This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/3137372e31322e3133362e302f32342d3234203d3e20323637343634.roa
File:                     3137372e31322e3133362e302f32342d3234203d3e20323637343634.roa (raw, json)
Hash identifier:          +L9XZMn8px0gbUZyNoGlgceC3Tu/773VgKePzQH/pas=
Subject key identifier:   1E:9C:43:BC:87:BB:C2:2C:5E:0F:49:7D:B4:69:A4:28:4D:43:2D:45
Certificate issuer:       /CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
Certificate serial:       72CB84574292222919D09E0D5C755508BD7E8A50
Authority key identifier: 5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/3137372e31322e3133362e302f32342d3234203d3e20323637343634.roa
Signing time:             Mon 08 Dec 2025 18:41:13 +0000
ROA not before:           Mon 08 Dec 2025 18:36:13 +0000
ROA not after:            Mon 07 Dec 2026 18:41:13 +0000
asID:                     267464
IP address blocks:        177.12.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl
                          rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cb:84:57:42:92:22:29:19:d0:9e:0d:5c:75:55:08:bd:7e:8a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
        Validity
            Not Before: Dec  8 18:36:13 2025 GMT
            Not After : Dec  7 18:41:13 2026 GMT
        Subject: CN=1E9C43BC87BBC22C5E0F497DB469A4284D432D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e0:c3:ae:3c:d0:1c:e0:c9:83:93:19:db:04:
                    d5:9a:bd:94:c4:17:86:da:b0:50:a1:9a:ae:8d:88:
                    85:33:25:e3:b1:e1:38:5e:e4:a8:c3:c6:27:bc:cd:
                    31:8c:5c:01:34:bd:83:ea:3e:1d:cf:ed:f5:16:10:
                    38:93:e4:ff:c8:26:4e:20:dc:97:85:de:c1:b0:35:
                    e5:f6:a9:cb:05:62:4c:d4:0f:58:a2:53:15:df:47:
                    a4:d5:41:11:ce:9d:37:0f:1f:a0:e8:53:7f:32:6c:
                    b2:bf:4c:d8:15:d6:f2:9b:a9:17:d6:5b:0f:65:aa:
                    84:ae:66:01:db:d2:48:dc:16:45:30:36:ef:59:0e:
                    2f:53:13:13:7b:92:6a:f7:e5:2b:93:6d:e1:8c:46:
                    dc:f8:6d:67:9c:48:6e:52:4e:f3:12:72:76:d2:71:
                    60:c8:97:5c:a3:68:be:fd:28:c6:c6:11:4e:ff:b0:
                    20:6f:e0:3c:d8:8d:c2:29:2d:8e:98:95:3a:d1:90:
                    4e:ff:a8:63:5d:fe:09:bd:1d:a8:b9:fa:db:b3:55:
                    11:61:16:4c:86:65:93:53:c2:fb:6a:49:e2:ec:c8:
                    49:4a:be:cd:1f:03:96:0f:93:ba:6a:23:64:c6:37:
                    95:9c:03:08:ec:d8:d6:89:e3:33:29:98:ab:82:86:
                    9e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:43:BC:87:BB:C2:2C:5E:0F:49:7D:B4:69:A4:28:4D:43:2D:45
            X509v3 Authority Key Identifier:
                keyid:5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/3137372e31322e3133362e302f32342d3234203d3e20323637343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:fe:2b:0b:6d:71:c6:44:fb:d5:b3:d6:fc:46:7f:49:3d:d8:
         25:40:70:c5:28:dd:0e:3c:da:8c:bc:91:77:2c:84:f1:1e:2a:
         64:63:65:13:66:39:77:84:23:59:3d:20:ca:bc:d0:dc:2a:f4:
         6d:78:77:7c:d4:9e:04:6b:59:80:c6:b7:da:b0:5d:42:4d:b7:
         07:d3:c5:dd:7e:29:7b:47:ac:68:86:68:0d:36:e6:3a:85:7f:
         7e:2a:b0:a3:85:12:4b:ea:be:3d:04:30:fd:54:2d:e4:20:7f:
         5e:a4:bc:29:e4:94:c1:a8:1f:75:13:47:28:35:ae:48:d3:97:
         c6:86:6c:84:7b:99:54:9f:87:5c:be:56:7a:6b:ad:24:2a:04:
         7e:bc:46:4f:ad:32:f7:79:a7:16:56:b4:56:33:74:b3:61:4f:
         10:9a:e9:06:10:e1:d0:4c:b2:1e:b3:85:7d:1b:36:01:1d:18:
         bb:88:a5:83:aa:29:99:4c:36:c6:53:23:7a:d8:54:cc:92:af:
         bf:33:ab:3f:6e:73:38:75:8d:18:ea:95:1d:b0:ee:89:e2:b5:
         4e:ed:da:04:5a:86:85:5d:04:b6:c3:b2:98:fd:ab:0b:4e:09:
         2f:24:bf:f2:12:39:22:21:26:c7:09:25:22:51:4c:7d:78:dc:
         15:b7:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:35 2025 by rpki-client