This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/3137372e32322e3138392e302f32342d3234203d3e20323633313231.roa
File:                     3137372e32322e3138392e302f32342d3234203d3e20323633313231.roa (raw, json)
Hash identifier:          WXBJcwOZbRC5k0wiPE8iMF7IIHaVK8jnQD95Ix3raQc=
Subject key identifier:   E4:DA:4A:23:96:91:24:DA:FF:BF:A0:DB:2F:44:A5:6C:8B:89:6E:D2
Certificate issuer:       /CN=C376E26BEB77393E68155940A07E68C0988916F7
Certificate serial:       02E306031A198DADB11720B8D6210319E4E030BC
Authority key identifier: C3:76:E2:6B:EB:77:39:3E:68:15:59:40:A0:7E:68:C0:98:89:16:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/3137372e32322e3138392e302f32342d3234203d3e20323633313231.roa
Signing time:             Wed 31 Dec 2025 13:20:37 +0000
ROA not before:           Wed 31 Dec 2025 13:15:37 +0000
ROA not after:            Wed 30 Dec 2026 13:20:37 +0000
asID:                     263121
IP address blocks:        177.22.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.crl
                          rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 04:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e3:06:03:1a:19:8d:ad:b1:17:20:b8:d6:21:03:19:e4:e0:30:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C376E26BEB77393E68155940A07E68C0988916F7
        Validity
            Not Before: Dec 31 13:15:37 2025 GMT
            Not After : Dec 30 13:20:37 2026 GMT
        Subject: CN=E4DA4A23969124DAFFBFA0DB2F44A56C8B896ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:20:91:2a:49:c6:a5:b0:25:e3:ad:21:93:
                    d6:f5:cf:f6:04:6d:6d:d8:9c:42:76:8b:4d:06:42:
                    7c:d1:77:1c:03:64:31:0b:4f:42:37:dc:43:5b:35:
                    21:f9:be:06:00:8f:75:68:7d:fa:b8:31:39:6e:19:
                    03:35:aa:fb:76:6d:00:cd:ac:be:d0:ff:a5:b9:27:
                    03:b6:e8:53:d0:4b:63:78:6f:25:8e:04:67:52:77:
                    50:f2:79:1e:29:bc:5f:25:2d:b1:51:5e:e1:89:90:
                    87:03:02:64:1d:57:01:ec:d9:21:00:f8:3f:de:a6:
                    8d:de:6e:7a:0e:77:56:b9:8c:25:9d:fd:84:3b:24:
                    6c:54:7a:ee:02:13:26:f5:67:9e:71:e6:20:05:8d:
                    1b:13:f7:d2:c3:d8:d0:3e:57:72:18:dc:d2:f2:40:
                    dd:da:4e:9a:23:47:9f:60:cd:59:da:d4:bb:7b:2e:
                    90:5d:b0:39:e1:b5:9f:c7:f1:34:68:c8:c8:19:03:
                    48:ac:19:b7:6a:eb:a0:77:a5:d4:5b:90:52:56:44:
                    5c:64:d6:a2:f4:ac:40:7c:52:63:56:a7:6c:8f:72:
                    ef:b5:ec:74:8a:52:af:92:3d:c0:fc:2d:ee:9b:ef:
                    36:59:a6:ff:c7:43:82:9f:f0:a5:59:5a:0f:12:e8:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DA:4A:23:96:91:24:DA:FF:BF:A0:DB:2F:44:A5:6C:8B:89:6E:D2
            X509v3 Authority Key Identifier:
                keyid:C3:76:E2:6B:EB:77:39:3E:68:15:59:40:A0:7E:68:C0:98:89:16:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/3137372e32322e3138392e302f32342d3234203d3e20323633313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:77:82:38:2b:66:de:d6:d9:3f:df:b6:56:d8:83:ae:84:
         f7:d4:93:c4:e8:da:08:0a:e6:15:57:47:71:3c:57:d8:c4:2b:
         ae:54:56:d6:3d:42:de:72:64:86:f8:da:8b:db:d1:31:eb:49:
         2d:dc:f8:95:59:d2:75:25:d7:49:72:4c:11:2b:d8:ff:07:4e:
         73:35:f4:fd:ec:3f:2d:73:8e:5e:7f:2e:63:87:a5:0d:86:ee:
         64:5d:43:41:41:f6:5a:a6:18:84:d4:6b:ea:3d:a2:d1:0b:a7:
         b8:24:81:8a:db:58:cb:82:93:17:d8:16:b3:54:60:b5:96:02:
         bb:59:10:d2:26:ba:00:9b:8d:39:ba:db:06:62:3c:8e:f6:45:
         ef:4f:4d:9b:c1:be:87:16:a9:f4:a8:84:6f:d8:bd:dc:0b:15:
         77:92:be:4e:2c:c8:05:42:30:6f:f8:3d:96:6b:a2:65:fc:d2:
         2d:1d:d0:ed:b8:94:ad:fc:70:6f:96:06:c6:51:c7:23:9a:68:
         9c:9c:85:d5:6e:a9:b8:34:78:8f:2a:20:96:0a:64:7e:5f:5a:
         d6:bc:13:34:e9:fd:ed:ed:c4:01:e1:c4:ab:49:c6:07:49:6d:
         43:35:42:ce:ec:81:72:6b:b1:65:1d:8b:81:9e:dc:9f:04:ee:
         13:d1:83:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 18:22:13 2026 by rpki-client