This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3131312e302f32342d3234203d3e20323731313530.roa
File:                     3137392e34322e3131312e302f32342d3234203d3e20323731313530.roa (raw, json)
Hash identifier:          Xc8zUKX5qrL2I6cpue1Sw+Wi7QGKWpubTPg09SYma90=
Subject key identifier:   A5:4A:7A:0D:DF:F1:78:C4:B1:E4:4A:14:8C:48:42:85:87:AC:3C:DD
Certificate issuer:       /CN=96FB193C8C41E5A8A5F1DA3563F6023508649BB3
Certificate serial:       3328B517DD05D2CE135A83F2875B3CB0F9C7C927
Authority key identifier: 96:FB:19:3C:8C:41:E5:A8:A5:F1:DA:35:63:F6:02:35:08:64:9B:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3131312e302f32342d3234203d3e20323731313530.roa
Signing time:             Mon 17 Nov 2025 23:19:47 +0000
ROA not before:           Mon 17 Nov 2025 23:14:47 +0000
ROA not after:            Mon 16 Nov 2026 23:19:47 +0000
asID:                     271150
IP address blocks:        179.42.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:28:b5:17:dd:05:d2:ce:13:5a:83:f2:87:5b:3c:b0:f9:c7:c9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96FB193C8C41E5A8A5F1DA3563F6023508649BB3
        Validity
            Not Before: Nov 17 23:14:47 2025 GMT
            Not After : Nov 16 23:19:47 2026 GMT
        Subject: CN=A54A7A0DDFF178C4B1E44A148C48428587AC3CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0b:4e:33:65:a5:e5:5f:3a:27:fd:0f:70:60:
                    84:0e:d0:37:ff:6f:1a:bf:58:1e:96:dc:a5:0b:e6:
                    f0:68:b2:05:27:f7:28:2f:2b:50:31:02:8a:1d:21:
                    7d:7e:a4:81:82:50:5a:dd:fc:62:ab:09:49:5b:90:
                    a8:1a:28:62:93:7b:50:6a:c6:74:6d:f8:32:7b:28:
                    fd:13:eb:b6:6a:b8:35:43:5f:79:bd:83:35:24:37:
                    fd:b3:a4:12:c2:3a:4c:46:8e:e8:ef:2b:7c:63:0e:
                    89:85:a8:94:76:14:d7:88:bf:ec:d4:9d:ff:65:c6:
                    78:b3:8e:44:18:7e:db:b6:f3:a0:91:4f:81:f8:85:
                    0f:96:11:54:ed:5b:bb:f2:6e:2f:a8:83:50:cc:97:
                    39:67:60:95:ba:b6:6c:30:f1:7c:d8:63:72:c7:76:
                    8e:1e:17:e9:d2:40:2f:39:85:51:04:8f:98:ad:34:
                    fa:9c:7b:5c:40:2c:60:92:54:e5:df:cc:22:cb:de:
                    41:78:0a:79:b3:26:d6:d0:69:a1:82:49:c1:e2:8b:
                    26:d3:fe:9a:ee:be:fd:4c:a1:63:fc:57:ae:26:3d:
                    e9:b1:db:f9:fc:9d:58:d5:43:52:62:9b:90:b6:f6:
                    d1:22:f5:78:cd:1b:6b:83:4f:4f:4e:16:f0:b9:ec:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4A:7A:0D:DF:F1:78:C4:B1:E4:4A:14:8C:48:42:85:87:AC:3C:DD
            X509v3 Authority Key Identifier:
                keyid:96:FB:19:3C:8C:41:E5:A8:A5:F1:DA:35:63:F6:02:35:08:64:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/3137392e34322e3131312e302f32342d3234203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:f6:25:16:09:3e:92:0a:13:e2:fc:b0:7b:bc:2d:f5:1b:c9:
         47:50:78:18:7b:8c:ab:a4:91:5c:4a:f7:57:a2:79:22:3d:51:
         67:37:46:22:fb:5d:61:79:a2:00:d2:3f:b4:7b:64:d2:6e:2b:
         18:19:12:0f:fe:3e:ee:a8:0e:62:eb:08:87:0a:e8:ce:b9:ba:
         ed:47:18:0c:64:28:c0:be:bf:ec:e1:69:65:2f:6c:71:bd:a8:
         b4:ff:0a:89:01:ce:fa:04:91:9c:53:9e:45:b1:31:e5:a0:3d:
         99:74:1c:e5:40:4e:92:d3:08:99:37:35:d0:c6:a1:0d:6d:ae:
         e4:c2:f0:c5:d0:9d:2c:77:74:99:48:de:4d:a5:54:15:08:cf:
         6f:f8:6f:15:de:20:9f:eb:24:b1:03:94:90:70:44:55:fd:d4:
         d7:57:ea:a7:b4:c0:ac:21:5a:3c:89:8c:46:8c:fe:65:97:fe:
         20:86:80:ba:0d:b7:46:07:aa:de:f9:39:ea:1b:58:05:b4:29:
         f6:df:cc:aa:9a:26:ba:b8:4b:37:69:e5:24:6f:cb:ae:06:81:
         c2:80:40:a3:45:73:2e:38:58:ce:6e:c3:3e:48:89:84:d8:c9:
         fc:14:4b:60:cf:44:f9:fa:1c:4c:8a:cc:0d:0c:8a:bc:ed:98:
         27:f0:2a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:19 2025 by rpki-client