This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/3137372e32322e3139312e302f32342d3234203d3e20323633313231.roa
File:                     3137372e32322e3139312e302f32342d3234203d3e20323633313231.roa (raw, json)
Hash identifier:          5WrfoYsb/8m60etNDNk3fX8tPU6Jb8VNtnZdD+uEZIU=
Subject key identifier:   F1:FB:D6:D8:DE:3E:BB:F2:73:D3:B1:6B:95:40:71:36:09:76:39:EC
Certificate issuer:       /CN=C376E26BEB77393E68155940A07E68C0988916F7
Certificate serial:       725A9B44B34BBBD539350B99DF0D780B72E997AA
Authority key identifier: C3:76:E2:6B:EB:77:39:3E:68:15:59:40:A0:7E:68:C0:98:89:16:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/3137372e32322e3139312e302f32342d3234203d3e20323633313231.roa
Signing time:             Wed 31 Dec 2025 13:20:38 +0000
ROA not before:           Wed 31 Dec 2025 13:15:38 +0000
ROA not after:            Wed 30 Dec 2026 13:20:38 +0000
asID:                     263121
IP address blocks:        177.22.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.crl
                          rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 04:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5a:9b:44:b3:4b:bb:d5:39:35:0b:99:df:0d:78:0b:72:e9:97:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C376E26BEB77393E68155940A07E68C0988916F7
        Validity
            Not Before: Dec 31 13:15:38 2025 GMT
            Not After : Dec 30 13:20:38 2026 GMT
        Subject: CN=F1FBD6D8DE3EBBF273D3B16B95407136097639EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:16:ec:90:dc:40:96:d6:53:1f:d6:52:91:34:
                    4d:27:c6:e2:59:c4:96:38:b1:31:09:d7:e2:cd:99:
                    f1:28:4a:1f:cd:e0:82:9b:d4:9d:f0:e6:c7:41:ff:
                    3b:3a:16:9e:17:26:56:d2:38:41:d1:b0:ce:a4:53:
                    79:95:d6:73:46:88:8f:26:83:a2:b1:3d:25:f4:59:
                    ee:d5:e0:4c:6a:c5:cd:a9:27:86:e2:ac:0f:ab:42:
                    bf:12:81:3f:90:6f:41:5d:e0:4a:ab:20:11:40:cb:
                    29:2f:eb:d0:1a:c9:54:16:d9:59:ea:06:cc:94:66:
                    f4:b0:66:a3:23:38:09:0b:a2:52:b8:48:7d:88:7b:
                    0a:ad:67:7f:12:a1:88:bd:be:5a:54:fc:19:38:50:
                    8e:d7:d2:d7:60:31:4d:78:b4:cb:38:cb:4b:b4:6f:
                    a2:2e:ff:13:3a:31:a9:ab:f3:30:6a:e7:16:e7:d9:
                    72:a4:d4:19:e5:05:3a:b9:92:28:2e:32:07:ab:50:
                    63:00:6d:d1:37:9a:a4:50:8a:5b:fd:c4:86:52:c1:
                    98:0d:ac:f1:b0:60:88:d2:a3:75:5b:9f:f8:ef:c7:
                    84:17:33:18:30:8f:ec:cc:a3:23:72:4f:79:ca:b2:
                    5d:a9:ad:b7:3e:9c:b0:de:45:71:c3:26:32:b7:bd:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FB:D6:D8:DE:3E:BB:F2:73:D3:B1:6B:95:40:71:36:09:76:39:EC
            X509v3 Authority Key Identifier:
                keyid:C3:76:E2:6B:EB:77:39:3E:68:15:59:40:A0:7E:68:C0:98:89:16:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/3137372e32322e3139312e302f32342d3234203d3e20323633313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c3:41:8a:b7:1b:e2:ef:27:59:2a:ec:72:fd:ea:f2:c2:b9:
         54:19:83:f8:f9:43:44:9d:84:30:65:cd:4c:62:48:d7:5a:1c:
         25:b5:5a:69:1b:04:7d:26:8d:44:68:05:2f:eb:e9:ed:52:3b:
         03:19:d6:11:62:a9:8f:4c:b5:1b:d8:23:b0:88:c5:b0:4c:02:
         95:b3:28:a3:62:7c:3c:bd:b0:93:a2:3f:d7:4b:6e:99:06:b1:
         51:4b:22:19:b1:c1:e4:eb:d0:a8:34:7a:08:d4:ed:aa:87:65:
         49:41:b9:69:93:72:92:48:2d:70:77:a6:34:69:e7:84:99:3a:
         13:80:f4:df:25:36:b0:d7:ef:df:c2:16:d3:58:00:d3:ac:42:
         63:4d:ba:5b:1a:53:73:30:5d:65:de:b5:a1:dc:89:03:90:e1:
         78:03:58:38:c8:08:09:72:d5:4b:7b:0f:4f:a9:a3:16:40:ac:
         84:08:71:68:6f:16:52:6c:c1:87:7d:43:be:e5:05:fa:13:44:
         fe:ad:99:2e:83:9c:e6:05:32:28:24:54:a2:3f:9a:bd:4b:1f:
         db:e4:8d:71:47:69:a6:60:b1:64:2e:e1:df:01:76:1e:9e:aa:
         c0:2f:65:30:b0:fc:1b:f7:c2:15:71:7c:f5:7e:d6:78:05:0f:
         f2:fa:18:52
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUclqbRLNLu9U5NQuZ3w14C3Lpl6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3NkUyNkJFQjc3MzkzRTY4MTU1OTQwQTA3RTY4QzA5
ODg5MTZGNzAeFw0yNTEyMzExMzE1MzhaFw0yNjEyMzAxMzIwMzhaMDMxMTAvBgNV
BAMTKEYxRkJENkQ4REUzRUJCRjI3M0QzQjE2Qjk1NDA3MTM2MDk3NjM5RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwFuyQ3ECW1lMf1lKRNE0nxuJZ
xJY4sTEJ1+LNmfEoSh/N4IKb1J3w5sdB/zs6Fp4XJlbSOEHRsM6kU3mV1nNGiI8m
g6KxPSX0We7V4Exqxc2pJ4birA+rQr8SgT+Qb0Fd4EqrIBFAyykv69AayVQW2Vnq
BsyUZvSwZqMjOAkLolK4SH2IewqtZ38SoYi9vlpU/Bk4UI7X0tdgMU14tMs4y0u0
b6Iu/xM6Mamr8zBq5xbn2XKk1BnlBTq5kiguMgerUGMAbdE3mqRQilv9xIZSwZgN
rPGwYIjSo3Vbn/jvx4QXMxgwj+zMoyNyT3nKsl2prbc+nLDeRXHDJjK3vZm7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8fvW2N4+u/Jz07FrlUBxNgl2OewwHwYDVR0j
BBgwFoAUw3bia+t3OT5oFVlAoH5owJiJFvcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF6dWZWeFdOZEhwOUV3TndBVkF1U3F1SmJ5Z1RBM2FiSDhBWkFtckJx
WnQvMC9DMzc2RTI2QkVCNzczOTNFNjgxNTU5NDBBMDdFNjhDMDk4ODkxNkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNzZFMjZCRUI3NzM5M0U2
ODE1NTk0MEEwN0U2OEMwOTg4OTE2RjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxenVmVnhXTmRIcDlFd053QVZBdVNxdUpieWdUQTNhYkg4QVpBbXJCcVp0LzAv
MzEzNzM3MmUzMjMyMmUzMTM5MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxFr8wDQYJKoZIhvcNAQELBQADggEBAADDQYq3
G+LvJ1kq7HL96vLCuVQZg/j5Q0SdhDBlzUxiSNdaHCW1WmkbBH0mjURoBS/r6e1S
OwMZ1hFiqY9MtRvYI7CIxbBMApWzKKNifDy9sJOiP9dLbpkGsVFLIhmxweTr0Kg0
egjU7aqHZUlBuWmTcpJILXB3pjRp54SZOhOA9N8lNrDX79/CFtNYANOsQmNNulsa
U3MwXWXetaHciQOQ4XgDWDjICAly1Ut7D0+poxZArIQIcWhvFlJswYd9Q77lBfoT
RP6tmS6DnOYFMigkVKI/mr1LH9vkjXFHaaZgsWQu4d8Bdh6eqsAvZTCw/Bv3whVx
fPV+1ngFD/L6GFI=
-----END CERTIFICATE-----
Generated at Fri Jan 2 18:22:14 2026 by rpki-client