This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230352e302f32342d3332203d3e203532353736.roa
File:                     3137372e38362e3230352e302f32342d3332203d3e203532353736.roa (raw, json)
Hash identifier:          kg4vlSKf7GBT7TijAg42VjBQpoYXDpH+QOMKiHSDByU=
Subject key identifier:   9F:56:34:9D:D6:25:C7:D7:47:5C:E7:4D:D4:E3:FB:63:C3:34:5A:3A
Certificate issuer:       /CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
Certificate serial:       525A18FA2885B7A9CA7666FBDFFEEDA49B07AB1D
Authority key identifier: 69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230352e302f32342d3332203d3e203532353736.roa
Signing time:             Thu 18 Dec 2025 16:28:25 +0000
ROA not before:           Thu 18 Dec 2025 16:23:25 +0000
ROA not after:            Thu 17 Dec 2026 16:28:25 +0000
asID:                     52576
IP address blocks:        177.86.205.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.crl
                          rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5a:18:fa:28:85:b7:a9:ca:76:66:fb:df:fe:ed:a4:9b:07:ab:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
        Validity
            Not Before: Dec 18 16:23:25 2025 GMT
            Not After : Dec 17 16:28:25 2026 GMT
        Subject: CN=9F56349DD625C7D7475CE74DD4E3FB63C3345A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:29:98:c9:f4:37:31:94:d6:e0:9b:5b:48:ad:
                    df:9e:5b:c6:e5:a8:2b:55:3a:d8:9a:65:9b:e5:d1:
                    ce:ec:5f:35:dd:b6:ee:2a:40:14:31:20:fb:2d:c5:
                    41:47:e2:96:d8:57:6a:b3:ee:f0:a5:db:67:6e:24:
                    28:71:92:f6:d5:86:f5:81:6d:12:e1:07:80:7c:a7:
                    0b:1f:78:31:a6:37:ee:b1:f3:8a:c3:0a:38:0b:04:
                    70:3c:04:78:a3:48:a8:56:c2:60:82:1c:8a:49:1f:
                    d6:6f:c9:f4:18:41:6d:95:51:b6:8e:8e:5a:81:a4:
                    90:08:8a:b6:ef:19:ba:13:e6:30:1a:4a:7e:b5:7c:
                    d2:25:4b:a9:18:db:88:1b:8e:d2:1b:ea:22:09:34:
                    c2:70:16:40:9e:fd:b3:58:78:9e:46:f1:03:e1:02:
                    9e:1c:d8:e0:f5:40:32:d5:7a:75:bd:76:30:74:93:
                    9e:ff:1e:68:4e:49:26:f0:d6:29:73:b2:a0:be:12:
                    e8:dc:f3:46:4d:72:1a:f3:17:07:9a:23:63:4c:91:
                    a0:63:48:6b:bd:df:2b:3a:ce:db:3c:d1:55:8e:f2:
                    17:73:3d:30:1a:3c:43:48:8b:96:06:50:49:52:44:
                    39:e4:20:fe:95:6b:bf:0c:08:15:14:85:ba:08:4d:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:34:9D:D6:25:C7:D7:47:5C:E7:4D:D4:E3:FB:63:C3:34:5A:3A
            X509v3 Authority Key Identifier:
                keyid:69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230352e302f32342d3332203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f1:9f:21:3f:2d:3a:b1:3b:df:8a:d6:32:e0:d7:3d:94:fc:
         39:c4:c9:88:92:54:c9:54:0e:1c:6a:77:8b:44:87:bc:18:96:
         92:a6:91:53:c5:68:dc:ee:5a:58:a6:a2:c4:52:cc:34:78:00:
         be:c9:ea:41:b8:f4:8b:e8:d7:dd:54:24:c4:3b:ca:b4:91:f3:
         ba:ae:80:41:4a:2b:4f:de:53:4e:66:63:c9:ea:39:dc:d4:97:
         e7:3b:5d:03:3e:28:fd:41:ee:3f:71:29:cc:47:71:51:f0:70:
         99:51:81:e7:11:3c:bc:3e:31:49:30:2b:2f:aa:99:32:3e:4c:
         26:4e:e4:d9:85:a5:1e:de:19:1d:7d:7b:b4:00:bf:57:93:6f:
         ff:a3:58:e5:fc:13:f9:13:ee:df:0e:ee:98:96:a4:87:ec:2e:
         38:ef:fc:c5:42:ba:c9:f3:d4:ac:a9:d6:a1:6f:cb:53:82:2b:
         50:c9:c5:2e:3f:b7:4e:0a:85:c3:23:fb:87:30:62:93:30:82:
         0a:5a:94:e4:00:8b:29:ba:c0:6f:80:9a:7a:fc:3c:c3:ce:b4:
         2c:f4:7d:2f:79:37:43:61:2e:4a:0d:88:43:b6:c6:fc:20:e4:
         ec:b9:93:d4:95:ee:05:4b:28:87:e6:ee:ca:96:f4:e5:a8:b0:
         68:14:c1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:24:30 2025 by rpki-client