This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/3137392e3132342e382e302f32342d3234203d3e20323633363039.roa
File:                     3137392e3132342e382e302f32342d3234203d3e20323633363039.roa (raw, json)
Hash identifier:          41jRJSvqYbc2kWp8Au1LGSV2AmRKhOKgtqMCFwprRzs=
Subject key identifier:   B9:B0:89:BB:CC:D1:64:B6:44:02:A8:59:F2:7D:FD:AA:35:A4:A8:23
Certificate issuer:       /CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B
Certificate serial:       7DCFD6E00D3C4EF7F1CED286BDEB3FBB89916858
Authority key identifier: B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/3137392e3132342e382e302f32342d3234203d3e20323633363039.roa
Signing time:             Mon 08 Dec 2025 14:47:32 +0000
ROA not before:           Mon 08 Dec 2025 14:42:32 +0000
ROA not after:            Mon 07 Dec 2026 14:47:32 +0000
asID:                     263609
IP address blocks:        179.124.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl
                          rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:cf:d6:e0:0d:3c:4e:f7:f1:ce:d2:86:bd:eb:3f:bb:89:91:68:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B
        Validity
            Not Before: Dec  8 14:42:32 2025 GMT
            Not After : Dec  7 14:47:32 2026 GMT
        Subject: CN=B9B089BBCCD164B64402A859F27DFDAA35A4A823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:99:14:f1:c1:c7:8d:4e:0c:92:b2:f7:a1:
                    01:96:a3:84:97:ab:6e:63:28:4e:a4:98:48:59:84:
                    b3:3d:bd:1d:d6:e0:37:9b:c5:de:92:fb:64:d5:b4:
                    fc:d1:2b:ef:ed:3d:9b:fa:77:d1:d9:f7:c6:eb:b8:
                    92:e5:00:d7:74:53:74:e0:fe:a5:de:cf:dd:20:01:
                    72:1d:ad:d2:8d:02:09:da:a6:e2:8c:c7:48:fb:54:
                    78:ff:72:dd:44:ad:bf:58:47:13:83:eb:99:8f:ad:
                    84:3a:e8:e5:70:4f:68:f8:dd:bc:18:57:37:b1:13:
                    10:eb:3a:9c:f3:29:bb:2f:cb:2d:10:07:34:bc:49:
                    72:ca:85:4d:41:60:ba:1c:8e:2a:8d:24:de:65:9f:
                    37:48:b8:35:5e:e5:63:15:92:93:f3:11:12:96:ff:
                    21:8e:2d:5b:77:e6:54:04:d4:05:f6:03:fe:ed:e0:
                    8e:f2:94:a0:da:fe:93:17:5d:65:03:01:eb:39:d7:
                    46:f2:38:2e:2c:e4:54:b5:48:e0:42:29:16:6b:fb:
                    3c:4d:22:51:7c:c4:89:9c:aa:83:00:fe:22:1f:fd:
                    42:54:c6:74:91:ff:c8:4b:d9:78:26:04:31:60:5a:
                    1f:59:55:a6:94:1d:34:92:c0:49:36:59:98:4a:15:
                    39:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B0:89:BB:CC:D1:64:B6:44:02:A8:59:F2:7D:FD:AA:35:A4:A8:23
            X509v3 Authority Key Identifier:
                keyid:B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/3137392e3132342e382e302f32342d3234203d3e20323633363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:d0:31:2f:02:2b:e6:e5:e9:3b:98:20:c3:03:a5:ed:b6:cc:
         63:75:5b:3b:cb:20:d1:b0:7d:19:0d:48:b9:13:43:95:e8:df:
         75:6f:5c:e5:5c:80:7e:e1:f3:98:69:01:a7:cf:b0:0c:31:bb:
         de:3d:99:39:cc:bc:c6:77:95:79:a0:e8:8e:21:7f:e5:ca:ad:
         bf:12:87:af:1a:54:52:a8:0e:4d:de:4e:42:bb:5e:c8:a3:91:
         78:66:84:1d:fc:3b:ac:05:cd:d1:b1:23:aa:c3:c9:30:aa:84:
         a0:d8:49:65:14:8f:e3:34:43:c4:a0:88:62:95:24:ff:29:49:
         01:b8:fb:b3:3d:67:a1:a3:cb:ad:65:91:bd:24:d9:41:6c:16:
         1b:7e:b7:6d:6a:f7:bd:3d:90:78:d1:02:35:64:43:6a:6e:2f:
         15:25:b6:3c:93:bd:c0:b2:89:2a:eb:42:61:f0:85:92:aa:2d:
         56:17:c3:b4:f1:b4:cb:d3:2a:fb:55:20:10:a5:45:50:85:61:
         17:84:04:66:48:b4:04:80:7a:ce:d5:22:36:ae:34:9e:fc:29:
         17:01:9b:ce:99:c7:aa:80:f6:27:e7:00:25:2c:75:5b:cb:f1:
         62:72:4a:b1:81:64:6b:d0:1a:0d:ec:8e:4f:11:1e:a7:fb:09:
         ed:5d:38:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:43:37 2025 by rpki-client