This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e36322e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e36322e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          HWmYzk6I88iRHP6iUi69lVTy4w2DHatLFVlG3beTc54=
Subject key identifier:   D6:10:EB:24:1E:68:FA:F2:51:F0:24:9D:23:14:49:63:88:3B:D6:4F
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       57E7875E0C0EB3DB5DB94DF396F75746580FC235
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e36322e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 19 Dec 2025 16:49:58 +0000
ROA not before:           Fri 19 Dec 2025 16:44:58 +0000
ROA not after:            Fri 18 Dec 2026 16:49:58 +0000
asID:                     52930
IP address blocks:        177.185.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 01:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e7:87:5e:0c:0e:b3:db:5d:b9:4d:f3:96:f7:57:46:58:0f:c2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Dec 19 16:44:58 2025 GMT
            Not After : Dec 18 16:49:58 2026 GMT
        Subject: CN=D610EB241E68FAF251F0249D23144963883BD64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:cc:2f:6c:7c:23:fd:6a:02:d6:80:9c:27:
                    b4:eb:07:ae:9d:1b:7e:d8:5b:a8:2d:a2:7e:ba:d1:
                    61:54:8e:aa:40:f7:98:3c:7f:08:8d:43:94:0b:59:
                    1d:32:ec:ef:0f:77:f7:a6:08:85:65:0a:59:67:1c:
                    5c:6e:8d:f5:66:bb:bb:79:85:13:63:95:00:12:46:
                    93:7e:83:2b:25:b9:ff:a8:a2:58:69:05:b6:0d:2b:
                    ce:52:d7:87:19:e2:55:f0:c8:93:79:c5:aa:fe:33:
                    df:c3:ef:c7:6f:c8:c2:11:30:ea:eb:70:50:a6:ec:
                    e0:7a:61:ae:33:cf:31:aa:89:7e:c7:25:57:6d:97:
                    3d:72:ef:a6:61:7a:69:19:d2:e3:b4:e3:ef:dd:f1:
                    5e:08:cb:47:83:5e:6a:27:ed:58:9b:a7:2f:a9:e9:
                    1e:fd:12:2e:10:01:cd:62:cc:d9:78:bc:38:45:c5:
                    63:25:8e:8c:b4:20:d1:90:b2:fd:5e:64:4e:f9:6c:
                    f0:70:3c:78:ef:09:b2:d8:79:93:a4:fa:6c:27:9d:
                    1d:9a:04:72:43:d9:f4:a5:f1:24:63:28:27:b5:25:
                    21:2c:65:fb:85:0a:9c:17:9c:78:ae:42:cd:a2:74:
                    18:22:6e:c8:b9:87:a5:0e:68:1b:38:6c:11:71:eb:
                    cc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:10:EB:24:1E:68:FA:F2:51:F0:24:9D:23:14:49:63:88:3B:D6:4F
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e36322e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:31:13:2b:1e:9c:99:fa:60:03:e6:bf:ce:c5:3a:8c:5c:71:
         b0:4b:05:b3:0d:d1:fb:be:1c:60:75:47:0c:e1:85:52:81:8c:
         f3:f0:4e:51:6d:2b:14:31:0e:d5:98:bd:14:d2:dd:a5:fc:d2:
         59:41:45:6b:42:3f:6c:b3:a6:58:1f:49:3c:b5:4a:43:35:a8:
         56:3e:df:4e:98:9b:db:8c:2a:db:33:11:ac:67:ea:c2:bf:82:
         9e:a5:21:78:26:c8:03:2a:f1:70:72:d5:0c:88:1c:b5:b4:bc:
         3a:77:8f:be:5d:d6:d1:99:b7:5f:95:97:4e:e0:53:00:f7:49:
         fa:b0:ef:0c:49:6f:d7:f9:b1:7f:9a:58:0c:e2:2f:3a:32:10:
         09:1a:dd:5e:b7:e2:6d:41:3e:d9:95:d2:ea:df:ca:b6:b9:ca:
         b8:73:2c:86:ad:7a:8d:23:7f:6d:83:32:31:c1:b1:c4:7b:e0:
         a8:bf:82:71:8f:f8:34:dc:53:74:df:49:47:32:21:44:72:6f:
         b7:fc:25:8f:f8:82:74:e0:6e:5d:d8:f4:64:62:24:96:ef:2d:
         92:00:db:f8:dd:00:5f:71:4b:32:1f:fc:2c:66:27:71:18:b3:
         89:8e:c3:8c:ec:6f:bf:25:d4:5b:ac:96:d6:91:e1:47:e3:68:
         86:b0:2b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:59:10 2025 by rpki-client