This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa
File:                     3137372e382e302e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier:          J5yI9xjznCFv5e7ueNtYPGONSpWj8VioeKDNbiQR3n4=
Subject key identifier:   B7:37:5A:5A:6E:9D:93:D6:6A:95:2D:AD:A9:38:47:39:CF:99:A6:62
Certificate issuer:       /CN=7155F95F3F50406AE68A9CCF51483483D251BB70
Certificate serial:       1C3F9C90F25960B7EA0562D0403A9E41BB4A4667
Authority key identifier: 71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa
Signing time:             Wed 17 Dec 2025 21:11:58 +0000
ROA not before:           Wed 17 Dec 2025 21:06:58 +0000
ROA not after:            Wed 16 Dec 2026 21:11:58 +0000
asID:                     28360
IP address blocks:        177.8.0.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl
                          rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 10:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3f:9c:90:f2:59:60:b7:ea:05:62:d0:40:3a:9e:41:bb:4a:46:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7155F95F3F50406AE68A9CCF51483483D251BB70
        Validity
            Not Before: Dec 17 21:06:58 2025 GMT
            Not After : Dec 16 21:11:58 2026 GMT
        Subject: CN=B7375A5A6E9D93D66A952DADA9384739CF99A662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:58:37:c5:ba:27:9a:b1:74:e6:71:e0:0e:
                    08:73:21:1e:de:d8:b6:ef:22:2e:93:b8:e3:e0:25:
                    69:0d:a4:8a:5b:5a:bd:b6:63:5c:71:8c:d0:c5:80:
                    ec:57:54:ea:8a:ec:9a:e3:e6:70:e0:ab:5a:ec:d7:
                    bc:f5:84:67:3e:f2:55:6e:af:1f:d8:91:d9:80:4b:
                    c4:96:e1:a2:39:00:1e:df:3f:3d:09:8c:95:88:56:
                    3e:49:e5:10:9d:02:d3:37:28:3c:0a:2f:64:59:03:
                    60:5b:50:d9:40:f9:98:83:8b:08:99:8e:fb:de:52:
                    9c:d3:a1:c7:16:c6:98:2d:f4:61:c1:d7:68:1c:04:
                    1e:bc:06:af:db:12:65:eb:00:fc:86:86:27:4a:52:
                    bf:0c:f5:e3:b6:32:dd:a8:ff:c0:ab:0a:9d:01:50:
                    d2:ae:7b:18:cc:e9:6b:24:11:38:5d:f4:a0:3f:79:
                    ff:65:62:64:a6:a2:68:d6:67:d1:6d:a2:d8:1b:27:
                    01:41:b1:cd:32:31:57:99:d2:73:22:7b:36:0b:a5:
                    7c:34:f6:31:c0:c4:e7:7d:3a:5a:1f:25:37:e8:fc:
                    5e:53:0e:a1:07:77:cd:52:5f:b4:e4:33:03:2f:68:
                    1e:37:95:e6:bb:b0:fd:8f:9e:c3:4c:03:8d:ed:6f:
                    d3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:37:5A:5A:6E:9D:93:D6:6A:95:2D:AD:A9:38:47:39:CF:99:A6:62
            X509v3 Authority Key Identifier:
                keyid:71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:ad:05:fb:b6:5f:fb:a0:78:a8:d9:c7:b8:c5:80:64:8a:
         2d:1e:2c:1d:25:4e:cd:f3:09:7b:b9:66:6b:76:d0:b5:b1:6a:
         45:e1:3a:4b:97:88:79:da:f9:af:18:6d:a4:06:43:8e:2a:ac:
         e8:c0:53:89:85:93:86:d8:90:45:6d:0f:08:23:54:c9:a5:f7:
         9b:04:3c:5a:f3:ca:45:58:b4:64:e4:e4:20:a2:0a:50:b8:1b:
         ba:74:c2:c2:0f:62:84:3a:da:49:a7:83:39:d9:a2:81:0b:9a:
         7d:db:d0:21:2c:e4:cd:06:81:69:ed:32:30:ee:bb:85:3a:b7:
         b9:b9:cf:75:d3:46:59:b9:52:7f:d8:15:b5:41:5c:1b:c3:09:
         51:0a:b8:3f:72:1f:2b:63:62:4e:0e:ad:1e:9f:dd:70:29:ed:
         1d:bf:c6:2e:f1:1c:5a:15:15:1b:6f:05:04:31:eb:f2:c4:22:
         41:60:5f:e6:fd:e6:de:7e:0d:51:f4:c1:27:56:68:7d:55:80:
         71:06:71:69:10:7c:0a:cd:a5:b5:7c:ef:50:73:42:4b:eb:e6:
         a4:d3:a0:e5:e8:26:8d:54:21:29:db:46:52:2c:ba:b8:b5:41:
         f4:d6:f1:44:98:25:cc:1d:bd:0b:6b:79:6d:68:a0:60:44:8a:
         52:a0:76:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:22:40 2025 by rpki-client