADBCA1694C1C766FB8BD2BF9D467D52DC2D393EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:83:5c:d0:3d:b9:ff:1f:71:2d:c6:03:c2:
                    81:3a:ac:82:a0:c2:85:54:4f:36:a5:81:83:3c:b4:
                    08:75:c6:b6:b3:8e:2e:2c:c6:eb:4f:f0:91:12:66:
                    62:f8:0a:37:9d:b8:27:81:39:33:82:be:66:d7:7e:
                    64:5b:f6:83:f7:be:48:db:ed:2c:db:8a:6d:89:61:
                    9c:7d:b0:d7:48:46:72:e2:a8:8e:f8:67:f8:2d:e2:
                    7c:13:b3:eb:91:bd:ba:ba:1c:05:c4:3c:8e:c0:9e:
                    b5:39:94:c3:9a:b0:24:93:c8:84:64:c7:16:b6:72:
                    e9:5c:70:e3:81:b4:99:72:77:5b:be:02:c6:55:c1:
                    d7:bf:a4:40:d6:48:ed:9f:22:bb:a5:0e:4d:12:18:
                    87:71:80:f9:43:d3:5a:76:8e:c2:5d:15:e0:e6:e1:
                    4f:96:95:a6:16:d8:62:96:4b:49:46:6b:41:66:42:
                    fe:93:61:64:36:fb:e3:cb:83:0f:ad:16:8e:67:d8:
                    9d:1a:b8:1f:43:6f:85:d6:59:f6:1e:fd:1c:fb:85:
                    ee:7c:53:2a:b1:64:cc:7d:1c:2b:43:7d:7f:ed:61:
                    87:fe:ce:d8:ad:aa:b1:de:74:3b:b4:28:65:02:d3:
                    85:4e:06:af:52:46:34:b0:1b:6d:5b:ef:90:2a:66:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BC:A1:69:4C:1C:76:6F:B8:BD:2B:F9:D4:67:D5:2D:C2:D3:93:EA
            X509v3 Authority Key Identifier:
                keyid:16:64:67:63:00:D4:BA:48:7C:59:7B:D8:3D:EA:3E:AE:10:6D:AB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1664676300D4BA487C597BD83DEA3EAE106DAB85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1664676300D4BA487C597BD83DEA3EAE106DAB85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3137372e382e36392e302f32342d3234203d3e20323733373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f9:1c:29:0c:3f:f0:7f:4c:dd:23:28:2d:04:08:f9:be:f0:
         c4:9a:13:d9:c9:d3:38:a9:80:71:d4:df:ba:07:2f:c3:ce:37:
         7e:b1:f1:ef:ec:35:08:4e:f9:4f:df:f9:45:70:13:24:47:15:
         96:84:3f:78:d6:f4:b2:7e:46:05:6a:7d:06:6e:63:a9:09:f7:
         d6:36:f8:ad:f2:d2:53:a7:ed:1e:a7:84:e5:c1:f1:2e:07:8c:
         b2:82:30:f2:5e:34:62:17:35:bf:96:67:c3:17:1b:4b:9f:33:
         4e:72:31:a1:a8:6d:c6:5b:15:12:a8:f6:ff:aa:fc:cf:eb:0c:
         3e:53:7d:d5:71:5d:5d:56:42:f3:b2:8d:b6:7d:af:43:56:8b:
         2c:c5:25:92:0e:ca:ad:82:9b:c3:6c:e3:7c:35:b9:a3:6f:24:
         46:9e:6d:ad:ef:35:41:8d:9d:b7:d4:18:18:f8:49:33:84:47:
         db:b9:1f:ee:10:40:09:39:3a:9e:df:0f:63:60:39:7a:c9:49:
         30:bf:08:b4:39:c1:17:47:35:77:bd:00:d5:d0:df:5b:d6:6e:
         27:d3:ce:98:62:7c:55:2b:e3:24:3e:7c:78:cc:04:3b:1b:96:
         2f:53:14:63:1b:ef:f3:67:d9:56:fb:03:40:f4:31:19:63:31:
         b0:ae:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:25:36 2025 by rpki-client