This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa
File:                     3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa (raw, json)
Hash identifier:          GTeIOMd+/+eSnE1Z2kVXBXXqSDQxvTETy326tEthhaQ=
Subject key identifier:   52:7A:4A:20:1A:47:51:20:21:DC:54:A0:8B:F1:0E:59:1A:A0:76:05
Certificate issuer:       /CN=E114F59DC23A30872D43EF9D4D7FE4611207E709
Certificate serial:       19DFD5DC26DB3CE9A2E69670A5AEE6949C38CCAC
Authority key identifier: E1:14:F5:9D:C2:3A:30:87:2D:43:EF:9D:4D:7F:E4:61:12:07:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E114F59DC23A30872D43EF9D4D7FE4611207E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa
Signing time:             Fri 07 Nov 2025 13:06:56 +0000
ROA not before:           Fri 07 Nov 2025 13:01:56 +0000
ROA not after:            Fri 06 Nov 2026 13:06:56 +0000
asID:                     262351
IP address blocks:        177.125.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/E114F59DC23A30872D43EF9D4D7FE4611207E709.crl
                          rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/E114F59DC23A30872D43EF9D4D7FE4611207E709.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E114F59DC23A30872D43EF9D4D7FE4611207E709.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 23:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:df:d5:dc:26:db:3c:e9:a2:e6:96:70:a5:ae:e6:94:9c:38:cc:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E114F59DC23A30872D43EF9D4D7FE4611207E709
        Validity
            Not Before: Nov  7 13:01:56 2025 GMT
            Not After : Nov  6 13:06:56 2026 GMT
        Subject: CN=527A4A201A47512021DC54A08BF10E591AA07605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:f9:64:eb:e4:36:d7:f1:b9:91:91:14:11:
                    df:40:97:a4:50:59:94:57:26:50:3e:87:c5:72:ec:
                    ed:75:16:02:b0:e7:ff:cf:e7:c1:5a:3d:86:cd:5c:
                    43:96:b3:af:de:97:e0:ff:87:25:ef:15:b4:11:1d:
                    d7:56:ce:ac:e6:c2:fc:4d:d1:b4:85:c6:ac:fd:30:
                    76:bb:04:e3:45:42:86:c7:ff:e3:6c:15:9f:1a:5b:
                    0b:1e:20:10:ca:02:79:f5:78:fd:27:58:6c:8d:13:
                    8b:fc:44:02:af:e4:d2:58:8b:89:fa:2b:dc:ec:92:
                    56:de:b2:a8:9a:20:2c:02:55:9d:11:e2:fd:7e:dc:
                    2f:ad:ec:36:b9:56:e4:f3:83:be:32:d1:57:79:13:
                    c8:91:7c:71:62:2d:e2:57:f6:e6:7c:91:f9:2f:57:
                    59:0e:09:07:8c:bb:d0:18:61:47:eb:6e:73:e8:1b:
                    ac:56:f1:39:25:ac:13:c1:f6:f1:a6:fb:90:19:c1:
                    41:49:f7:79:76:09:47:31:fc:ff:91:6f:fd:76:a6:
                    42:c2:39:9c:33:99:70:0c:89:ee:19:10:84:39:39:
                    50:21:17:05:fa:5e:7d:2b:65:34:12:81:b1:18:14:
                    9f:c5:b3:ee:12:69:8a:04:fe:15:49:18:32:79:ba:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7A:4A:20:1A:47:51:20:21:DC:54:A0:8B:F1:0E:59:1A:A0:76:05
            X509v3 Authority Key Identifier:
                keyid:E1:14:F5:9D:C2:3A:30:87:2D:43:EF:9D:4D:7F:E4:61:12:07:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/E114F59DC23A30872D43EF9D4D7FE4611207E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E114F59DC23A30872D43EF9D4D7FE4611207E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:5a:19:80:2a:b1:d4:3b:9d:51:67:a3:eb:f4:64:74:1d:ae:
         c9:3c:f1:88:51:64:89:3c:e7:9b:cd:e9:a9:69:3d:45:de:07:
         d2:aa:79:f7:e2:05:12:56:92:2b:45:c1:3f:18:8c:0d:a1:fc:
         a8:16:bc:9b:18:aa:29:ce:64:7b:85:65:bb:bf:d0:3d:88:c0:
         e1:20:4d:56:27:30:92:da:2c:3c:1d:1a:c7:18:f8:4f:86:b1:
         1d:73:c5:ad:bc:11:aa:b6:ce:e8:31:30:a9:93:05:86:ab:98:
         b6:a2:e6:28:2d:e1:c6:bb:88:74:23:8e:c1:a0:3a:4f:8d:f8:
         e9:91:8e:f2:2e:cc:1d:a3:25:89:8d:6b:34:98:70:4d:98:85:
         af:42:ff:64:ac:af:9f:98:1b:28:c2:ea:e3:9f:7b:79:e9:77:
         68:2c:f3:b0:04:80:46:67:98:d9:15:f6:31:1e:f3:f3:2a:42:
         e2:3a:14:46:39:ae:91:79:8c:76:61:f7:d2:ba:4a:95:21:5c:
         cb:fa:0f:98:6c:a1:4b:54:2b:42:da:95:63:b6:39:5e:51:01:
         51:d9:f2:79:7f:0a:15:58:26:50:be:52:4d:3b:5d:34:9f:52:
         c4:37:84:53:b7:99:14:b7:23:53:d2:ee:8b:da:31:04:a1:75:
         bc:40:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:36:12 2025 by rpki-client