This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e35322e35362e302f32322d3234203d3e20323632393038.roa
File:                     3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (raw, json)
Hash identifier:          PHOr7Sz2kHQLAJeSt5sASw79lSPo+cW2oF1NL9541iU=
Subject key identifier:   0F:66:84:6D:63:EC:52:46:E8:A1:77:6A:B5:71:DC:A9:06:D7:DB:F1
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       254F3199EF1C10D91E8A236B3D44919D6765556B
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e35322e35362e302f32322d3234203d3e20323632393038.roa
Signing time:             Tue 06 Jan 2026 18:41:25 +0000
ROA not before:           Tue 06 Jan 2026 18:36:25 +0000
ROA not after:            Tue 05 Jan 2027 18:41:25 +0000
asID:                     262908
IP address blocks:        177.52.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 23:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4f:31:99:ef:1c:10:d9:1e:8a:23:6b:3d:44:91:9d:67:65:55:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Jan  6 18:36:25 2026 GMT
            Not After : Jan  5 18:41:25 2027 GMT
        Subject: CN=0F66846D63EC5246E8A1776AB571DCA906D7DBF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:b9:65:2b:e8:34:9e:2c:0e:1f:65:96:27:
                    bc:d1:2f:51:ea:c9:19:b5:c6:50:75:b8:ce:b6:aa:
                    ed:67:10:1c:f9:b3:32:c4:04:fa:a0:01:50:f2:2b:
                    5a:f9:bf:f6:0a:f8:04:ef:1c:5c:79:a5:ca:b0:45:
                    0a:41:59:30:20:b9:91:85:16:cc:f2:f2:fa:d4:3c:
                    1d:2e:71:56:21:e1:95:8b:e6:8e:02:66:31:bc:a6:
                    28:d7:28:7b:f3:cb:5d:d4:6f:37:a9:06:53:a6:13:
                    1a:9a:90:c8:49:1c:b6:43:fd:d2:5c:ca:8c:d7:87:
                    c5:45:0d:3d:36:4e:bf:c0:56:26:66:8a:c3:4f:3d:
                    66:d3:ba:b5:de:30:e8:2e:5e:dc:b0:ad:f9:94:3f:
                    70:d2:69:c9:82:39:49:b8:95:51:cf:71:03:b8:27:
                    b6:f7:ab:2b:a2:c2:c3:8a:da:3c:ce:14:90:12:95:
                    c9:6b:2c:de:43:3c:44:f8:b3:55:38:c0:6c:2c:ae:
                    7f:db:3b:a8:d6:41:2a:27:27:2f:54:e4:8f:ad:18:
                    ba:4a:0e:c0:98:fd:24:7d:07:95:1c:12:2d:26:c9:
                    22:32:e6:20:43:b2:48:cd:bb:db:5f:a5:9b:f6:3d:
                    2c:c0:ad:8f:e3:d9:50:e0:95:75:ac:9e:df:51:aa:
                    fa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:66:84:6D:63:EC:52:46:E8:A1:77:6A:B5:71:DC:A9:06:D7:DB:F1
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e35322e35362e302f32322d3234203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:b2:42:5c:16:ff:fb:ad:32:6e:4d:28:12:07:ba:d9:d4:42:
         52:c6:74:1a:03:49:2d:6e:81:f9:69:2c:79:87:98:db:82:92:
         0a:d6:87:86:33:17:a6:8e:a5:14:b5:9b:4f:f1:c8:ff:13:c9:
         e4:c7:45:51:a3:63:c9:d2:fc:ff:b1:67:71:b6:67:e2:6f:56:
         be:da:fd:e1:1c:7b:86:0d:58:b6:9d:a7:e3:c6:34:dc:04:43:
         7c:09:32:16:a0:c7:39:32:61:9f:40:ac:da:a9:35:fb:a7:4f:
         ab:82:9e:9d:7b:b9:7b:0e:eb:b2:94:44:98:ba:e1:09:08:e7:
         e0:3a:72:f2:73:33:2b:ea:91:cd:62:f8:fe:e7:7b:1b:fd:cd:
         bd:30:47:a4:8a:3c:e0:ed:54:06:c7:e6:40:d0:37:6d:f3:a2:
         ed:60:a4:c4:20:86:11:da:2b:3f:ab:97:52:5a:2f:d4:13:01:
         60:ab:ef:33:85:dd:46:04:e5:c1:53:70:a1:77:2a:fd:78:22:
         95:17:02:7d:63:8a:36:b6:96:4d:96:c1:41:f3:6b:98:7b:06:
         e3:c6:97:8a:bb:1e:6a:c2:34:8e:24:95:8c:a0:13:8d:8e:5f:
         c3:6f:bb:e3:f1:35:c3:51:6c:ed:3f:b0:c7:1d:9d:23:f7:b0:
         74:49:db:9f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJU8xme8cENkeiiNrPUSRnWdlVWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjAzMzdEMjk3MENCMDlFQ0JBNkM5M0I5RjczMDUyNkU4
QUJEMTc5QzAeFw0yNjAxMDYxODM2MjVaFw0yNzAxMDUxODQxMjVaMDMxMTAvBgNV
BAMTKDBGNjY4NDZENjNFQzUyNDZFOEExNzc2QUI1NzFEQ0E5MDZEN0RCRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6WbllK+g0niwOH2WWJ7zRL1Hq
yRm1xlB1uM62qu1nEBz5szLEBPqgAVDyK1r5v/YK+ATvHFx5pcqwRQpBWTAguZGF
Fszy8vrUPB0ucVYh4ZWL5o4CZjG8pijXKHvzy13UbzepBlOmExqakMhJHLZD/dJc
yozXh8VFDT02Tr/AViZmisNPPWbTurXeMOguXtywrfmUP3DSacmCOUm4lVHPcQO4
J7b3qyuiwsOK2jzOFJASlclrLN5DPET4s1U4wGwsrn/bO6jWQSonJy9U5I+tGLpK
DsCY/SR9B5UcEi0mySIy5iBDskjNu9tfpZv2PSzArY/j2VDglXWsnt9RqvpPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUD2aEbWPsUkbooXdqtXHcqQbX2/EwHwYDVR0j
BBgwFoAUsDN9KXDLCey6bJO59zBSboq9F5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXBoN3pEWVpHOG5yQXJmS1Jjb25ZcWlMSzRxU1M5dlEzOWZWMm82UlBr
UWUvMC9CMDMzN0QyOTcwQ0IwOUVDQkE2QzkzQjlGNzMwNTI2RThBQkQxNzlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwMzM3RDI5NzBDQjA5RUNC
QTZDOTNCOUY3MzA1MjZFOEFCRDE3OUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwaDd6RFlaRzhuckFyZktSY29uWXFpTEs0cVNTOXZRMzlmVjJvNlJQa1FlLzAv
MzEzNzM3MmUzNTMyMmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsTQ4MA0GCSqGSIb3DQEBCwUAA4IBAQAiskJcFv/7
rTJuTSgSB7rZ1EJSxnQaA0ktboH5aSx5h5jbgpIK1oeGMxemjqUUtZtP8cj/E8nk
x0VRo2PJ0vz/sWdxtmfib1a+2v3hHHuGDVi2nafjxjTcBEN8CTIWoMc5MmGfQKza
qTX7p0+rgp6de7l7DuuylESYuuEJCOfgOnLyczMr6pHNYvj+53sb/c29MEekijzg
7VQGx+ZA0Ddt86LtYKTEIIYR2is/q5dSWi/UEwFgq+8zhd1GBOXBU3Chdyr9eCKV
FwJ9Y4o2tpZNlsFB82uYewbjxpeKux5qwjSOJJWMoBONjl/Db7vj8TXDUWztP7DH
HZ0j97B0Sduf
-----END CERTIFICATE-----
Generated at Thu Jan 8 23:53:29 2026 by rpki-client