This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/3137372e32322e3138382e302f32342d3234203d3e20323633313231.roa
File:                     3137372e32322e3138382e302f32342d3234203d3e20323633313231.roa (raw, json)
Hash identifier:          SBsP/ob5lKGPkgNeLYzQL/WERV1syqPtKG6ufxQsThM=
Subject key identifier:   51:13:E7:BB:20:61:BF:AB:BC:F4:D1:42:BA:85:99:42:C0:D4:8B:17
Certificate issuer:       /CN=C376E26BEB77393E68155940A07E68C0988916F7
Certificate serial:       30C52115C141CF2D7894CCED2A8E6E670E834A8C
Authority key identifier: C3:76:E2:6B:EB:77:39:3E:68:15:59:40:A0:7E:68:C0:98:89:16:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/3137372e32322e3138382e302f32342d3234203d3e20323633313231.roa
Signing time:             Wed 31 Dec 2025 13:20:38 +0000
ROA not before:           Wed 31 Dec 2025 13:15:38 +0000
ROA not after:            Wed 30 Dec 2026 13:20:38 +0000
asID:                     263121
IP address blocks:        177.22.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.crl
                          rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 04:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c5:21:15:c1:41:cf:2d:78:94:cc:ed:2a:8e:6e:67:0e:83:4a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C376E26BEB77393E68155940A07E68C0988916F7
        Validity
            Not Before: Dec 31 13:15:38 2025 GMT
            Not After : Dec 30 13:20:38 2026 GMT
        Subject: CN=5113E7BB2061BFABBCF4D142BA859942C0D48B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:7a:e1:00:b0:42:2f:c7:5c:bb:08:d0:60:
                    d7:17:6e:05:ab:46:0e:eb:f2:29:38:49:98:6a:d2:
                    71:38:71:f2:77:44:00:61:df:16:b4:f1:76:93:58:
                    5d:46:4d:f6:ec:96:46:af:14:23:f4:08:10:49:ed:
                    3b:2f:c7:a6:fd:de:2c:37:48:f5:16:a1:8f:c8:ac:
                    09:e9:a8:9d:f6:8a:7f:33:7c:a1:a2:81:2a:6e:a6:
                    7c:fa:f2:0a:80:23:1c:63:1f:84:47:6b:b8:1c:e7:
                    23:0b:b1:1a:81:51:e4:3a:58:1b:f4:2a:95:47:f3:
                    c7:0d:52:3b:0a:19:6d:ad:91:55:42:86:b2:f9:6f:
                    57:e3:0a:2e:3f:f4:71:78:c5:bc:29:ce:4a:93:a2:
                    2b:7d:d6:32:fd:60:54:58:f4:19:52:c5:ac:31:11:
                    c2:a0:90:21:b1:55:c3:61:bb:6d:1d:43:f3:e4:fa:
                    23:81:a1:cd:9b:79:5f:0b:fa:cb:98:81:e0:09:8f:
                    13:47:41:51:7b:50:0a:02:36:14:64:30:f2:1c:58:
                    98:d4:10:a9:6c:94:e6:6e:37:b7:81:b4:f3:4f:22:
                    fd:b1:a4:08:20:43:b1:01:51:b4:cb:d8:9a:b1:63:
                    ea:b0:ba:0c:bf:d9:75:ae:88:64:06:9d:e9:b0:68:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:13:E7:BB:20:61:BF:AB:BC:F4:D1:42:BA:85:99:42:C0:D4:8B:17
            X509v3 Authority Key Identifier:
                keyid:C3:76:E2:6B:EB:77:39:3E:68:15:59:40:A0:7E:68:C0:98:89:16:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/3137372e32322e3138382e302f32342d3234203d3e20323633313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:70:a0:ac:1e:99:7b:ea:9d:88:70:22:cb:7e:d2:d0:2b:68:
         c7:d9:9d:02:6c:ac:a5:96:93:0b:b7:02:e2:da:d1:61:74:8d:
         49:4e:cd:96:c4:b9:ff:17:80:d1:4f:8a:1a:8c:81:9c:d0:26:
         3c:b7:6e:22:0d:58:c2:16:25:d4:6c:e0:de:5b:10:a2:69:80:
         4c:83:16:41:d9:b3:b3:b5:47:dc:de:65:37:57:89:8c:cd:a6:
         4e:55:5b:f8:43:63:09:b5:76:45:81:1b:36:73:ab:fb:46:75:
         8a:53:ac:8c:ac:f5:c4:65:71:5f:32:fe:9d:61:46:63:1a:8a:
         4a:65:73:7c:b4:f5:3a:74:c6:eb:e5:5b:39:7f:a8:a8:21:32:
         87:3f:9d:cf:a5:ac:70:02:cb:52:44:44:de:cf:71:bd:7a:5e:
         21:de:3c:b8:85:02:64:a6:95:2c:55:ba:db:1e:8e:13:88:3e:
         98:3b:da:71:ed:cc:da:8c:46:42:e5:04:9c:b8:7d:0c:d8:4f:
         97:67:74:2c:13:11:4c:1b:87:af:72:37:5b:d1:ac:a0:dd:81:
         3e:b2:a4:84:b6:d0:9b:f1:23:3f:6d:7a:8a:47:dc:b9:f9:1c:
         64:3f:2f:83:f5:49:89:e6:fc:cc:77:0b:a7:ae:d0:88:22:11:
         32:9e:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 18:22:13 2026 by rpki-client