This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/3137372e3130352e3234302e302f32322d3232203d3e20323633363039.roa
File:                     3137372e3130352e3234302e302f32322d3232203d3e20323633363039.roa (raw, json)
Hash identifier:          TcuQg8gTAi+IOIa6dJ69vnR9I93keLf1aR85cG4Zxng=
Subject key identifier:   69:F1:C5:97:ED:3E:E9:6D:07:D5:61:3A:47:9E:F0:76:C3:80:AC:DC
Certificate issuer:       /CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B
Certificate serial:       34F213E806E1860E992DD1C572943D250668AAA1
Authority key identifier: B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/3137372e3130352e3234302e302f32322d3232203d3e20323633363039.roa
Signing time:             Tue 16 Dec 2025 15:37:46 +0000
ROA not before:           Tue 16 Dec 2025 15:32:46 +0000
ROA not after:            Tue 15 Dec 2026 15:37:46 +0000
asID:                     263609
IP address blocks:        177.105.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl
                          rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f2:13:e8:06:e1:86:0e:99:2d:d1:c5:72:94:3d:25:06:68:aa:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B
        Validity
            Not Before: Dec 16 15:32:46 2025 GMT
            Not After : Dec 15 15:37:46 2026 GMT
        Subject: CN=69F1C597ED3EE96D07D5613A479EF076C380ACDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:b5:46:bd:a7:59:77:e9:43:65:f4:3a:dd:
                    3b:eb:bd:9a:7d:08:f9:8c:71:54:69:c5:20:ff:fc:
                    5f:d4:a1:54:a9:4c:0d:4d:cd:3c:7d:78:1c:86:0e:
                    4a:b3:7d:4f:8c:b8:4c:e4:2f:d7:5f:1c:a1:43:0f:
                    d6:09:3e:bd:c3:d0:05:79:92:d2:ce:41:4d:61:80:
                    99:93:ab:40:40:e0:76:a7:9c:45:56:77:83:4f:32:
                    b8:af:a0:31:84:aa:fd:9e:48:27:28:8a:0c:35:00:
                    be:e5:a3:f2:6d:61:ab:e4:5b:03:bd:d4:1d:72:9e:
                    5b:c8:78:1c:ac:f4:9f:1c:f3:a8:9d:aa:a6:94:40:
                    2d:9e:36:9f:65:79:9b:b2:93:07:43:f7:51:c3:ed:
                    2c:7a:c8:24:c2:ba:f2:5b:96:b3:32:71:c1:eb:1f:
                    88:de:2f:09:ac:b8:09:7a:39:89:9e:5b:88:2d:ee:
                    f6:e0:92:5c:a8:d6:98:41:fd:9e:15:69:9b:c5:fc:
                    9f:fa:40:be:db:24:9e:f5:48:ca:2f:bc:1b:22:33:
                    75:29:99:75:ac:d2:ef:8d:32:c6:dc:f5:84:c6:67:
                    0d:5f:31:9a:43:b6:c3:2b:50:fc:12:b4:54:fb:10:
                    1a:42:86:59:cc:dc:e5:e1:42:41:e6:ca:ac:c5:3c:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F1:C5:97:ED:3E:E9:6D:07:D5:61:3A:47:9E:F0:76:C3:80:AC:DC
            X509v3 Authority Key Identifier:
                keyid:B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/3137372e3130352e3234302e302f32322d3232203d3e20323633363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:65:f2:2a:47:e2:a5:53:e7:c4:af:3c:bb:8f:9f:79:d5:
         46:18:3a:74:c7:0d:71:6a:4a:d8:d3:ef:79:18:01:62:13:29:
         90:86:15:58:9f:f9:b7:1c:d5:c2:97:fb:a2:03:a2:36:b6:ec:
         93:28:0e:cf:d1:d6:ef:3d:62:29:7e:06:98:5c:2f:4d:fc:20:
         86:a2:dd:ab:12:1e:60:75:09:f2:d9:b2:f0:49:63:e5:e9:e9:
         0d:86:f6:fe:f8:c7:1a:cc:9c:12:0d:1c:f6:dc:a4:4d:f9:df:
         d7:c6:02:98:30:25:7c:b7:96:69:7c:ab:75:05:71:b0:f2:51:
         ee:9b:11:10:20:05:7d:63:b0:1a:f9:da:96:31:14:3d:50:30:
         2b:97:d3:9a:79:8b:18:ab:6b:03:72:91:5c:ac:f2:5d:21:8b:
         87:fa:7d:bb:92:a6:f6:f2:f8:cd:b3:0b:32:10:57:d2:5f:f3:
         72:d0:83:47:a2:81:d3:26:27:bd:d3:8a:ee:69:97:aa:de:04:
         26:cb:55:8e:86:8b:a3:34:26:2c:84:80:9d:6a:c4:73:1d:cb:
         ca:12:8d:98:b9:22:e6:33:0b:22:d0:17:43:c7:dd:44:1b:2d:
         1b:74:75:24:ff:b1:e4:5b:79:b0:cb:9d:55:4f:18:de:7b:bc:
         08:41:a5:a0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNPIT6Abhhg6ZLdHFcpQ9JQZoqqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEwQzNDM0EwODc1RUQzQjU2NUZENjVFMzhFRDBDREVB
MDU4RDIxQjAeFw0yNTEyMTYxNTMyNDZaFw0yNjEyMTUxNTM3NDZaMDMxMTAvBgNV
BAMTKDY5RjFDNTk3RUQzRUU5NkQwN0Q1NjEzQTQ3OUVGMDc2QzM4MEFDREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPR7VGvadZd+lDZfQ63TvrvZp9
CPmMcVRpxSD//F/UoVSpTA1NzTx9eByGDkqzfU+MuEzkL9dfHKFDD9YJPr3D0AV5
ktLOQU1hgJmTq0BA4HannEVWd4NPMrivoDGEqv2eSCcoigw1AL7lo/JtYavkWwO9
1B1ynlvIeBys9J8c86idqqaUQC2eNp9leZuykwdD91HD7Sx6yCTCuvJblrMyccHr
H4jeLwmsuAl6OYmeW4gt7vbgklyo1phB/Z4VaZvF/J/6QL7bJJ71SMovvBsiM3Up
mXWs0u+NMsbc9YTGZw1fMZpDtsMrUPwStFT7EBpChlnM3OXhQkHmyqzFPLo5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUafHFl+0+6W0H1WE6R57wdsOArNwwHwYDVR0j
BBgwFoAUsQw8Ogh17TtWX9ZeOO0M3qBY0hswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1lWVHRMOWlvMTZRWHlLWW9ObU1zODQya2FmSHJIbVo1SkZ0OHhObjVE
am0vMC9CMTBDM0MzQTA4NzVFRDNCNTY1RkQ2NUUzOEVEMENERUEwNThEMjFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMEMzQzNBMDg3NUVEM0I1
NjVGRDY1RTM4RUQwQ0RFQTA1OEQyMUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNZVlR0TDlpbzE2UVh5S1lvTm1Nczg0MmthZkhySG1aNUpGdDh4Tm41RGptLzAv
MzEzNzM3MmUzMTMwMzUyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM2MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArFp8DANBgkqhkiG9w0BAQsFAAOCAQEALuVl
8ipH4qVT58SvPLuPn3nVRhg6dMcNcWpK2NPveRgBYhMpkIYVWJ/5txzVwpf7ogOi
NrbskygOz9HW7z1iKX4GmFwvTfwghqLdqxIeYHUJ8tmy8Elj5enpDYb2/vjHGsyc
Eg0c9tykTfnf18YCmDAlfLeWaXyrdQVxsPJR7psRECAFfWOwGvnaljEUPVAwK5fT
mnmLGKtrA3KRXKzyXSGLh/p9u5Km9vL4zbMLMhBX0l/zctCDR6KB0yYnvdOK7mmX
qt4EJstVjoaLozQmLISAnWrEcx3LyhKNmLki5jMLItAXQ8fdRBstG3R1JP+x5Ft5
sMudVU8Y3nu8CEGloA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:43:41 2025 by rpki-client