This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130392e302f32342d3234203d3e20323731313530.roa
File:                     3137392e34322e3130392e302f32342d3234203d3e20323731313530.roa (raw, json)
Hash identifier:          N8XLdgz46Lae/F0vT7LCw2RIoQgvvSBye3PrcZw9xYQ=
Subject key identifier:   7C:C1:D1:90:61:54:34:D3:76:9D:E8:5A:88:E2:61:37:2B:82:17:AB
Certificate issuer:       /CN=96FB193C8C41E5A8A5F1DA3563F6023508649BB3
Certificate serial:       291A20727AAAB3E0EB34CC38AF62CA4A913C2B2A
Authority key identifier: 96:FB:19:3C:8C:41:E5:A8:A5:F1:DA:35:63:F6:02:35:08:64:9B:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130392e302f32342d3234203d3e20323731313530.roa
Signing time:             Mon 17 Nov 2025 23:19:41 +0000
ROA not before:           Mon 17 Nov 2025 23:14:41 +0000
ROA not after:            Mon 16 Nov 2026 23:19:41 +0000
asID:                     271150
IP address blocks:        179.42.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1a:20:72:7a:aa:b3:e0:eb:34:cc:38:af:62:ca:4a:91:3c:2b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96FB193C8C41E5A8A5F1DA3563F6023508649BB3
        Validity
            Not Before: Nov 17 23:14:41 2025 GMT
            Not After : Nov 16 23:19:41 2026 GMT
        Subject: CN=7CC1D190615434D3769DE85A88E261372B8217AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:57:e1:ce:6d:ac:8c:9c:56:88:49:aa:a1:
                    a5:d9:58:79:20:32:89:61:fb:a6:65:86:f2:86:d6:
                    ad:bd:29:5a:98:45:51:02:36:2a:95:38:eb:3f:ec:
                    04:b6:4c:df:8e:c2:17:59:24:78:16:f2:9d:de:3a:
                    18:20:77:c6:7f:30:8a:46:e3:24:81:bc:af:27:9f:
                    33:66:34:5a:93:cf:33:a0:20:59:ff:f3:ec:65:50:
                    2a:07:25:3d:9c:91:c4:dc:d7:41:df:af:bc:a3:d8:
                    a0:e5:6d:d4:ff:e2:79:f7:a3:e5:d8:42:09:d1:c9:
                    fd:f6:84:e8:1f:f4:89:a5:b1:5f:e8:11:32:fd:f4:
                    98:a8:74:41:21:b9:38:6b:3f:3c:62:a4:55:37:be:
                    b2:ce:78:5a:18:32:b0:2b:1b:fb:86:0a:2f:69:dd:
                    43:a8:5d:74:0d:ad:7c:3f:3f:66:03:aa:13:bb:37:
                    1c:f0:21:63:c2:63:9e:17:5a:cf:c6:97:f5:5b:e3:
                    a2:50:1a:69:89:95:82:ba:fc:f4:66:61:64:70:18:
                    b2:bc:da:e6:fa:8e:1c:95:05:1e:12:b1:4f:83:77:
                    27:35:76:3e:4e:08:bd:42:56:81:c0:23:dc:1e:93:
                    55:b5:c1:11:95:08:be:b0:7c:8f:5e:fb:0a:4f:17:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C1:D1:90:61:54:34:D3:76:9D:E8:5A:88:E2:61:37:2B:82:17:AB
            X509v3 Authority Key Identifier:
                keyid:96:FB:19:3C:8C:41:E5:A8:A5:F1:DA:35:63:F6:02:35:08:64:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3130392e302f32342d3234203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:34:31:72:3e:11:1e:d8:6d:be:dd:13:80:19:04:2a:03:27:
         8a:77:2b:4b:9b:c3:2e:db:67:97:d3:3b:f9:ee:8d:c3:07:17:
         44:73:89:da:10:ca:22:39:ad:e2:12:cd:e5:ac:9f:df:b4:96:
         85:0a:e3:0b:94:12:85:6f:c2:08:25:a5:38:be:1a:b5:74:f8:
         91:be:05:3f:a9:dc:fd:c0:c2:95:20:30:2e:82:6d:93:4b:5c:
         5a:6c:fb:e3:21:c1:07:1f:c8:c9:e5:aa:99:ed:6a:cc:71:e3:
         a0:0a:bd:4b:da:ec:9c:d2:c8:98:36:11:94:37:6f:8c:bd:fd:
         1c:63:cb:07:27:b8:5c:de:79:05:0c:79:63:d9:e8:19:91:5f:
         2b:f2:50:d4:fc:76:2f:48:6f:18:02:3e:74:69:42:66:f4:ce:
         ca:d6:b3:ee:d2:5b:68:8a:74:d2:23:c7:ca:f8:f3:bc:d0:9a:
         5f:aa:e1:23:d6:1e:89:2d:4e:64:82:f7:73:b0:a2:3e:eb:de:
         1e:8b:89:f3:9c:dc:d7:08:b2:b5:b1:bd:23:f8:07:e1:0d:d6:
         4a:cf:76:cc:cc:cb:54:c2:a9:88:a1:12:0b:c6:13:e4:e7:81:
         c0:c9:db:54:54:cd:73:98:80:da:8b:01:a7:c2:33:dc:58:b7:
         c2:f8:7c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:13 2025 by rpki-client