This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa
File:                     3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier:          DPcAStErgPTxbmEfZYFSyBb5vCNxwVLhj16k2lwngQI=
Subject key identifier:   76:30:D2:90:14:48:B9:73:68:AD:34:AB:0F:E1:0A:20:11:9E:FB:C4
Certificate issuer:       /CN=7155F95F3F50406AE68A9CCF51483483D251BB70
Certificate serial:       672F147C7BB7BF589130C6394AD42A0FCE2BE284
Authority key identifier: 71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa
Signing time:             Wed 17 Dec 2025 21:12:26 +0000
ROA not before:           Wed 17 Dec 2025 21:07:26 +0000
ROA not after:            Wed 16 Dec 2026 21:12:26 +0000
asID:                     28360
IP address blocks:        179.124.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl
                          rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2f:14:7c:7b:b7:bf:58:91:30:c6:39:4a:d4:2a:0f:ce:2b:e2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7155F95F3F50406AE68A9CCF51483483D251BB70
        Validity
            Not Before: Dec 17 21:07:26 2025 GMT
            Not After : Dec 16 21:12:26 2026 GMT
        Subject: CN=7630D2901448B97368AD34AB0FE10A20119EFBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:91:5e:3f:bb:91:90:77:e9:26:0f:ef:e2:
                    6e:fa:cc:05:bb:9d:21:44:ff:6b:54:72:7a:60:5d:
                    91:7c:6d:f3:47:71:7b:41:2c:38:37:0e:6b:eb:6a:
                    51:31:07:04:be:2f:32:f2:07:70:74:a1:1e:39:51:
                    44:3f:00:86:e4:a5:18:84:b2:7d:10:0c:ee:d8:77:
                    11:0f:79:28:26:7d:4b:db:d1:77:a1:bf:fc:6b:46:
                    35:46:1a:2f:2f:1c:65:13:8c:84:77:b1:7e:b0:c6:
                    49:c7:eb:70:63:d9:69:ac:66:c4:18:3c:93:5f:c7:
                    9f:60:05:13:80:31:4f:c6:59:9e:fb:57:87:6f:94:
                    93:dc:7d:e4:df:ca:ff:a9:71:a7:a2:65:4f:d0:57:
                    c3:71:eb:5d:2a:28:88:39:14:02:04:b7:a3:f6:3d:
                    f1:d4:f5:47:6b:9b:dd:5c:0b:67:15:72:92:18:2b:
                    35:6a:a5:21:27:13:e1:4c:08:13:77:49:69:9f:bf:
                    f8:4d:2a:51:93:5e:fe:2c:41:e4:e5:2a:79:da:1a:
                    cd:09:09:65:91:ee:8f:c7:3b:43:93:47:f4:01:d6:
                    39:0f:0c:ef:14:da:f1:4a:3c:83:bd:24:27:98:db:
                    cf:e1:40:ed:be:03:d8:f1:7b:62:5d:6e:56:27:2e:
                    9a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:30:D2:90:14:48:B9:73:68:AD:34:AB:0F:E1:0A:20:11:9E:FB:C4
            X509v3 Authority Key Identifier:
                keyid:71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:e1:cc:7e:01:88:20:22:88:b2:f0:3a:d4:9f:32:9e:bd:84:
         78:60:04:bf:1f:a1:dd:3a:a5:33:8b:8b:62:c7:f8:8e:24:12:
         25:1d:91:40:32:25:70:43:13:2c:b3:ab:e8:41:52:5a:57:5c:
         da:ba:be:4e:e4:74:f8:cf:1e:26:77:a0:4a:a2:a4:30:ae:fb:
         a4:1a:5f:68:62:11:d0:77:7b:2f:7a:ca:6e:72:33:c3:c7:23:
         13:9b:90:12:89:9a:f6:8e:47:92:cd:98:15:12:70:a4:fe:de:
         7c:4c:38:27:70:7e:03:9c:5e:67:d0:c6:1a:f7:3d:61:25:04:
         27:cf:c5:bd:53:59:c2:07:97:8b:2a:3d:48:f4:f2:8f:67:fc:
         a6:a4:f5:a3:92:06:4a:87:11:f5:ef:cc:4c:e0:db:e5:85:f0:
         b7:e7:b5:b1:95:e9:87:89:1d:f8:93:cc:e7:eb:38:4e:a4:c9:
         de:57:3b:1d:47:4c:e2:1c:d0:1c:b9:14:04:ab:4f:25:c0:0a:
         5f:45:ff:b1:92:42:2e:f9:09:84:8b:61:54:e9:6a:5e:56:db:
         fe:dc:08:43:45:ac:31:d2:40:f4:5f:c6:7f:ce:e0:c3:d2:28:
         7a:6d:16:98:a2:2e:f8:b6:b1:f4:72:be:07:46:b1:c9:7d:7e:
         14:2e:ea:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:29:46 2025 by rpki-client