This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39362e302f32332d3233203d3e20323632383735.roa
File:                     3137372e31312e39362e302f32332d3233203d3e20323632383735.roa (raw, json)
Hash identifier:          IAHf/l3XdAcDHUyPtp9AWD906BcKguM6hspFW+07FJU=
Subject key identifier:   6F:33:FC:36:7A:54:DC:34:6B:C4:9A:89:CC:CE:A1:E5:B8:B9:47:EE
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       38B6FBFC8CE4F89A07F50F453372C1A55C4CEBEC
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39362e302f32332d3233203d3e20323632383735.roa
Signing time:             Thu 04 Dec 2025 13:38:45 +0000
ROA not before:           Thu 04 Dec 2025 13:33:45 +0000
ROA not after:            Thu 03 Dec 2026 13:38:45 +0000
asID:                     262875
IP address blocks:        177.11.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b6:fb:fc:8c:e4:f8:9a:07:f5:0f:45:33:72:c1:a5:5c:4c:eb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Dec  4 13:33:45 2025 GMT
            Not After : Dec  3 13:38:45 2026 GMT
        Subject: CN=6F33FC367A54DC346BC49A89CCCEA1E5B8B947EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:e1:8d:73:51:9e:6e:7c:82:00:03:4a:84:
                    7f:0f:b6:26:86:e8:3a:45:58:87:5f:a0:e2:20:dc:
                    65:d8:e0:7b:5e:ad:55:33:91:83:29:6e:1a:2d:9a:
                    2a:0f:67:f0:07:eb:bc:5a:c6:45:40:3f:65:a5:3f:
                    a9:8a:fa:ff:a4:cb:3b:5a:b2:d7:26:38:af:55:33:
                    6e:21:93:8f:52:e6:40:39:a7:95:18:05:b9:b9:d0:
                    26:c8:8e:aa:7e:28:d8:1e:0e:15:b1:84:30:61:84:
                    a1:dd:d8:93:30:b2:48:23:4e:52:c4:81:7c:4f:48:
                    18:58:ae:0b:58:dc:77:03:6d:fc:64:0b:20:ad:93:
                    6c:4f:b9:00:96:3c:11:77:d7:00:ee:49:9c:03:ce:
                    a3:3d:88:68:1a:88:05:be:a5:11:a5:2d:85:4f:60:
                    4b:08:a9:0a:48:1e:49:5a:b0:6b:ab:10:41:01:f7:
                    cf:b1:d0:13:8e:19:25:d8:fc:7c:1d:66:7c:8d:95:
                    dd:d8:ba:75:ec:d8:ae:24:6a:b1:62:90:96:d4:7f:
                    17:57:1b:94:41:d9:57:d5:42:18:05:7b:7c:8e:8c:
                    fe:be:47:50:08:1e:f7:a3:d0:bc:5c:45:cb:dc:12:
                    7a:1a:9d:1e:58:d9:13:85:83:3d:2e:62:50:c6:3f:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:33:FC:36:7A:54:DC:34:6B:C4:9A:89:CC:CE:A1:E5:B8:B9:47:EE
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39362e302f32332d3233203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:16:53:1e:cc:fd:5b:b6:04:03:90:ba:67:ad:8f:c1:86:1e:
         e6:b0:ed:b1:b2:ea:d9:5d:47:30:b1:2d:81:37:24:c6:36:33:
         51:84:90:97:e9:8d:ba:b2:65:de:4e:8b:bc:c1:2e:a6:88:71:
         10:2f:31:9b:0d:9f:09:29:63:51:8d:b1:94:33:d8:d7:65:15:
         f8:e3:ca:ee:a8:ad:eb:61:3a:72:e0:f4:09:b6:be:c0:7f:fa:
         19:54:e2:fa:04:02:88:90:b1:10:8d:b3:c5:51:3d:7c:d9:4c:
         cf:92:a2:b7:2f:c3:27:cf:8c:4e:f8:af:45:f8:de:dc:3a:ff:
         cf:64:3a:0e:b7:26:14:7a:1b:69:06:7b:10:60:fd:bd:de:42:
         25:1a:0d:52:3b:00:b3:c9:d0:04:da:eb:c9:0d:78:73:7a:47:
         d8:ba:2a:d4:7e:ec:d7:9d:53:ee:f8:e9:55:30:07:0b:be:7a:
         f9:ae:af:31:aa:74:ef:88:50:a8:24:af:fb:96:32:a6:1a:11:
         4f:33:13:8b:9a:90:4c:73:4e:a4:c4:e0:93:92:99:ce:be:3c:
         fb:5c:12:5d:87:61:2c:36:e8:df:7c:4a:63:b6:e3:97:72:5e:
         6e:f2:e6:76:f9:e7:f1:ee:fd:5f:a0:4d:3d:50:3a:15:7b:91:
         93:c6:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:12:08 2025 by rpki-client