This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3230302e3234302e302f32302d3230203d3e20323633303733.roa
File:                     3137372e3230302e3234302e302f32302d3230203d3e20323633303733.roa (raw, json)
Hash identifier:          Kuo8k9yPDLzbnpUj52J6Lnw4DKjtwRdTNWYVFkE2ZIY=
Subject key identifier:   A7:69:EA:6D:25:2E:E5:CC:AD:64:0C:B3:0D:FC:E6:A5:9E:14:B3:51
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       441EF8DD6118A4F087C6FE694B30004F2E3613F7
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3230302e3234302e302f32302d3230203d3e20323633303733.roa
Signing time:             Wed 05 Nov 2025 19:12:28 +0000
ROA not before:           Wed 05 Nov 2025 19:07:28 +0000
ROA not after:            Wed 04 Nov 2026 19:12:28 +0000
asID:                     263073
IP address blocks:        177.200.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1e:f8:dd:61:18:a4:f0:87:c6:fe:69:4b:30:00:4f:2e:36:13:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Nov  5 19:07:28 2025 GMT
            Not After : Nov  4 19:12:28 2026 GMT
        Subject: CN=A769EA6D252EE5CCAD640CB30DFCE6A59E14B351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:94:32:18:95:45:0c:1b:05:ef:67:a6:11:b7:
                    11:da:35:5a:66:84:ce:e6:81:9d:a8:79:5b:3c:70:
                    18:9c:0b:5b:a8:b8:eb:04:a0:50:2d:6b:be:39:db:
                    77:6d:02:55:2b:51:67:c6:27:d7:e7:ea:5f:a8:5a:
                    57:f4:0f:1c:d1:3f:a5:6b:b8:57:f5:c8:80:42:b0:
                    db:75:c7:76:79:d8:09:75:88:f7:3e:54:1d:7f:01:
                    af:6a:69:f0:c0:a2:51:43:de:b5:0b:72:e2:47:e0:
                    c6:8c:a6:99:03:66:42:fc:da:be:91:8a:91:5a:c4:
                    f4:6b:d9:da:dc:8a:46:bb:4b:61:12:5d:66:ec:56:
                    2b:31:32:77:07:31:50:7d:54:b7:c1:15:7b:a9:12:
                    0a:4e:3a:8a:75:8d:99:95:92:95:01:7d:b6:ee:23:
                    1f:3b:1f:97:f3:66:21:6a:66:9f:0f:49:16:eb:d2:
                    7a:42:5a:00:01:84:32:87:40:8a:5c:97:32:3f:f9:
                    19:dd:d9:76:c3:50:d6:8f:fd:83:65:c0:7d:14:24:
                    d8:ac:2b:ed:1a:6b:2b:46:1b:c4:e2:d8:6c:bd:77:
                    bb:3b:8b:4f:a6:af:d9:ef:ad:19:a7:65:bb:27:ae:
                    ff:8e:39:db:91:57:c4:93:32:3f:79:10:cc:69:e8:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:69:EA:6D:25:2E:E5:CC:AD:64:0C:B3:0D:FC:E6:A5:9E:14:B3:51
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3230302e3234302e302f32302d3230203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:09:89:66:f1:96:a6:1b:b2:a1:19:79:f1:68:5c:be:b0:c1:
         61:d6:75:53:19:09:75:00:d2:c8:97:80:41:c6:6e:98:08:5f:
         41:bc:04:00:a4:52:eb:bf:50:c9:da:96:ca:6d:8c:c6:bb:33:
         9d:2c:04:35:b4:0c:24:e5:59:45:0d:c2:1e:69:cd:d5:68:59:
         6d:82:c3:14:a1:f3:a7:92:bf:28:f5:c1:3c:d6:56:80:68:af:
         f7:f0:fc:0c:6f:72:08:77:5a:b8:59:d9:c8:9b:b0:00:35:1f:
         b4:e6:3c:3e:cd:47:a0:34:8e:95:24:21:f7:ed:0e:d1:1f:bc:
         f5:39:97:a3:0a:b6:e3:a7:8c:f8:f4:b1:45:41:81:1d:d5:25:
         0c:42:87:1d:4b:af:5a:66:f6:ea:78:34:95:fb:9e:e2:70:f5:
         aa:0f:d5:a5:bc:54:5d:e1:f4:09:6a:4a:61:ac:74:cb:30:98:
         08:14:bd:ec:c5:c4:f4:d4:07:91:8e:b5:c8:18:7e:63:cc:c5:
         05:0a:77:f5:da:cf:58:79:14:08:3d:22:18:f1:1e:3c:70:9f:
         1a:da:9e:72:31:86:56:70:27:6e:6c:27:53:83:36:1d:3d:8c:
         ce:07:51:7e:65:c7:1e:88:f0:6b:8b:79:88:6a:83:fb:63:ee:
         f0:18:18:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:26 2025 by rpki-client