This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230332e302f32342d3332203d3e203532353736.roa
File:                     3137372e38362e3230332e302f32342d3332203d3e203532353736.roa (raw, json)
Hash identifier:          6zQPFn3mLvOU3Sb13wISLQ4hx9rmBs+KxLRiSxJy9wg=
Subject key identifier:   6A:AA:E6:FC:22:67:7F:C1:37:43:78:9D:F5:37:09:15:9F:76:B8:BB
Certificate issuer:       /CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
Certificate serial:       2252C3D60072F8E783F624046AAA9AA6C264BB1F
Authority key identifier: 69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230332e302f32342d3332203d3e203532353736.roa
Signing time:             Thu 18 Dec 2025 16:27:49 +0000
ROA not before:           Thu 18 Dec 2025 16:22:49 +0000
ROA not after:            Thu 17 Dec 2026 16:27:49 +0000
asID:                     52576
IP address blocks:        177.86.203.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.crl
                          rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:52:c3:d6:00:72:f8:e7:83:f6:24:04:6a:aa:9a:a6:c2:64:bb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
        Validity
            Not Before: Dec 18 16:22:49 2025 GMT
            Not After : Dec 17 16:27:49 2026 GMT
        Subject: CN=6AAAE6FC22677FC13743789DF53709159F76B8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:42:8d:7a:22:b3:a1:fb:51:ab:f6:f3:ef:
                    2b:0b:a0:a7:1f:79:2b:c9:8e:88:a3:54:71:91:b2:
                    b8:1e:68:3b:90:0a:7d:0d:e3:d1:c0:09:c7:77:ab:
                    79:50:fa:0a:44:8f:a2:ea:74:d5:e3:72:77:d1:0c:
                    24:8b:68:32:49:89:99:e5:f0:f8:d2:0e:11:f2:cc:
                    c7:1f:dd:04:41:4d:a0:07:8a:84:c6:32:9f:8e:84:
                    b4:bd:e6:c4:1a:44:47:b2:7f:eb:c8:3a:ac:b0:b3:
                    65:ef:c2:35:44:25:f3:be:d7:70:63:29:7f:b0:60:
                    ee:76:0a:58:76:e9:7c:46:21:e2:72:db:d8:50:c0:
                    0a:03:8d:a8:ac:9d:41:b1:57:fd:f9:4a:62:08:49:
                    8d:7d:b5:13:4b:e6:96:e8:68:27:c3:0a:f6:ef:96:
                    8b:33:1c:b9:4f:e0:12:b0:c4:47:da:b7:bb:6d:0d:
                    01:21:dc:a3:84:8c:8b:93:c7:6f:f6:1d:1c:56:45:
                    d4:37:7d:dc:72:0a:4d:3f:95:ce:6d:fb:b4:16:ff:
                    48:37:18:8d:62:cb:07:06:dc:fb:34:78:2d:36:5b:
                    7b:bd:3e:e6:66:d3:67:a1:5e:80:70:ea:a4:d0:be:
                    e6:01:84:49:20:32:26:82:55:9c:f5:af:92:89:61:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AA:E6:FC:22:67:7F:C1:37:43:78:9D:F5:37:09:15:9F:76:B8:BB
            X509v3 Authority Key Identifier:
                keyid:69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230332e302f32342d3332203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:4b:12:24:42:b3:7e:ac:93:05:8d:0b:e4:47:50:12:04:7d:
         67:87:c7:29:40:5c:89:4d:af:e2:1d:fb:5c:9b:e1:bf:d3:64:
         e1:48:15:09:84:a6:ec:51:19:01:9c:d7:da:22:90:fe:eb:d7:
         ed:20:ce:07:34:a2:4e:55:e1:a6:c9:85:14:2b:1c:d9:38:fc:
         8b:3d:6c:7f:64:d0:cc:26:3a:d3:52:e2:65:a3:b6:50:f8:92:
         e5:15:11:c9:f2:4d:17:e9:eb:e2:cb:80:3b:7f:1b:55:6a:7c:
         72:d7:70:5f:c0:a0:ac:1b:12:46:37:ee:12:71:6d:89:88:7b:
         12:13:e5:ca:80:24:89:6b:d1:1c:f2:5e:6f:de:6a:58:85:dc:
         9a:6c:1d:ee:e6:35:d0:44:1d:83:6a:e0:c4:41:15:97:01:74:
         b5:6d:cb:2f:4c:a9:69:18:c1:0f:e0:b1:b4:1d:f9:c9:92:64:
         20:66:ea:93:d7:8b:6e:11:c0:4c:0f:b1:17:da:72:2d:4d:5d:
         09:46:ee:f6:d1:63:37:aa:aa:e5:55:28:cc:62:af:ab:bd:48:
         a4:74:de:58:8a:c7:e7:40:cd:1d:2f:19:70:ed:a9:6a:f0:77:
         2b:54:01:27:c3:08:e0:59:d4:3f:dd:3b:91:8d:ee:db:8c:a2:
         0e:68:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:07 2025 by rpki-client