This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137372e38362e3135362e302f32322d3332203d3e20323633333234.roa
File:                     3137372e38362e3135362e302f32322d3332203d3e20323633333234.roa (raw, json)
Hash identifier:          Xi0nuCNSfMlLm+lAIitZfbftM5ljh9Idy6wgLtNgxNU=
Subject key identifier:   E8:F6:2F:0B:F3:75:FE:B7:BA:3E:93:6B:85:41:83:D9:14:9D:1D:1B
Certificate issuer:       /CN=0E1B21C62DBFAE7BD33B349D9657A3C90147B837
Certificate serial:       7ED887D1F2243466212B0ACC5DAFA8876C4A6767
Authority key identifier: 0E:1B:21:C6:2D:BF:AE:7B:D3:3B:34:9D:96:57:A3:C9:01:47:B8:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137372e38362e3135362e302f32322d3332203d3e20323633333234.roa
Signing time:             Thu 06 Nov 2025 18:27:43 +0000
ROA not before:           Thu 06 Nov 2025 18:22:43 +0000
ROA not after:            Thu 05 Nov 2026 18:27:43 +0000
asID:                     263324
IP address blocks:        177.86.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.crl
                          rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d8:87:d1:f2:24:34:66:21:2b:0a:cc:5d:af:a8:87:6c:4a:67:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E1B21C62DBFAE7BD33B349D9657A3C90147B837
        Validity
            Not Before: Nov  6 18:22:43 2025 GMT
            Not After : Nov  5 18:27:43 2026 GMT
        Subject: CN=E8F62F0BF375FEB7BA3E936B854183D9149D1D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:aa:9a:8c:51:03:5d:4f:64:e3:a9:b0:5a:
                    f4:99:e4:7e:37:b5:23:09:3d:92:aa:07:74:e2:82:
                    87:46:3e:f8:d0:6c:d1:20:47:35:86:b9:0e:0a:ca:
                    1d:13:01:1f:b0:65:f8:eb:87:30:28:f7:f9:bd:50:
                    ce:47:5d:b5:f2:b5:95:45:b0:97:af:28:08:dc:7a:
                    e4:1a:47:4a:44:91:55:5b:12:3e:43:ef:d8:aa:62:
                    96:50:be:52:77:84:49:56:fa:68:92:66:4b:24:86:
                    3d:ca:27:6f:fa:63:2c:9d:9f:85:02:16:27:17:22:
                    14:66:48:7c:08:0a:23:16:77:c5:ae:39:42:60:ff:
                    d4:f2:93:79:29:99:de:8f:cf:52:e9:21:b4:7e:37:
                    d5:3e:c6:43:b8:c3:4a:c8:07:c7:22:e7:0b:41:b3:
                    88:a0:70:0c:aa:d3:6f:19:9d:0e:00:86:97:69:8a:
                    71:8d:0e:94:c0:62:74:e5:f9:53:c9:a5:be:95:f3:
                    12:cd:74:71:96:fa:e0:df:bd:02:ff:af:2b:45:7a:
                    34:25:b8:62:5a:20:41:09:28:0e:c5:d7:26:c4:4c:
                    aa:59:c2:e2:70:41:cb:6e:12:f6:8b:b3:81:db:d1:
                    a7:56:e0:55:71:03:25:fe:18:de:3d:7b:60:02:48:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F6:2F:0B:F3:75:FE:B7:BA:3E:93:6B:85:41:83:D9:14:9D:1D:1B
            X509v3 Authority Key Identifier:
                keyid:0E:1B:21:C6:2D:BF:AE:7B:D3:3B:34:9D:96:57:A3:C9:01:47:B8:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137372e38362e3135362e302f32322d3332203d3e20323633333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:dc:a1:e2:2c:a5:e2:2d:73:f9:e9:21:18:a6:4f:a0:f7:be:
         fe:1c:11:1a:b1:56:db:0e:b1:8c:af:b5:38:61:77:1b:39:78:
         c1:f8:f8:a3:a4:e5:05:42:f2:a5:a1:9e:30:5e:7c:7d:07:89:
         32:04:f9:9f:86:cc:90:bd:a6:e2:7f:e9:40:2f:46:5e:f1:70:
         7b:5f:2f:0c:9d:d6:9c:72:6d:9d:4d:42:b5:59:7f:6a:bf:61:
         37:64:5e:76:3e:bd:b9:0f:3a:4b:d1:77:46:42:a4:9c:3a:f6:
         58:98:5f:1b:f9:d9:f0:de:b7:53:f1:bc:bf:5f:5a:81:7a:0d:
         0e:1e:b4:22:84:77:e4:9e:7f:1d:14:10:d2:f4:3a:02:e4:1f:
         e6:c1:a7:2b:5f:e6:f3:a3:63:84:32:d2:d4:6e:bb:62:ff:f9:
         b5:5c:ff:1c:5d:95:83:a0:e9:d6:d1:d4:a0:56:9e:80:dc:39:
         ef:a6:b5:bc:da:a9:b4:b7:5f:2c:f3:dd:39:89:89:47:a4:2c:
         0d:6e:ad:ec:3f:75:71:3b:73:ef:00:bf:00:f4:6c:c1:a6:d9:
         c8:aa:3e:6d:dc:a0:6c:66:d8:60:8e:7e:d2:2a:be:76:e7:72:
         c5:78:e1:e4:ce:a0:bb:62:e6:19:0a:dc:a6:90:05:bf:62:a2:
         0d:c1:fe:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:08:22 2025 by rpki-client