This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39382e302f32342d3234203d3e20323632383735.roa
File:                     3137372e31312e39382e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          AT8HVakSe8r4SYNUOfC1oII7pOlDequjDI+rTXFwHv4=
Subject key identifier:   82:F5:0D:86:B9:68:C3:5C:7D:2E:EE:42:78:42:30:1B:39:E2:C0:44
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       3E90B0CAD332600E3B66E9B14A9F08AE1EDE37B3
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39382e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 04 Dec 2025 13:38:46 +0000
ROA not before:           Thu 04 Dec 2025 13:33:46 +0000
ROA not after:            Thu 03 Dec 2026 13:38:46 +0000
asID:                     262875
IP address blocks:        177.11.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:90:b0:ca:d3:32:60:0e:3b:66:e9:b1:4a:9f:08:ae:1e:de:37:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Dec  4 13:33:46 2025 GMT
            Not After : Dec  3 13:38:46 2026 GMT
        Subject: CN=82F50D86B968C35C7D2EEE427842301B39E2C044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:53:6e:b4:2a:70:ae:bd:70:2a:19:da:c8:
                    ff:08:f3:4c:19:0b:61:58:63:8e:fc:d0:ed:a0:3d:
                    ad:dc:46:df:7f:84:c3:62:40:c7:8e:2d:85:e2:b6:
                    f6:56:94:f5:4f:9d:b1:16:39:94:1f:1d:d6:6a:4d:
                    62:38:96:fd:33:2c:b9:ae:d6:ed:b5:8b:10:98:76:
                    1b:e8:1d:fa:95:05:ae:f6:58:f7:75:e9:b0:a7:1d:
                    5e:dd:0b:fe:de:48:db:73:13:e6:b4:c5:58:ed:14:
                    3f:29:25:bd:7c:00:ed:99:44:e1:0f:11:62:4d:13:
                    04:d5:d1:2c:33:16:f5:d1:60:c2:8b:32:8b:4d:22:
                    02:26:ef:09:51:10:14:60:bb:48:7b:d9:e4:f6:e5:
                    fa:93:17:83:18:26:d0:ae:88:7b:3e:b4:4e:f7:11:
                    12:6b:05:3a:52:f9:6c:d3:06:34:0d:58:fe:1b:38:
                    bc:e6:e4:9d:d5:b8:bf:2b:17:67:89:db:1b:da:50:
                    e8:53:1b:3f:9e:3c:f6:9c:d0:63:b9:80:d2:48:80:
                    c9:94:86:2e:53:aa:c2:3a:e7:2e:dc:e2:47:70:a8:
                    35:00:46:87:f3:3f:97:94:87:bb:61:07:ff:27:b6:
                    78:51:0a:bb:d2:3a:c7:7c:fc:e9:dd:f4:5d:c8:40:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F5:0D:86:B9:68:C3:5C:7D:2E:EE:42:78:42:30:1B:39:E2:C0:44
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39382e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:9a:af:69:91:4a:2f:22:76:4a:70:fe:c2:44:13:f1:ba:f9:
         f8:56:f5:d8:46:18:46:1d:93:65:69:a0:3a:f2:cd:d5:89:cf:
         bf:bc:40:0e:a8:ef:b0:64:8d:23:88:ef:fb:dc:f4:7e:ce:3c:
         e8:f1:e4:e5:a8:36:f8:58:ca:2e:54:2a:f8:f4:af:74:3d:f2:
         6d:a3:1b:65:90:9b:22:f7:66:45:1b:5c:1a:22:4d:98:76:20:
         6e:52:81:1c:86:f1:d1:b3:09:89:a5:4d:61:ba:f0:13:00:70:
         2b:60:67:5e:17:ff:06:be:17:be:27:f1:ea:40:bf:ee:b9:93:
         a0:40:f2:5a:e1:0d:bd:e8:d3:71:6c:19:90:95:5f:88:6d:c4:
         3f:6b:37:5c:f4:70:f9:f6:64:f9:cb:7e:bb:15:68:4b:97:15:
         2e:1d:81:37:eb:09:3d:5d:b6:67:dc:3b:a2:99:7c:1a:5b:17:
         d7:41:9b:5b:ba:c7:93:80:29:df:bc:62:38:f5:e5:0c:3b:a4:
         c2:ad:47:2e:84:ab:79:b3:a3:d6:0c:42:b7:93:ca:1d:1a:e1:
         1d:98:60:94:f7:a6:68:70:f4:ae:b6:10:ef:3b:4a:bd:90:c2:
         16:9f:68:04:78:e9:3a:61:e5:6b:c9:69:5c:c3:d3:1f:f4:e6:
         e4:a9:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:52 2025 by rpki-client