This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/3137302e3233392e3130362e302f32332d3234203d3e20323636333535.roa
File:                     3137302e3233392e3130362e302f32332d3234203d3e20323636333535.roa (raw, json)
Hash identifier:          bc/3BFUZnOMyJi9JTcqiCdN3U/sGUMKeKkZrIdNiz78=
Subject key identifier:   98:A4:EC:A5:B2:2D:54:BB:F0:5C:25:22:70:5D:69:F7:A5:7B:3D:FD
Certificate issuer:       /CN=63DA8A9ED5D7884298FABFA76F4B597051D2977B
Certificate serial:       45132373180330749D51AF564884874B5C660477
Authority key identifier: 63:DA:8A:9E:D5:D7:88:42:98:FA:BF:A7:6F:4B:59:70:51:D2:97:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63DA8A9ED5D7884298FABFA76F4B597051D2977B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/3137302e3233392e3130362e302f32332d3234203d3e20323636333535.roa
Signing time:             Thu 18 Dec 2025 13:33:01 +0000
ROA not before:           Thu 18 Dec 2025 13:28:01 +0000
ROA not after:            Thu 17 Dec 2026 13:33:01 +0000
asID:                     266355
IP address blocks:        170.239.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/63DA8A9ED5D7884298FABFA76F4B597051D2977B.crl
                          rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/63DA8A9ED5D7884298FABFA76F4B597051D2977B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63DA8A9ED5D7884298FABFA76F4B597051D2977B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:13:23:73:18:03:30:74:9d:51:af:56:48:84:87:4b:5c:66:04:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DA8A9ED5D7884298FABFA76F4B597051D2977B
        Validity
            Not Before: Dec 18 13:28:01 2025 GMT
            Not After : Dec 17 13:33:01 2026 GMT
        Subject: CN=98A4ECA5B22D54BBF05C2522705D69F7A57B3DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f9:15:eb:37:70:e5:d5:9b:8d:2a:2f:58:b6:
                    a3:f7:47:c6:f4:72:71:c2:27:5d:42:9b:b2:3a:f4:
                    15:fa:32:54:8f:a8:68:d1:d3:bb:a8:75:92:c1:f3:
                    ce:36:7e:0a:a1:fc:b7:bc:fa:5c:95:c0:67:2a:ed:
                    eb:90:9f:3a:68:ac:fc:82:ce:48:5f:53:f5:f4:66:
                    9c:9c:5a:26:23:de:09:ec:16:2d:fb:79:23:87:36:
                    33:4f:22:44:6f:ec:b6:7f:a8:95:aa:fe:98:01:b2:
                    e7:5f:e1:76:64:47:6b:38:71:c2:d2:be:f4:5a:ea:
                    a6:c5:72:e4:22:89:68:92:9a:bb:76:8c:5a:66:25:
                    98:68:ee:85:9d:8c:bc:af:4f:a4:4b:2c:b7:65:1f:
                    dd:2a:61:ee:2d:87:92:1e:cf:88:fb:9e:de:e9:b7:
                    ce:76:b0:57:ba:c8:f1:0d:42:7a:ec:22:22:33:e1:
                    e3:7b:b7:04:79:82:ab:17:17:56:b2:ac:a2:a9:09:
                    5a:ca:72:15:e7:87:74:5f:d1:a8:f3:c9:bd:78:37:
                    9c:73:e1:ca:43:5e:2e:63:9d:5e:c3:89:38:2f:53:
                    0b:b2:a1:18:9a:e8:73:d2:dd:0a:8e:57:65:a4:a1:
                    1a:3e:cd:fc:d9:ba:e0:b0:55:37:76:0d:22:3d:11:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A4:EC:A5:B2:2D:54:BB:F0:5C:25:22:70:5D:69:F7:A5:7B:3D:FD
            X509v3 Authority Key Identifier:
                keyid:63:DA:8A:9E:D5:D7:88:42:98:FA:BF:A7:6F:4B:59:70:51:D2:97:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/63DA8A9ED5D7884298FABFA76F4B597051D2977B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63DA8A9ED5D7884298FABFA76F4B597051D2977B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/3137302e3233392e3130362e302f32332d3234203d3e20323636333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:c4:8b:08:93:1a:9e:1c:fc:9a:5f:72:5a:94:db:e7:e4:16:
         c0:21:f1:9a:cc:a5:41:1c:65:ad:95:b6:a5:79:f2:07:7b:d0:
         b5:8a:af:c2:36:b9:65:34:21:e4:1a:d4:84:c7:a3:fe:54:89:
         24:4f:d1:53:ef:9f:20:c6:bd:9c:d5:e8:79:76:ca:e2:9b:2b:
         f8:f8:5d:da:26:75:f2:a9:5c:33:b2:22:c9:ed:e6:75:b3:87:
         2e:6e:7f:96:6f:21:fe:aa:f4:66:43:61:32:11:74:50:27:22:
         fc:5d:9d:e5:33:9d:9d:f6:29:ac:8c:d1:4d:12:cb:4b:c8:9e:
         7a:57:fc:76:ac:98:3e:4d:ef:f4:b1:b4:3b:e2:59:ee:9b:8c:
         fe:11:33:28:5b:f3:c5:3c:2f:66:02:e5:a6:4d:55:7c:1a:44:
         1b:db:86:c4:d7:4c:84:6c:0e:4c:54:e3:1d:f3:bf:62:f2:42:
         4e:72:1f:70:56:cd:60:4f:02:40:e8:e3:a7:71:b2:da:81:07:
         6f:cd:d6:f8:04:6e:8d:0e:a8:0f:32:7f:25:22:36:a8:5c:cc:
         5b:bd:46:20:c3:aa:06:4b:a8:27:e7:ed:32:15:3f:20:27:4d:
         39:d3:04:29:f7:00:a5:8b:ec:1d:00:b0:82:56:5b:17:37:15:
         fa:e2:25:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:42 2025 by rpki-client