This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137362e302f32332d3234203d3e20323731313735.roa
File:                     3137392e35312e3137362e302f32332d3234203d3e20323731313735.roa (raw, json)
Hash identifier:          +poPvZLrUraCnucbl4+mSJTJ8I+NA4YB7d8JHcxuQ64=
Subject key identifier:   BB:2B:1D:0F:35:A1:C0:0F:1D:12:89:88:EE:D0:09:47:84:F6:11:9D
Certificate issuer:       /CN=C424690F0D40D5A947CD0515B923B426E1FD684B
Certificate serial:       5C739A220B77558734E1D8FF61420B3BF292D42B
Authority key identifier: C4:24:69:0F:0D:40:D5:A9:47:CD:05:15:B9:23:B4:26:E1:FD:68:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137362e302f32332d3234203d3e20323731313735.roa
Signing time:             Fri 12 Dec 2025 12:36:42 +0000
ROA not before:           Fri 12 Dec 2025 12:31:42 +0000
ROA not after:            Fri 11 Dec 2026 12:36:42 +0000
asID:                     271175
IP address blocks:        179.51.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:73:9a:22:0b:77:55:87:34:e1:d8:ff:61:42:0b:3b:f2:92:d4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C424690F0D40D5A947CD0515B923B426E1FD684B
        Validity
            Not Before: Dec 12 12:31:42 2025 GMT
            Not After : Dec 11 12:36:42 2026 GMT
        Subject: CN=BB2B1D0F35A1C00F1D128988EED0094784F6119D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:69:3b:9d:a1:94:5b:55:b6:23:d7:00:c9:72:
                    df:cb:12:5e:69:20:20:bd:37:01:9f:5f:e7:73:8d:
                    1d:32:bf:ef:30:39:4e:dd:32:2d:12:4a:82:d6:ab:
                    7c:54:5c:43:85:d8:2d:ec:23:63:97:01:0b:71:2c:
                    13:05:04:db:36:7d:70:b5:6d:de:58:c0:f1:ee:b5:
                    05:d0:c3:b3:d7:18:98:c6:05:0d:fb:36:22:a1:f0:
                    87:ad:6c:a8:01:5f:97:ea:f6:94:ba:35:05:21:b6:
                    e8:b1:47:91:41:98:a6:17:f0:ae:f9:db:74:b8:65:
                    bc:ae:23:fb:4f:b3:88:d5:98:8d:62:83:ad:24:28:
                    4d:66:6c:db:0c:0f:b3:46:3b:cc:9e:94:a9:0f:cb:
                    e7:9d:17:42:f4:42:53:b6:b7:b4:b0:eb:1d:ac:fa:
                    ca:31:2a:72:18:fe:c8:1e:b9:ae:ec:31:79:2b:17:
                    ec:94:54:b0:3e:3d:da:42:4b:1d:dc:e9:69:87:6b:
                    17:5c:fd:ef:2c:71:57:60:02:7a:c4:b8:2a:61:9b:
                    a9:38:d6:1e:cf:e9:18:08:c1:6a:e3:6a:2b:b5:2e:
                    07:d3:12:ce:96:bd:85:a9:5b:9f:7a:03:ff:d9:3d:
                    4d:99:25:87:23:d9:9e:84:a7:dc:b6:a1:6e:c1:a9:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2B:1D:0F:35:A1:C0:0F:1D:12:89:88:EE:D0:09:47:84:F6:11:9D
            X509v3 Authority Key Identifier:
                keyid:C4:24:69:0F:0D:40:D5:A9:47:CD:05:15:B9:23:B4:26:E1:FD:68:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137362e302f32332d3234203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:8c:a7:b8:f6:7a:9b:be:32:14:e3:1e:a3:6d:cc:81:cb:7e:
         64:3f:7c:9b:85:92:25:21:0a:59:15:92:33:0f:3d:12:aa:a1:
         ef:80:02:ea:f9:3d:68:df:72:7e:a4:4b:8a:77:b3:59:6f:ea:
         be:e4:fe:9d:9c:b0:59:18:bd:ff:ce:db:29:1a:ad:22:6a:90:
         0d:5e:30:c9:21:d1:53:eb:d4:e0:73:4e:c5:e7:ef:95:e5:72:
         8d:16:b7:21:6d:db:75:64:23:a4:9a:53:dc:64:0b:0f:e3:e3:
         9b:db:3b:83:14:65:15:4e:71:1b:26:58:41:79:9b:69:5c:3c:
         cd:a7:b2:fa:1b:9a:4d:a6:69:3a:6c:3d:38:38:9b:22:d0:73:
         39:1c:80:b6:02:94:b4:b3:f1:ce:32:24:56:38:84:b1:52:11:
         e3:48:46:63:25:24:f7:93:a2:d0:6a:4a:c5:44:8f:0e:65:45:
         02:ab:09:18:bd:17:6c:d9:06:03:10:d4:71:82:b0:e7:20:f4:
         14:4c:9c:4f:ff:e7:e0:1d:3c:a2:3a:27:1e:dc:95:57:33:7c:
         14:f3:8b:b9:9e:04:3c:cb:6c:a3:b1:9c:35:7e:50:c3:84:18:
         66:c5:f4:f9:0d:df:e9:68:e7:49:15:e6:6b:02:91:48:c0:1a:
         7f:1a:d2:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXHOaIgt3VYc04dj/YUILO/KS1CswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQyNDY5MEYwRDQwRDVBOTQ3Q0QwNTE1QjkyM0I0MjZF
MUZENjg0QjAeFw0yNTEyMTIxMjMxNDJaFw0yNjEyMTExMjM2NDJaMDMxMTAvBgNV
BAMTKEJCMkIxRDBGMzVBMUMwMEYxRDEyODk4OEVFRDAwOTQ3ODRGNjExOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoaTudoZRbVbYj1wDJct/LEl5p
ICC9NwGfX+dzjR0yv+8wOU7dMi0SSoLWq3xUXEOF2C3sI2OXAQtxLBMFBNs2fXC1
bd5YwPHutQXQw7PXGJjGBQ37NiKh8IetbKgBX5fq9pS6NQUhtuixR5FBmKYX8K75
23S4ZbyuI/tPs4jVmI1ig60kKE1mbNsMD7NGO8yelKkPy+edF0L0QlO2t7Sw6x2s
+soxKnIY/sgeua7sMXkrF+yUVLA+PdpCSx3c6WmHaxdc/e8scVdgAnrEuCphm6k4
1h7P6RgIwWrjaiu1LgfTEs6WvYWpW596A//ZPU2ZJYcj2Z6Ep9y2oW7BqQqrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuysdDzWhwA8dEomI7tAJR4T2EZ0wHwYDVR0j
BBgwFoAUxCRpDw1A1alHzQUVuSO0JuH9aEswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZ6cHhGbVRoYUw3UW5uVWo5cGhXRnZuQ3J1aEdGaHlGb1VMUW5VN1di
a20vMC9DNDI0NjkwRjBENDBENUE5NDdDRDA1MTVCOTIzQjQyNkUxRkQ2ODRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0MjQ2OTBGMEQ0MEQ1QTk0
N0NEMDUxNUI5MjNCNDI2RTFGRDY4NEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGenB4Rm1UaGFMN1FublVqOXBoV0Z2bkNydWhHRmh5Rm9VTFFuVTdXYmttLzAv
MzEzNzM5MmUzNTMxMmUzMTM3MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzM7AwDQYJKoZIhvcNAQELBQADggEBAHeMp7j2
epu+MhTjHqNtzIHLfmQ/fJuFkiUhClkVkjMPPRKqoe+AAur5PWjfcn6kS4p3s1lv
6r7k/p2csFkYvf/O2ykarSJqkA1eMMkh0VPr1OBzTsXn75Xlco0WtyFt23VkI6Sa
U9xkCw/j45vbO4MUZRVOcRsmWEF5m2lcPM2nsvobmk2maTpsPTg4myLQczkcgLYC
lLSz8c4yJFY4hLFSEeNIRmMlJPeTotBqSsVEjw5lRQKrCRi9F2zZBgMQ1HGCsOcg
9BRMnE//5+AdPKI6Jx7clVczfBTzi7meBDzLbKOxnDV+UMOEGGbF9PkN3+lo50kV
5msCkUjAGn8a0vg=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:15:57 2025 by rpki-client