This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134372e302f32342d3234203d3e20323633343536.roa
File:                     3137372e3139302e3134372e302f32342d3234203d3e20323633343536.roa (raw, json)
Hash identifier:          QBSDGFA9J+mA3kn+PnIH2m8MBg3DMsUSyswSi2K6iL8=
Subject key identifier:   08:A9:8D:D3:55:68:DA:C9:A4:C3:D5:DC:D6:5D:01:D6:D4:E6:18:32
Certificate issuer:       /CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C
Certificate serial:       74C7727B0A6AB441B7EA82688BC9960FF0AEEE40
Authority key identifier: 1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134372e302f32342d3234203d3e20323633343536.roa
Signing time:             Wed 31 Dec 2025 13:13:13 +0000
ROA not before:           Wed 31 Dec 2025 13:08:13 +0000
ROA not after:            Wed 30 Dec 2026 13:13:13 +0000
asID:                     263456
IP address blocks:        177.190.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl
                          rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 02:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c7:72:7b:0a:6a:b4:41:b7:ea:82:68:8b:c9:96:0f:f0:ae:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C
        Validity
            Not Before: Dec 31 13:08:13 2025 GMT
            Not After : Dec 30 13:13:13 2026 GMT
        Subject: CN=08A98DD35568DAC9A4C3D5DCD65D01D6D4E61832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:bb:e7:2a:d5:7c:a5:19:70:75:ba:23:1d:b9:
                    8b:15:12:2f:4e:b6:e0:28:b6:39:b7:62:5f:91:57:
                    94:89:7b:e8:ea:e9:1f:a7:74:5a:5e:8e:17:ac:47:
                    f7:e4:f0:ff:06:2d:df:81:77:2c:d3:6d:93:53:73:
                    3f:bf:75:e4:8d:8d:fd:5f:fe:8c:ac:fb:d1:38:ae:
                    36:42:1b:7b:42:ed:47:75:f7:c8:c1:18:ab:94:df:
                    60:e2:c5:b2:cd:17:90:d4:e6:d5:6e:43:c3:56:4e:
                    f9:ab:18:fd:e7:49:e2:6d:ea:c5:41:f2:aa:b0:02:
                    0a:cb:27:c1:e2:47:ed:80:46:13:ae:be:2a:93:3c:
                    18:67:be:50:0c:30:4e:3a:00:69:4a:46:bd:79:ba:
                    1c:2d:49:f5:a3:b5:c3:d7:98:91:f6:be:44:53:95:
                    ae:38:91:83:7a:f5:4f:33:d7:1b:fe:30:e7:84:bb:
                    fa:60:ef:c0:48:11:63:ac:13:21:2d:66:09:62:de:
                    e4:7e:4d:50:ba:7d:21:eb:5e:fe:89:6c:f8:e4:9f:
                    7f:1c:c0:e8:21:e9:4a:8c:23:0d:c8:fe:28:b3:c8:
                    50:75:f0:23:7b:60:ee:ca:f0:9b:40:88:1c:87:d5:
                    c9:88:e2:69:c2:bd:45:fd:39:41:a8:e9:a2:4c:c2:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A9:8D:D3:55:68:DA:C9:A4:C3:D5:DC:D6:5D:01:D6:D4:E6:18:32
            X509v3 Authority Key Identifier:
                keyid:1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134372e302f32342d3234203d3e20323633343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:86:87:12:c2:12:c1:86:7a:b3:cd:2f:ba:d1:48:2b:2a:b4:
         20:34:52:8f:12:c4:2a:03:30:d2:a5:13:09:62:6d:34:ca:d8:
         2e:aa:64:8a:fb:b9:32:67:f2:5f:3a:bb:d0:2e:16:58:65:d6:
         32:da:41:76:72:64:1f:12:b1:43:c3:cd:e8:a8:c5:e0:26:3e:
         d3:f5:12:39:95:59:4a:e8:e4:de:0c:fb:28:db:fc:09:fc:b9:
         cf:00:cd:ac:39:3e:00:c4:52:46:04:d6:6f:29:8c:ab:75:74:
         d8:ad:75:aa:01:d0:18:0f:b8:69:d5:13:0f:f4:ae:94:fe:88:
         72:0c:65:24:36:de:8f:19:e6:cc:f0:8a:a0:de:e2:3d:9e:1b:
         b9:f3:ff:e9:90:b8:86:26:1b:c5:49:af:d4:ef:01:71:80:51:
         de:89:86:06:de:9c:1a:f3:06:85:6a:5d:2c:18:51:c8:42:ba:
         d0:27:98:af:44:1c:06:2b:fd:d9:fb:6d:60:50:56:f8:63:ea:
         56:92:68:0b:38:33:c4:d5:5d:97:5d:4f:ba:8b:40:58:e3:c1:
         9b:91:cd:a1:c5:ca:51:fd:c9:9a:54:d2:2e:de:aa:f7:00:46:
         da:01:f9:fb:23:9d:f5:06:fd:ed:5a:8c:d2:10:5f:b8:6f:9f:
         93:74:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:34:08 2026 by rpki-client