This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e34382e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          wA8bjGTT693sIwFeie9y9T4/Ne0IqL83pZwI9S2D6wc=
Subject key identifier:   B0:0B:71:08:16:CF:ED:EE:02:18:38:8C:62:31:F2:A0:72:F8:57:3B
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       0AB2E44B5A1244B7637E23B55150A558C21672BE
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 19 Dec 2025 16:50:00 +0000
ROA not before:           Fri 19 Dec 2025 16:45:00 +0000
ROA not after:            Fri 18 Dec 2026 16:50:00 +0000
asID:                     52930
IP address blocks:        177.185.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 01:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b2:e4:4b:5a:12:44:b7:63:7e:23:b5:51:50:a5:58:c2:16:72:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Dec 19 16:45:00 2025 GMT
            Not After : Dec 18 16:50:00 2026 GMT
        Subject: CN=B00B710816CFEDEE0218388C6231F2A072F8573B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:c2:e6:c3:25:06:e1:3e:20:d6:ac:7f:20:
                    c3:85:29:da:96:7a:ff:b9:93:48:d1:03:8b:bf:27:
                    39:96:91:8d:df:83:d8:ac:66:6b:da:d5:fd:61:1d:
                    90:88:98:05:6d:da:c2:98:48:8e:f6:c6:ba:49:bc:
                    b8:68:44:19:66:84:40:cf:1f:9a:c4:d7:a6:bf:f0:
                    ec:61:3f:e2:b6:12:9e:68:23:bf:e6:7b:42:84:c4:
                    3d:1c:3b:1a:2c:e0:b0:29:0b:47:28:2f:8c:62:08:
                    f4:6a:f4:18:06:c4:2a:db:85:57:4f:ef:13:be:ad:
                    00:d2:98:79:d8:1f:0c:af:47:5a:48:d4:48:c3:fb:
                    52:b3:aa:b2:4c:62:9c:97:e1:c5:c0:f6:4a:ad:b8:
                    03:0b:07:4f:c8:41:0c:19:ce:95:cb:06:69:fd:b8:
                    36:37:1f:03:5b:a2:91:1b:64:07:10:ab:57:b7:dc:
                    ef:77:9f:03:de:1b:6b:51:78:9a:f0:f3:54:ee:0b:
                    4d:ae:bc:2f:6f:e7:a4:11:dc:39:49:4c:e5:6c:6e:
                    2d:8e:dc:2d:ee:64:52:e8:f1:74:00:49:05:26:1e:
                    94:2f:e5:cf:62:4c:34:3f:7c:df:9d:5c:02:4f:9f:
                    54:cd:7c:36:76:f2:f9:57:c5:44:9a:bc:a3:a3:01:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0B:71:08:16:CF:ED:EE:02:18:38:8C:62:31:F2:A0:72:F8:57:3B
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b9:0a:a7:bb:7b:bd:b0:f8:9d:6a:7e:31:00:97:7c:49:e3:
         f2:6b:a8:89:b5:74:19:de:80:bd:aa:de:3c:a3:80:de:84:81:
         3a:c9:fa:95:99:bb:e9:75:02:90:e7:da:94:bd:b1:83:ea:86:
         38:4e:7f:97:0a:e3:e4:6f:12:c0:c5:b5:a2:8e:48:a9:6b:ea:
         5a:9a:ac:f6:8f:3d:76:ff:f3:fd:28:c2:1d:d8:ec:c2:f7:8f:
         76:5b:2a:d0:f9:6a:d4:fb:f9:dd:e4:a6:1e:ab:8b:db:7c:3c:
         d4:fd:98:b0:6e:3c:be:f6:99:5d:71:29:a1:8a:e9:0e:5b:b5:
         04:e9:4a:59:d9:d1:43:f2:7b:53:a4:53:1e:52:00:a0:f6:e5:
         47:60:40:93:5a:55:f6:53:67:21:43:c9:96:f9:2c:3f:20:7f:
         3e:33:53:06:7c:bd:30:f3:96:79:54:bc:bc:0c:c0:1e:80:47:
         6f:df:87:1c:24:ea:71:03:73:86:e2:7a:a3:21:ca:4f:b1:6a:
         7e:a9:94:67:51:e0:ed:01:f0:9b:c8:74:ea:90:d7:c0:90:dc:
         60:ff:8f:56:2d:79:2d:99:7f:d8:bd:1a:23:c3:15:16:cc:cc:
         b0:9f:2f:4b:ad:6e:bd:9f:ce:c6:be:05:5d:62:1e:56:34:1a:
         2a:4d:29:bb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCrLkS1oSRLdjfiO1UVClWMIWcr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBGOUY3NUUyRkYyMTlCMkJERDYyNUVCQkMyOTRBOTg5
QkFCMEVCRDAeFw0yNTEyMTkxNjQ1MDBaFw0yNjEyMTgxNjUwMDBaMDMxMTAvBgNV
BAMTKEIwMEI3MTA4MTZDRkVERUUwMjE4Mzg4QzYyMzFGMkEwNzJGODU3M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IMLmwyUG4T4g1qx/IMOFKdqW
ev+5k0jRA4u/JzmWkY3fg9isZmva1f1hHZCImAVt2sKYSI72xrpJvLhoRBlmhEDP
H5rE16a/8OxhP+K2Ep5oI7/me0KExD0cOxos4LApC0coL4xiCPRq9BgGxCrbhVdP
7xO+rQDSmHnYHwyvR1pI1EjD+1KzqrJMYpyX4cXA9kqtuAMLB0/IQQwZzpXLBmn9
uDY3HwNbopEbZAcQq1e33O93nwPeG2tReJrw81TuC02uvC9v56QR3DlJTOVsbi2O
3C3uZFLo8XQASQUmHpQv5c9iTDQ/fN+dXAJPn1TNfDZ28vlXxUSavKOjAYwbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsAtxCBbP7e4CGDiMYjHyoHL4VzswHwYDVR0j
BBgwFoAUsPn3Xi/yGbK91iXrvClKmJurDr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6
anIvMC9CMEY5Rjc1RTJGRjIxOUIyQkRENjI1RUJCQzI5NEE5ODlCQUIwRUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRjlGNzVFMkZGMjE5QjJC
REQ2MjVFQkJDMjk0QTk4OUJBQjBFQkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAv
MzEzNzM3MmUzMTM4MzUyZTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzkzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsbkwMA0GCSqGSIb3DQEBCwUAA4IBAQBquQqnu3u9
sPidan4xAJd8SePya6iJtXQZ3oC9qt48o4DehIE6yfqVmbvpdQKQ59qUvbGD6oY4
Tn+XCuPkbxLAxbWijkipa+pamqz2jz12//P9KMId2OzC9492WyrQ+WrU+/nd5KYe
q4vbfDzU/Ziwbjy+9pldcSmhiukOW7UE6UpZ2dFD8ntTpFMeUgCg9uVHYECTWlX2
U2chQ8mW+Sw/IH8+M1MGfL0w85Z5VLy8DMAegEdv34ccJOpxA3OG4nqjIcpPsWp+
qZRnUeDtAfCbyHTqkNfAkNxg/49WLXktmX/YvRojwxUWzMywny9LrW69n87GvgVd
Yh5WNBoqTSm7
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:59:11 2025 by rpki-client