This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/3137372e31322e3133352e302f32342d3234203d3e20323637343634.roa
File:                     3137372e31322e3133352e302f32342d3234203d3e20323637343634.roa (raw, json)
Hash identifier:          hAmV26TM20L8FrAarxvnW4pCIcqsq+K8+y2ocxLtGzM=
Subject key identifier:   84:21:E9:B1:BC:F7:70:75:40:F8:EB:B5:05:3F:05:43:15:B4:E5:CF
Certificate issuer:       /CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
Certificate serial:       1C230B2771CE976ED29283EDBC27A3F159B59074
Authority key identifier: 5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/3137372e31322e3133352e302f32342d3234203d3e20323637343634.roa
Signing time:             Mon 08 Dec 2025 18:41:09 +0000
ROA not before:           Mon 08 Dec 2025 18:36:09 +0000
ROA not after:            Mon 07 Dec 2026 18:41:09 +0000
asID:                     267464
IP address blocks:        177.12.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl
                          rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:23:0b:27:71:ce:97:6e:d2:92:83:ed:bc:27:a3:f1:59:b5:90:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
        Validity
            Not Before: Dec  8 18:36:09 2025 GMT
            Not After : Dec  7 18:41:09 2026 GMT
        Subject: CN=8421E9B1BCF7707540F8EBB5053F054315B4E5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:16:db:28:8c:2e:e3:0f:da:68:58:b7:f3:
                    e9:ca:a6:4d:b8:8b:de:79:c4:f7:15:03:d0:c2:55:
                    97:f3:bc:c2:a4:e3:10:ec:43:8f:91:31:33:8d:b8:
                    62:a7:89:a3:0d:88:49:a8:10:6e:f5:c8:86:ce:11:
                    46:c9:fe:76:70:ad:48:c8:a4:ab:9d:33:8c:44:c3:
                    9a:07:94:76:07:b7:5f:11:2d:f4:7c:19:99:c9:f8:
                    7f:14:9e:42:fa:62:53:44:f2:c5:bb:0e:1f:a0:b5:
                    0d:5d:4c:d1:75:8a:00:62:6e:2c:b5:94:f6:59:1f:
                    7b:ec:5b:b5:b0:b2:4c:dc:c0:f2:c1:ed:26:e5:7d:
                    66:26:84:bb:3f:3a:05:87:6b:21:7f:43:2c:28:41:
                    d7:08:28:08:8c:13:2a:2a:3b:9a:e3:23:c7:91:55:
                    58:11:0f:dd:69:0a:bb:e2:7c:75:cb:7a:ef:f2:be:
                    75:7c:7a:bc:3b:5a:e9:1c:54:7a:f6:2b:75:61:1e:
                    c8:c2:ec:06:9a:21:3c:29:80:ff:32:d7:d1:f5:2f:
                    5e:ee:1c:a3:ab:2d:c4:23:3c:3f:ec:0c:b0:6f:80:
                    cd:cb:24:4f:2c:17:04:c5:92:66:86:4d:81:55:61:
                    78:c7:2c:74:d7:42:09:7a:6f:a4:23:b8:ea:70:cf:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:E9:B1:BC:F7:70:75:40:F8:EB:B5:05:3F:05:43:15:B4:E5:CF
            X509v3 Authority Key Identifier:
                keyid:5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/3137372e31322e3133352e302f32342d3234203d3e20323637343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:48:27:aa:2e:0f:de:4b:f4:ec:a8:2e:11:1b:fa:8a:5f:
         ac:12:ca:4d:be:12:1d:fc:80:e6:8b:62:7d:0b:76:f2:a0:b9:
         07:28:c5:83:99:d4:47:1e:00:f5:b9:6f:ec:fd:72:67:de:fc:
         3c:88:68:b5:67:60:38:97:64:ca:28:63:60:7d:0c:d7:9d:31:
         e3:77:f6:ba:5e:47:c5:d2:b2:c5:f0:82:51:33:f1:28:1d:e5:
         07:39:62:31:1b:4b:ea:bd:12:c0:a7:40:45:bb:2d:ce:33:53:
         d2:58:4b:c1:40:56:bd:63:ad:56:18:c9:e4:19:83:ab:00:0f:
         dd:fb:a2:d8:e0:e4:d4:59:70:8f:39:59:58:88:e0:fd:b4:0e:
         48:30:0a:c5:e4:d9:12:8d:f8:53:c2:c1:ef:9d:40:98:61:bb:
         3b:7d:dc:67:a6:96:82:78:b8:e5:56:1c:13:0a:5b:0e:0d:c8:
         f0:49:8e:db:ee:df:3c:76:26:85:bf:e5:2d:a3:f8:19:f9:0b:
         87:7d:75:5f:da:d8:e7:4d:93:c2:97:30:39:83:11:00:8a:14:
         e5:64:31:39:cb:cb:23:32:30:21:4b:75:c0:66:2f:9e:48:d3:
         bf:2c:1b:d4:52:f1:00:11:c9:66:cc:29:43:2e:4f:9d:4e:e7:
         5d:d0:7c:1f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHCMLJ3HOl27SkoPtvCej8Vm1kHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM4Q0I3NTlENDM2QzVFODlDNURBQUVCNjI4RDI3QTJF
QUNBNzJDMDAeFw0yNTEyMDgxODM2MDlaFw0yNjEyMDcxODQxMDlaMDMxMTAvBgNV
BAMTKDg0MjFFOUIxQkNGNzcwNzU0MEY4RUJCNTA1M0YwNTQzMTVCNEU1Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3BbbKIwu4w/aaFi38+nKpk24
i955xPcVA9DCVZfzvMKk4xDsQ4+RMTONuGKniaMNiEmoEG71yIbOEUbJ/nZwrUjI
pKudM4xEw5oHlHYHt18RLfR8GZnJ+H8UnkL6YlNE8sW7Dh+gtQ1dTNF1igBibiy1
lPZZH3vsW7WwskzcwPLB7SblfWYmhLs/OgWHayF/QywoQdcIKAiMEyoqO5rjI8eR
VVgRD91pCrvifHXLeu/yvnV8erw7WukcVHr2K3VhHsjC7AaaITwpgP8y19H1L17u
HKOrLcQjPD/sDLBvgM3LJE8sFwTFkmaGTYFVYXjHLHTXQgl6b6QjuOpwz7jPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhCHpsbz3cHVA+Ou1BT8FQxW05c8wHwYDVR0j
BBgwFoAUXIy3WdQ2xeicXarrYo0nourKcsAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzFlMTVGS2d3ZDJMMkxoc0xoV1c2dnVvZ0s2NnF6WVViZk1kRTNLN2ta
N1IvMC81QzhDQjc1OUQ0MzZDNUU4OUM1REFBRUI2MjhEMjdBMkVBQ0E3MkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDOENCNzU5RDQzNkM1RTg5
QzVEQUFFQjYyOEQyN0EyRUFDQTcyQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cxZTE1Rktnd2QyTDJMaHNMaFdXNnZ1b2dLNjZxellVYmZNZEUzSzdrWjdSLzAv
MzEzNzM3MmUzMTMyMmUzMTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxDIcwDQYJKoZIhvcNAQELBQADggEBAFwQSCeq
Lg/eS/TsqC4RG/qKX6wSyk2+Eh38gOaLYn0LdvKguQcoxYOZ1EceAPW5b+z9cmfe
/DyIaLVnYDiXZMooY2B9DNedMeN39rpeR8XSssXwglEz8Sgd5Qc5YjEbS+q9EsCn
QEW7Lc4zU9JYS8FAVr1jrVYYyeQZg6sAD937otjg5NRZcI85WViI4P20DkgwCsXk
2RKN+FPCwe+dQJhhuzt93GemloJ4uOVWHBMKWw4NyPBJjtvu3zx2JoW/5S2j+Bn5
C4d9dV/a2OdNk8KXMDmDEQCKFOVkMTnLyyMyMCFLdcBmL55I078sG9RS8QARyWbM
KUMuT51O513QfB8=
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:29 2025 by rpki-client