This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135392e302f32342d3234203d3e20323730373037.roa
File:                     3138392e3132372e3135392e302f32342d3234203d3e20323730373037.roa (raw, json)
Hash identifier:          4u3mzXNLU3nC78NIqE2qoA3tNqDSFNXjjKht3EZNa+Y=
Subject key identifier:   2E:99:72:83:7C:E7:24:CF:59:75:FE:EE:91:76:72:11:80:D7:86:0F
Certificate issuer:       /CN=B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63
Certificate serial:       2657F978B950DE0D1E3AF67181E2997C05129C03
Authority key identifier: B7:EE:BD:D2:F4:4B:2B:FA:00:E3:77:A3:F5:30:75:78:DF:E8:1E:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135392e302f32342d3234203d3e20323730373037.roa
Signing time:             Fri 28 Nov 2025 21:07:42 +0000
ROA not before:           Fri 28 Nov 2025 21:02:42 +0000
ROA not after:            Fri 27 Nov 2026 21:07:42 +0000
asID:                     270707
IP address blocks:        189.127.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63.crl
                          rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:57:f9:78:b9:50:de:0d:1e:3a:f6:71:81:e2:99:7c:05:12:9c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63
        Validity
            Not Before: Nov 28 21:02:42 2025 GMT
            Not After : Nov 27 21:07:42 2026 GMT
        Subject: CN=2E9972837CE724CF5975FEEE9176721180D7860F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:32:b4:26:a6:56:2a:12:89:8f:ba:32:5d:
                    c4:3f:fe:5d:e9:1a:bc:47:e9:67:ec:f7:6b:2e:e9:
                    8d:89:5d:0a:eb:92:45:17:f1:f1:65:d6:6b:7a:77:
                    96:1a:ea:28:ee:b4:70:2a:c3:d5:75:e1:95:7b:10:
                    59:af:53:72:d7:b1:37:7a:6b:e9:eb:57:2c:f5:f5:
                    69:d8:61:3d:54:6d:37:2f:b2:86:53:8a:18:da:8f:
                    33:db:a2:3e:e7:c8:36:30:6e:4c:1d:bd:16:4d:19:
                    df:45:34:0f:4a:29:4a:40:19:bb:a0:83:58:7e:dc:
                    32:ae:e1:c1:74:5d:73:f7:fd:87:69:5e:0e:ce:ce:
                    87:d7:1c:d6:17:d8:ae:30:b1:ee:05:4f:5c:db:9e:
                    fd:7f:66:a6:b2:dd:5c:da:e3:eb:a4:eb:2f:bb:6c:
                    76:a6:12:d2:4e:91:04:34:8a:48:b1:2e:cf:41:1d:
                    e0:b2:35:82:eb:27:7d:0c:d4:b9:dc:42:3d:ce:fb:
                    8f:87:53:25:2d:5b:6b:19:d0:41:89:70:9d:f4:1e:
                    57:8e:3e:2a:9c:ca:c4:0b:e0:e2:5b:e1:19:57:a4:
                    ef:2f:12:bb:33:b5:f1:61:f6:b0:70:6c:07:be:25:
                    e7:ad:aa:0e:c0:16:39:5c:6a:c0:b6:bc:d9:3d:79:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:99:72:83:7C:E7:24:CF:59:75:FE:EE:91:76:72:11:80:D7:86:0F
            X509v3 Authority Key Identifier:
                keyid:B7:EE:BD:D2:F4:4B:2B:FA:00:E3:77:A3:F5:30:75:78:DF:E8:1E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135392e302f32342d3234203d3e20323730373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:1f:0a:93:3b:bc:90:ba:0c:01:e9:a2:01:f0:a2:e6:9e:03:
         13:35:fc:71:70:31:e2:b8:7b:79:fc:a0:de:17:59:12:09:73:
         d8:40:f1:d2:ef:5a:24:3e:54:0a:7f:48:9c:2d:f5:1a:a8:e7:
         34:05:27:5e:df:c8:81:ce:c9:02:52:6b:6c:0d:8a:ee:88:37:
         ce:8c:c8:13:37:fb:9b:76:54:81:a7:b5:6e:ea:87:12:a7:56:
         51:d2:2a:88:bf:e5:dd:46:b8:9d:b9:70:90:f4:31:3d:39:58:
         35:e2:11:28:ef:f8:57:e6:62:23:d6:94:b5:d7:00:36:d4:8f:
         45:30:ec:81:e4:d4:62:65:ff:17:6f:8b:35:dc:a6:fa:dc:1f:
         15:12:08:e1:3d:36:39:e3:97:da:80:60:df:49:8d:94:b7:e8:
         48:42:be:a7:12:15:3c:96:8d:89:6c:47:6e:6b:ed:c0:7c:ac:
         47:91:ad:93:8e:b3:6b:3a:c6:d7:c7:e7:25:9f:28:74:9a:87:
         be:da:ee:bc:8b:84:dd:33:29:52:6e:f0:25:99:6e:83:bc:15:
         b6:7a:e0:97:dd:e9:8a:4d:8c:a8:63:17:3a:06:e9:32:64:89:
         0b:49:0b:9b:38:5d:35:86:08:85:e9:30:d4:56:f1:93:c7:d5:
         f8:b3:5e:fc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJlf5eLlQ3g0eOvZxgeKZfAUSnAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdFRUJERDJGNDRCMkJGQTAwRTM3N0EzRjUzMDc1NzhE
RkU4MUU2MzAeFw0yNTExMjgyMTAyNDJaFw0yNjExMjcyMTA3NDJaMDMxMTAvBgNV
BAMTKDJFOTk3MjgzN0NFNzI0Q0Y1OTc1RkVFRTkxNzY3MjExODBENzg2MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMjK0JqZWKhKJj7oyXcQ//l3p
GrxH6Wfs92su6Y2JXQrrkkUX8fFl1mt6d5Ya6ijutHAqw9V14ZV7EFmvU3LXsTd6
a+nrVyz19WnYYT1UbTcvsoZTihjajzPboj7nyDYwbkwdvRZNGd9FNA9KKUpAGbug
g1h+3DKu4cF0XXP3/YdpXg7OzofXHNYX2K4wse4FT1zbnv1/Zqay3Vza4+uk6y+7
bHamEtJOkQQ0ikixLs9BHeCyNYLrJ30M1LncQj3O+4+HUyUtW2sZ0EGJcJ30HleO
PiqcysQL4OJb4RlXpO8vErsztfFh9rBwbAe+Jeetqg7AFjlcasC2vNk9eYldAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULplyg3znJM9Zdf7ukXZyEYDXhg8wHwYDVR0j
BBgwFoAUt+690vRLK/oA43ej9TB1eN/oHmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0NmancyUXBCaTZxVDZuQXZudHZpR0Q0cmh5ZVJmVXl5Mlp3b29Rb2NQ
VFcvMC9CN0VFQkREMkY0NEIyQkZBMDBFMzc3QTNGNTMwNzU3OERGRTgxRTYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3RUVCREQyRjQ0QjJCRkEw
MEUzNzdBM0Y1MzA3NTc4REZFODFFNjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dDZmp3MlFwQmk2cVQ2bkF2bnR2aUdENHJoeWVSZlV5eTJad29vUW9jUFRXLzAv
MzEzODM5MmUzMTMyMzcyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL1/nzANBgkqhkiG9w0BAQsFAAOCAQEAWB8K
kzu8kLoMAemiAfCi5p4DEzX8cXAx4rh7efyg3hdZEglz2EDx0u9aJD5UCn9InC31
GqjnNAUnXt/Igc7JAlJrbA2K7og3zozIEzf7m3ZUgae1buqHEqdWUdIqiL/l3Ua4
nblwkPQxPTlYNeIRKO/4V+ZiI9aUtdcANtSPRTDsgeTUYmX/F2+LNdym+twfFRII
4T02OeOX2oBg30mNlLfoSEK+pxIVPJaNiWxHbmvtwHysR5Gtk46zazrG18fnJZ8o
dJqHvtruvIuE3TMpUm7wJZlug7wVtnrgl93pik2MqGMXOgbpMmSJC0kLmzhdNYYI
hekw1Fbxk8fV+LNe/A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:49 2025 by rpki-client