This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa
File:                     3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          FMQwuwIhZRVugd4lYrQQtnxijWU04YsV6UWh7AawXSw=
Subject key identifier:   01:AC:3D:55:32:7C:C3:EF:F6:D7:02:EA:BC:11:23:D9:5C:4C:1E:FD
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       67E8F986EB6582DECD829B16F76A1F62E659D8AC
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa
Signing time:             Fri 28 Nov 2025 18:08:18 +0000
ROA not before:           Fri 28 Nov 2025 18:03:18 +0000
ROA not after:            Fri 27 Nov 2026 18:08:18 +0000
asID:                     262773
IP address blocks:        177.22.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e8:f9:86:eb:65:82:de:cd:82:9b:16:f7:6a:1f:62:e6:59:d8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Nov 28 18:03:18 2025 GMT
            Not After : Nov 27 18:08:18 2026 GMT
        Subject: CN=01AC3D55327CC3EFF6D702EABC1123D95C4C1EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:c2:a9:41:70:bf:37:e3:a5:e4:1b:f7:e7:
                    87:c2:6b:b7:a2:82:af:34:0c:b4:03:89:a3:a8:a9:
                    d4:c6:95:c3:0c:49:8d:62:89:53:28:48:48:7d:15:
                    4d:1a:a7:cb:53:f3:ba:0d:0e:41:7f:57:40:fd:7c:
                    43:51:fe:d6:3e:23:12:67:f8:de:d9:40:bd:de:ce:
                    59:5f:49:88:ae:3c:f6:49:28:ce:d0:c3:b4:32:84:
                    d9:aa:f6:3a:da:69:dd:ad:31:c3:e8:de:a1:b1:09:
                    4d:e2:1c:2b:a5:f2:7c:79:c3:fd:41:1b:b9:c9:81:
                    43:04:b4:74:dc:65:41:65:e9:08:29:da:93:fa:b9:
                    0c:84:55:60:b6:d9:83:b9:15:88:d4:5b:09:88:a3:
                    fa:d7:27:50:5f:3c:7b:48:89:55:f7:1a:8a:c3:95:
                    e4:8d:ae:66:16:bb:62:a2:d1:78:2e:2b:e7:7b:b9:
                    ef:ce:30:1d:95:a2:a8:dc:18:fd:65:f2:99:ff:d4:
                    c5:0e:87:45:01:13:b7:68:83:48:f7:d7:04:22:e7:
                    4e:22:25:7e:e2:4d:06:4e:a0:ba:b6:ba:99:28:45:
                    8b:58:0b:88:59:fc:3b:b6:fb:5b:e0:1d:9a:3d:54:
                    bc:c7:a6:34:72:12:c9:de:2c:ab:26:e8:32:f9:1f:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AC:3D:55:32:7C:C3:EF:F6:D7:02:EA:BC:11:23:D9:5C:4C:1E:FD
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e32322e3234382e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:0d:bb:83:2c:37:e7:db:93:a6:72:42:c3:42:be:c5:0f:ce:
         16:81:55:2a:c8:9d:41:e8:a2:5a:b5:a2:e9:26:23:1a:0c:df:
         0d:cb:2a:66:7a:68:9e:d8:6a:57:9e:85:4f:04:54:15:4a:54:
         e2:7a:8b:d7:d5:23:a1:3d:56:6d:d4:a4:0f:2c:6a:61:64:2e:
         a5:11:fb:96:fe:72:42:95:ce:ab:42:12:71:74:d5:4a:cd:9d:
         8b:1b:32:8c:a1:12:87:c4:cb:5c:c9:dd:98:c0:eb:16:c9:98:
         58:d6:74:5b:96:a0:18:ce:01:8c:5a:fc:0b:29:06:b9:2e:b9:
         9d:85:7f:81:79:50:db:4f:a6:f7:79:41:9d:c3:11:2b:43:73:
         cd:05:1c:39:46:ee:26:c9:44:f7:0b:ce:18:36:4b:8a:ad:51:
         d2:b8:dc:eb:86:23:8e:af:36:98:84:e2:51:75:5b:a6:d1:85:
         fa:f3:0e:68:88:2b:06:32:97:61:e1:ac:4e:63:c2:a9:80:da:
         d5:db:1d:c1:5b:e9:6b:c2:01:39:fb:0a:f9:24:b1:38:b3:f8:
         3e:ee:c6:22:91:eb:15:56:c3:46:66:25:e6:94:45:d2:fa:e7:
         8a:66:c9:24:ed:9e:2e:05:cf:99:c8:d6:24:f2:3d:6f:81:00:
         fa:e6:fb:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ+j5hutlgt7NgpsW92ofYuZZ2KwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBCM0M1MzNGOUY5NzNCN0Q4RjM1OTVFQjZCMTYzRTk1
NERCMjY2QjAeFw0yNTExMjgxODAzMThaFw0yNjExMjcxODA4MThaMDMxMTAvBgNV
BAMTKDAxQUMzRDU1MzI3Q0MzRUZGNkQ3MDJFQUJDMTEyM0Q5NUM0QzFFRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh6sKpQXC/N+Ol5Bv354fCa7ei
gq80DLQDiaOoqdTGlcMMSY1iiVMoSEh9FU0ap8tT87oNDkF/V0D9fENR/tY+IxJn
+N7ZQL3ezllfSYiuPPZJKM7Qw7QyhNmq9jraad2tMcPo3qGxCU3iHCul8nx5w/1B
G7nJgUMEtHTcZUFl6Qgp2pP6uQyEVWC22YO5FYjUWwmIo/rXJ1BfPHtIiVX3GorD
leSNrmYWu2Ki0XguK+d7ue/OMB2VoqjcGP1l8pn/1MUOh0UBE7dog0j31wQi504i
JX7iTQZOoLq2upkoRYtYC4hZ/Du2+1vgHZo9VLzHpjRyEsneLKsm6DL5HyQvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAaw9VTJ8w+/21wLqvBEj2VxMHv0wHwYDVR0j
BBgwFoAUoLPFM/n5c7fY81letrFj6VTbJmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMC9BMEIzQzUzM0Y5Rjk3M0I3RDhGMzU5NUVCNkIxNjNFOTU0REIyNjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQjNDNTMzRjlGOTczQjdE
OEYzNTk1RUI2QjE2M0U5NTREQjI2NkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv
MzEzNzM3MmUzMjMyMmUzMjM0MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxFvgwDQYJKoZIhvcNAQELBQADggEBAC0Nu4Ms
N+fbk6ZyQsNCvsUPzhaBVSrInUHoolq1oukmIxoM3w3LKmZ6aJ7YaleehU8EVBVK
VOJ6i9fVI6E9Vm3UpA8samFkLqUR+5b+ckKVzqtCEnF01UrNnYsbMoyhEofEy1zJ
3ZjA6xbJmFjWdFuWoBjOAYxa/AspBrkuuZ2Ff4F5UNtPpvd5QZ3DEStDc80FHDlG
7ibJRPcLzhg2S4qtUdK43OuGI46vNpiE4lF1W6bRhfrzDmiIKwYyl2HhrE5jwqmA
2tXbHcFb6WvCATn7CvkksTiz+D7uxiKR6xVWw0ZmJeaURdL654pmySTtni4Fz5nI
1iTyPW+BAPrm+y4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:33:40 2025 by rpki-client