This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37382e302f32342d3234203d3e20323632343630.roa
File:                     3137372e35332e37382e302f32342d3234203d3e20323632343630.roa (raw, json)
Hash identifier:          WRbhpTa8w3csmiEad/bYQEK5C8dgSJZaw+PW81XL3BI=
Subject key identifier:   11:29:11:EA:53:D0:81:13:A2:31:10:43:EE:2A:36:D9:CF:CA:A2:FB
Certificate issuer:       /CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Certificate serial:       19F85861FC4896FDC305A13907C433810137174E
Authority key identifier: 9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37382e302f32342d3234203d3e20323632343630.roa
Signing time:             Tue 11 Nov 2025 13:42:20 +0000
ROA not before:           Tue 11 Nov 2025 13:37:20 +0000
ROA not after:            Tue 10 Nov 2026 13:42:20 +0000
asID:                     262460
IP address blocks:        177.53.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl
                          rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f8:58:61:fc:48:96:fd:c3:05:a1:39:07:c4:33:81:01:37:17:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
        Validity
            Not Before: Nov 11 13:37:20 2025 GMT
            Not After : Nov 10 13:42:20 2026 GMT
        Subject: CN=112911EA53D08113A2311043EE2A36D9CFCAA2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:d4:0b:64:dd:14:f6:b9:ca:8a:d3:e4:f5:
                    72:a9:9f:6f:fb:b0:6d:8a:da:06:c7:3f:ef:9e:48:
                    c6:51:ec:09:3a:f7:c8:1a:53:f9:39:6d:56:c7:79:
                    7f:41:2f:91:11:46:2b:16:9f:74:f9:fc:6e:9c:f0:
                    a0:d9:35:9f:4d:f0:5e:93:9e:4b:21:fc:b9:33:2f:
                    d2:6a:6e:75:ed:51:6b:14:97:70:ef:d7:97:d0:3f:
                    6f:bf:b7:f1:81:69:50:f2:a9:e8:44:1a:35:3a:b8:
                    9d:9d:b8:a3:5b:8f:7f:e2:18:df:c4:9f:3b:d1:be:
                    ff:0d:f2:5b:20:7f:de:7c:3d:d0:fc:55:cd:dc:cd:
                    33:33:b9:6b:97:24:2f:7c:4e:77:6a:64:ad:e3:69:
                    b9:d7:92:bf:ad:1e:14:79:4a:90:22:08:25:72:db:
                    18:3a:f5:85:fd:76:01:3b:09:c0:62:63:2e:c9:b1:
                    60:24:0c:31:71:a3:6c:27:6c:07:b1:91:07:82:14:
                    08:eb:d5:77:2b:c6:05:a0:88:3c:9f:49:cb:3c:fe:
                    b6:4e:06:cc:b8:48:34:75:7f:fb:6e:cb:c9:5c:3e:
                    da:fb:32:b7:c2:43:7e:e7:4f:33:83:db:b7:6c:7f:
                    cb:e7:e2:c9:fd:64:c4:77:c9:f8:31:a0:b6:d4:0c:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:29:11:EA:53:D0:81:13:A2:31:10:43:EE:2A:36:D9:CF:CA:A2:FB
            X509v3 Authority Key Identifier:
                keyid:9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37382e302f32342d3234203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:83:65:20:20:d5:a8:ff:5f:5a:41:8e:40:74:b2:e9:c6:fd:
         61:37:fb:3f:19:7b:e1:a6:d7:ec:12:00:45:ee:5a:fd:f9:17:
         4e:3b:03:4d:67:81:19:f9:68:c0:86:2f:1e:b3:a6:3b:d2:f7:
         a2:01:af:0e:d0:1b:9a:8f:2d:44:3b:ca:7b:88:49:6b:a0:72:
         65:38:d9:0a:6f:60:b6:23:29:e2:e3:78:e0:af:71:1a:62:89:
         ad:fc:6b:e2:45:a3:fa:26:d2:65:11:22:c5:3c:48:23:ee:4d:
         51:fd:9c:2e:94:24:34:7f:65:60:b4:d5:76:cd:cf:03:1b:01:
         3d:7f:63:b1:e1:2b:88:6a:19:5d:94:7a:26:8d:3b:77:55:ba:
         48:b6:16:87:8f:d5:27:dc:f5:f0:6b:2e:40:98:2b:14:ac:cc:
         d0:59:bc:da:5b:df:67:ed:0f:fc:e6:7a:6d:59:01:fd:f6:0a:
         bb:57:d1:a1:e4:68:5f:56:e0:7f:fb:60:33:c9:5a:9a:1f:25:
         c5:3d:d7:86:b1:a8:3b:f1:e7:dc:40:c0:7b:d2:11:ba:6d:df:
         f2:79:bf:08:0a:16:f0:43:ae:eb:52:70:52:ee:91:eb:59:10:
         49:4e:af:e0:ca:dd:61:2c:13:06:90:24:c0:50:87:c0:bd:b9:
         ce:b1:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:54:51 2025 by rpki-client