This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e36362e3234302e302f32312d3332203d3e203533303035.roa
File:                     3137372e36362e3234302e302f32312d3332203d3e203533303035.roa (raw, json)
Hash identifier:          fNTTE+cVHHR351x7U3xt906EOks4EPvGtj22xwxoWTc=
Subject key identifier:   00:24:B7:D5:E9:55:21:E1:DB:F3:B2:37:CF:00:86:F9:81:02:23:25
Certificate issuer:       /CN=AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A
Certificate serial:       6A906F37A753824D34BBBB4AF21CDCF5ED99DBAF
Authority key identifier: AF:8C:9B:C6:ED:BF:FD:E9:8F:E3:84:11:B6:AB:6C:7B:9F:52:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e36362e3234302e302f32312d3332203d3e203533303035.roa
Signing time:             Sun 28 Dec 2025 10:00:42 +0000
ROA not before:           Sun 28 Dec 2025 09:55:42 +0000
ROA not after:            Sun 27 Dec 2026 10:00:42 +0000
asID:                     53005
IP address blocks:        177.66.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.crl
                          rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:90:6f:37:a7:53:82:4d:34:bb:bb:4a:f2:1c:dc:f5:ed:99:db:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A
        Validity
            Not Before: Dec 28 09:55:42 2025 GMT
            Not After : Dec 27 10:00:42 2026 GMT
        Subject: CN=0024B7D5E95521E1DBF3B237CF0086F981022325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6b:9e:4d:93:68:ce:6f:08:74:f4:fd:68:39:
                    c4:36:8b:ca:b3:ce:59:d8:b9:24:a4:8c:ac:0b:36:
                    92:0f:69:70:50:9b:df:82:c4:9e:ca:23:91:2d:dc:
                    03:db:e2:c4:07:50:3c:b0:95:67:d5:26:57:8b:5b:
                    20:8e:05:36:60:6f:dc:9f:9d:fe:0a:98:14:59:56:
                    30:94:92:00:f9:0b:7e:53:ea:fe:a5:f2:54:d5:2f:
                    10:dc:4c:fd:c6:af:5d:51:c7:c3:78:4f:cc:03:7b:
                    08:72:cd:6a:4d:6a:76:9e:a6:72:54:57:47:2b:c9:
                    53:b0:7a:81:33:4e:de:af:d8:91:1c:c4:84:f6:16:
                    ce:42:cb:5d:cb:84:e5:8c:b6:56:11:45:78:77:1d:
                    42:c3:2e:3a:bb:02:c5:d8:cf:f7:d0:90:97:c3:98:
                    50:55:89:b2:95:25:f6:f9:c4:e0:8d:9b:ba:1b:76:
                    f5:a5:dd:20:26:4a:27:ba:9e:8b:fc:14:b8:71:32:
                    98:3e:18:dd:11:67:bf:88:ff:c4:35:31:8a:92:58:
                    48:72:fc:ea:4a:22:5a:4a:b1:0d:46:d1:38:a3:cd:
                    26:a5:43:78:77:06:f1:bf:ec:88:b2:8a:d9:1c:53:
                    b0:3d:d2:51:78:9f:64:d9:d9:7f:30:6f:1a:7f:fb:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:24:B7:D5:E9:55:21:E1:DB:F3:B2:37:CF:00:86:F9:81:02:23:25
            X509v3 Authority Key Identifier:
                keyid:AF:8C:9B:C6:ED:BF:FD:E9:8F:E3:84:11:B6:AB:6C:7B:9F:52:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e36362e3234302e302f32312d3332203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:b2:f7:66:2b:9a:3b:14:93:c7:da:08:d7:df:ed:8f:a2:4d:
         3c:ab:1a:b3:c1:6f:13:cb:c6:6d:0f:fc:34:2c:a7:e4:dc:6d:
         ec:34:56:35:c2:dc:2f:7a:08:c3:c1:ef:c2:c1:88:06:ae:42:
         c8:cb:e9:26:4a:84:3d:50:c0:da:99:a9:90:fa:a6:0f:7d:07:
         9d:f4:29:fc:cd:74:8b:e4:94:66:5b:c7:be:c3:1c:29:07:9a:
         d2:17:ab:ff:74:d6:d8:61:62:88:03:8b:a6:f7:b4:82:37:7c:
         7e:e3:d9:49:64:a8:92:e5:28:82:c2:5c:10:fb:5e:7a:7a:47:
         c6:70:3a:91:3f:73:fe:e0:50:f2:2f:78:f1:da:f0:0f:e6:2e:
         97:86:da:e5:0e:bd:2f:ba:a2:3c:29:04:40:2d:1b:b8:11:ef:
         24:88:df:39:3b:6d:95:aa:d0:29:44:a8:f5:8e:44:90:c6:7b:
         89:f6:8f:e3:ee:f5:31:c7:ff:30:36:6e:cb:51:49:4d:4e:bd:
         00:92:59:12:b3:52:fe:5b:45:76:df:21:df:14:60:72:6d:9b:
         9e:1a:fb:18:12:be:9b:92:c2:c2:4b:0f:58:17:57:3d:d4:66:
         5e:b4:7b:29:45:ad:ad:b3:87:ec:ea:45:0f:4d:dc:bd:7b:37:
         ce:48:78:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:24 2026 by rpki-client