This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/3137372e3130352e3234312e302f32342d3234203d3e20323633363039.roa
File:                     3137372e3130352e3234312e302f32342d3234203d3e20323633363039.roa (raw, json)
Hash identifier:          ElE/2oFBsSBXnlSIMdA+czPsad6c31P+Y0JsgkGDT2s=
Subject key identifier:   86:A8:20:32:9B:D3:00:2E:D4:34:AA:E2:FD:B4:66:AE:5B:6B:98:DC
Certificate issuer:       /CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B
Certificate serial:       3D168471084C6C2963D35CB9F55FD9BB2CF7DD37
Authority key identifier: B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/3137372e3130352e3234312e302f32342d3234203d3e20323633363039.roa
Signing time:             Mon 08 Dec 2025 14:47:06 +0000
ROA not before:           Mon 08 Dec 2025 14:42:06 +0000
ROA not after:            Mon 07 Dec 2026 14:47:06 +0000
asID:                     263609
IP address blocks:        177.105.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl
                          rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:16:84:71:08:4c:6c:29:63:d3:5c:b9:f5:5f:d9:bb:2c:f7:dd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B
        Validity
            Not Before: Dec  8 14:42:06 2025 GMT
            Not After : Dec  7 14:47:06 2026 GMT
        Subject: CN=86A820329BD3002ED434AAE2FDB466AE5B6B98DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:fa:76:2d:90:ea:b6:e9:db:9d:8b:94:07:
                    7b:f7:85:62:22:15:fe:ee:c9:37:26:f4:a1:1b:bc:
                    91:d5:2a:97:83:87:4d:b4:d9:83:34:76:97:ad:77:
                    1c:47:5c:62:60:af:aa:cc:c0:5e:64:9e:fd:1d:ed:
                    bb:25:d4:46:da:a0:17:a5:70:fb:3f:35:cc:41:6d:
                    75:68:00:d0:a9:63:bb:db:49:f0:d8:f8:e0:d8:cb:
                    4c:7b:36:43:7b:e9:0e:02:10:fb:0b:da:05:f2:46:
                    2a:7b:2f:a8:e3:2f:9f:fc:5a:43:b4:81:93:41:24:
                    0a:d1:39:39:0a:41:cc:30:07:68:0c:81:3f:a7:dd:
                    0c:1c:26:8a:e0:c5:3a:4d:6c:82:1b:5b:98:89:36:
                    2c:f1:d8:c3:ce:14:34:3c:17:bd:a9:d2:9e:cd:1f:
                    1c:05:f8:55:df:f9:f7:ea:8a:58:7a:7e:81:87:db:
                    45:32:b1:5f:48:86:7a:eb:84:b7:f2:6a:3c:52:c4:
                    fb:fc:88:0e:f5:90:a7:30:81:51:c5:0c:79:1f:4b:
                    bc:7e:7f:ab:25:c4:de:ff:9a:2e:b2:93:2f:8a:8f:
                    d0:11:7a:49:8d:66:c1:6b:a5:f4:8a:32:59:46:30:
                    0f:84:4a:6c:17:18:dd:a8:c1:ba:8d:6c:fc:ce:cd:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A8:20:32:9B:D3:00:2E:D4:34:AA:E2:FD:B4:66:AE:5B:6B:98:DC
            X509v3 Authority Key Identifier:
                keyid:B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/3137372e3130352e3234312e302f32342d3234203d3e20323633363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:61:bd:14:12:b4:60:1e:2d:7a:02:9f:85:fc:6f:d3:7d:e2:
         24:01:2c:7e:bf:89:99:af:8f:f9:a0:cf:e1:ce:1e:dd:f5:63:
         cb:19:66:5d:3d:4c:35:8b:8d:45:43:eb:56:1d:d6:50:1b:9f:
         c4:a6:84:2d:83:b3:20:35:0d:4d:fe:dc:08:a1:67:11:38:65:
         0f:e7:a2:2f:ad:2d:76:28:98:b6:e4:27:d9:5e:69:b3:2d:27:
         9b:47:62:7b:27:bf:f1:7f:fe:f0:6f:a9:6e:dc:a7:b8:6f:df:
         25:41:2f:08:e4:9b:d4:f5:f5:a3:34:d3:66:71:4f:a0:05:0e:
         7e:57:68:61:20:d3:33:3c:c2:e9:b3:e1:20:1f:e4:37:17:e5:
         70:44:2e:15:22:9b:64:87:8c:56:e0:9e:e3:7f:c3:44:ae:92:
         99:31:05:d2:60:3e:68:dd:1f:b4:1d:ef:4a:60:9b:66:d2:47:
         83:8b:86:3a:ff:67:bc:52:c4:04:c3:f3:3e:af:b7:82:bf:61:
         64:bc:d8:0d:93:78:42:1e:a8:ef:02:93:d1:0d:36:bf:0a:62:
         24:87:b6:ee:b4:4d:48:84:ff:54:ec:cd:70:23:fb:a4:b1:6b:
         50:73:05:14:a3:88:80:ae:3e:99:dc:a7:ea:02:86:b0:bf:a6:
         93:eb:82:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:43:39 2025 by rpki-client