This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32342d3234203d3e203532383338.roa
File:                     3137372e36362e3130302e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier:          CBqO8uDBrWDcnfasmc7VGRK4zMagGlp5zFQoo1M8zB4=
Subject key identifier:   00:9C:17:7B:59:D4:3C:80:FC:F2:32:EB:40:4F:FD:F2:06:A2:90:19
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       66F7E41FCB335429F23E2EF522370D3131FB1AE1
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32342d3234203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:43:02 +0000
ROA not before:           Wed 03 Dec 2025 00:38:02 +0000
ROA not after:            Wed 02 Dec 2026 00:43:02 +0000
asID:                     52838
IP address blocks:        177.66.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f7:e4:1f:cb:33:54:29:f2:3e:2e:f5:22:37:0d:31:31:fb:1a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:38:02 2025 GMT
            Not After : Dec  2 00:43:02 2026 GMT
        Subject: CN=009C177B59D43C80FCF232EB404FFDF206A29019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4e:c4:c2:61:98:38:24:be:43:43:5d:5b:53:
                    7e:4f:ce:e2:ee:01:41:cf:41:3f:4e:b0:6a:42:9b:
                    f4:96:d5:71:2b:99:c3:96:54:ca:c6:a7:51:9e:3f:
                    3d:f7:34:dc:32:46:9e:58:3c:af:8d:b3:64:7a:80:
                    73:5f:0f:33:1e:dd:af:e8:1f:57:c4:d7:78:f6:7e:
                    4e:c0:a8:34:33:e3:d3:63:84:20:46:2d:0d:0f:f4:
                    a5:7b:f6:6b:37:2f:12:ec:d3:d4:05:cf:3b:8e:68:
                    bd:c3:f8:99:10:72:f3:ea:a4:cb:15:3e:b5:60:bc:
                    93:fc:6d:48:06:30:e9:90:55:7f:e5:ca:2c:7b:9f:
                    db:0b:14:ca:f8:8c:74:3b:40:1c:09:3d:0f:08:19:
                    e3:95:98:fb:ad:ec:2e:a9:63:a6:5c:11:8e:0b:30:
                    68:fa:6d:06:bb:44:92:b5:f2:d9:d7:18:d1:c1:6e:
                    2b:7b:ca:bc:82:e6:7f:ea:b5:62:7b:f5:81:41:03:
                    86:6d:19:a2:26:52:c5:71:82:9b:6d:8d:0e:ea:cf:
                    c3:41:80:21:7c:cb:cd:0c:4b:e7:b0:20:3e:e5:16:
                    d4:f4:f3:07:d5:10:6e:72:8d:3f:2a:d1:6b:fa:33:
                    b0:dc:03:0d:dc:34:94:f3:81:fc:db:b1:55:62:ba:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9C:17:7B:59:D4:3C:80:FC:F2:32:EB:40:4F:FD:F2:06:A2:90:19
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32342d3234203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:87:6f:aa:34:53:9f:18:a1:69:18:55:44:20:a6:bf:8d:d4:
         e0:04:4e:c2:37:1a:33:3c:1d:ab:05:1f:59:a2:4d:9e:88:b5:
         04:72:8f:6d:67:32:7d:34:99:66:20:0b:ea:43:14:67:ac:80:
         c7:77:11:98:a8:6a:99:3d:85:3c:a9:1b:e0:78:9c:8f:a2:62:
         ea:a3:7e:03:e2:05:4d:fd:a9:06:2d:33:b8:01:18:82:ac:90:
         f8:ed:36:31:5c:63:af:2f:db:7b:0b:88:75:21:90:b7:45:20:
         fc:22:95:87:cb:c3:d2:64:48:a4:07:f4:78:2c:c1:cd:d6:40:
         a4:28:22:0d:75:94:b6:45:cc:2b:79:67:a7:a2:ca:dc:75:be:
         5d:75:3f:79:11:0c:82:34:62:9a:e7:0b:e2:8d:ed:e4:82:26:
         e5:5b:1c:cd:f8:ef:52:d0:a2:50:d8:a4:e7:0c:d1:e2:bb:48:
         08:16:a0:50:a6:78:ee:00:34:93:87:1e:4b:78:94:8e:45:25:
         b5:20:7f:b1:1b:48:24:ae:e6:c9:58:a9:af:48:a0:df:43:61:
         88:4f:80:e9:f7:7a:5f:c1:da:ab:65:13:46:e4:2a:8c:a2:cc:
         50:40:0f:83:0b:a1:7b:6b:80:01:60:1e:fd:60:d5:f7:42:71:
         5f:cd:6b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:23 2025 by rpki-client