This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          P1MG0nPdsp5CzH8mrfswYDpVTZqDRgdOnx+GwgAa1z8=
Subject key identifier:   CA:E5:DD:D1:1C:3A:94:C8:9D:62:2F:46:CB:32:C9:04:23:88:2D:A0
Certificate issuer:       /CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Certificate serial:       1940C6A19B93C6C2FF2BE1481DF1141363B62856
Authority key identifier: BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
Signing time:             Mon 24 Nov 2025 23:05:44 +0000
ROA not before:           Mon 24 Nov 2025 23:00:44 +0000
ROA not after:            Mon 23 Nov 2026 23:05:44 +0000
asID:                     263584
IP address blocks:        177.129.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:40:c6:a1:9b:93:c6:c2:ff:2b:e1:48:1d:f1:14:13:63:b6:28:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
        Validity
            Not Before: Nov 24 23:00:44 2025 GMT
            Not After : Nov 23 23:05:44 2026 GMT
        Subject: CN=CAE5DDD11C3A94C89D622F46CB32C90423882DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:1b:5d:48:6d:81:d8:65:06:d8:0d:a3:8c:
                    e6:04:a9:cd:1a:90:3a:b4:a0:df:c7:09:0b:75:ef:
                    ec:fa:bd:e2:8c:d6:c6:0b:2b:30:c0:04:cb:8b:91:
                    10:a0:fb:2c:1a:72:ad:3b:47:74:1a:5c:d4:85:f7:
                    d3:08:1f:f7:72:bb:2f:ca:cb:52:02:bf:44:2f:1b:
                    58:ac:f0:00:13:32:43:9b:e8:db:6a:f7:7e:92:b3:
                    8e:88:c4:9d:ca:2b:b2:93:a9:45:f1:d5:4d:5b:e7:
                    bc:96:bf:6e:6c:ec:06:6a:1c:d6:01:8e:cd:2e:b6:
                    05:18:c6:08:4a:49:38:26:38:b7:98:99:d3:08:f6:
                    15:fa:49:68:1f:bb:1c:3f:d5:b3:64:45:1a:be:05:
                    97:89:1a:aa:4a:97:95:3d:b2:70:64:45:c7:cf:e4:
                    40:2f:c3:a9:32:45:0a:be:77:96:b6:28:fc:4f:e1:
                    ed:ac:3f:00:8a:fe:bb:9d:0a:3e:5a:c2:37:b0:cd:
                    39:14:98:15:65:06:7f:2e:10:68:e4:21:2f:08:d9:
                    0c:5d:c6:6f:a7:ae:51:1a:a5:b3:b7:ec:2d:56:ef:
                    0a:68:46:ce:45:7a:93:f3:7f:29:44:e6:4e:99:13:
                    e2:b0:67:c9:cc:07:d5:ef:e2:5a:bc:a6:c0:44:37:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E5:DD:D1:1C:3A:94:C8:9D:62:2F:46:CB:32:C9:04:23:88:2D:A0
            X509v3 Authority Key Identifier:
                keyid:BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:ec:27:37:0b:4a:f8:eb:ba:d0:d5:3d:9d:e8:0b:2f:d6:ea:
         c0:7c:87:6e:5a:90:74:36:58:a4:1b:dc:7f:79:54:81:7e:df:
         e4:2a:d3:d4:6b:d7:49:50:50:c9:40:2f:ed:1d:7e:05:22:9f:
         5b:37:96:49:15:98:1f:56:65:8d:ae:90:7a:76:4f:10:4b:a2:
         8b:db:d1:32:8a:e7:90:dd:9f:72:07:64:27:b1:1b:a0:12:00:
         f6:bb:1e:32:b4:8e:e1:b6:db:39:8a:b9:7a:12:59:43:d7:7e:
         ba:b2:09:57:40:21:29:99:fc:4f:80:e6:50:f1:84:70:5c:d0:
         e5:f8:c8:e1:5f:1d:ad:31:3d:d7:7b:11:84:b5:c8:90:ee:37:
         12:eb:83:26:3d:62:da:8b:f9:7f:d0:58:92:94:fe:22:1a:c5:
         33:c6:95:d2:e9:b1:b9:31:58:eb:6c:0f:8e:34:80:af:90:4e:
         42:9c:57:1d:28:4e:22:5e:c9:cd:91:70:9c:21:0e:20:c1:15:
         a3:9e:78:4d:0d:bc:53:98:9b:1c:e9:d9:89:ad:04:a2:26:55:
         f0:5c:78:1b:bb:58:20:f5:e9:e9:39:a7:7d:fb:6a:d2:c2:71:
         b4:93:32:d6:b9:a9:07:d5:1e:6b:bb:3a:68:99:3b:50:03:92:
         49:8d:ae:89
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGUDGoZuTxsL/K+FIHfEUE2O2KFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkEzRTc2NEI4NERBODYyMkFERTM4QTQzREM1MjdBNzlG
Nzg4MTU4NTAeFw0yNTExMjQyMzAwNDRaFw0yNjExMjMyMzA1NDRaMDMxMTAvBgNV
BAMTKENBRTVEREQxMUMzQTk0Qzg5RDYyMkY0NkNCMzJDOTA0MjM4ODJEQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdxtdSG2B2GUG2A2jjOYEqc0a
kDq0oN/HCQt17+z6veKM1sYLKzDABMuLkRCg+ywacq07R3QaXNSF99MIH/dyuy/K
y1ICv0QvG1is8AATMkOb6Ntq936Ss46IxJ3KK7KTqUXx1U1b57yWv25s7AZqHNYB
js0utgUYxghKSTgmOLeYmdMI9hX6SWgfuxw/1bNkRRq+BZeJGqpKl5U9snBkRcfP
5EAvw6kyRQq+d5a2KPxP4e2sPwCK/rudCj5awjewzTkUmBVlBn8uEGjkIS8I2Qxd
xm+nrlEapbO37C1W7wpoRs5FepPzfylE5k6ZE+KwZ8nMB9Xv4lq8psBEN8ipAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyuXd0Rw6lMidYi9GyzLJBCOILaAwHwYDVR0j
BBgwFoAUuj52S4TahiKt44pD3FJ6efeIFYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMC9CQTNFNzY0Qjg0REE4NjIyQURFMzhBNDNEQzUyN0E3OUY3ODgxNTg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBM0U3NjRCODREQTg2MjJB
REUzOEE0M0RDNTI3QTc5Rjc4ODE1ODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv
MzEzNzM3MmUzMTMyMzkyZTMxMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBjzANBgkqhkiG9w0BAQsFAAOCAQEABOwn
NwtK+Ou60NU9negLL9bqwHyHblqQdDZYpBvcf3lUgX7f5CrT1GvXSVBQyUAv7R1+
BSKfWzeWSRWYH1Zlja6QenZPEEuii9vRMornkN2fcgdkJ7EboBIA9rseMrSO4bbb
OYq5ehJZQ9d+urIJV0AhKZn8T4DmUPGEcFzQ5fjI4V8drTE913sRhLXIkO43EuuD
Jj1i2ov5f9BYkpT+IhrFM8aV0umxuTFY62wPjjSAr5BOQpxXHShOIl7JzZFwnCEO
IMEVo554TQ28U5ibHOnZia0EoiZV8Fx4G7tYIPXp6Tmnfftq0sJxtJMy1rmpB9Ue
a7s6aJk7UAOSSY2uiQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:19 2025 by rpki-client