This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/3137372e38352e3136382e302f32322d3332203d3e203631373633.roa
File:                     3137372e38352e3136382e302f32322d3332203d3e203631373633.roa (raw, json)
Hash identifier:          ntcjfs15sP8HNUqCvml02xWO0Cl387CPELWRSaULpzM=
Subject key identifier:   FE:9F:0E:1A:EE:6B:A4:44:04:80:3B:DB:8B:87:3C:47:0A:B0:C1:84
Certificate issuer:       /CN=FE2ED7096D82C455B93F804D0ACF61CDF723EC0B
Certificate serial:       7888A1C34DD2A62853F3D124B1D8132CAD55C182
Authority key identifier: FE:2E:D7:09:6D:82:C4:55:B9:3F:80:4D:0A:CF:61:CD:F7:23:EC:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/3137372e38352e3136382e302f32322d3332203d3e203631373633.roa
Signing time:             Thu 11 Dec 2025 20:17:47 +0000
ROA not before:           Thu 11 Dec 2025 20:12:47 +0000
ROA not after:            Thu 10 Dec 2026 20:17:47 +0000
asID:                     61763
IP address blocks:        177.85.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.crl
                          rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 09:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:88:a1:c3:4d:d2:a6:28:53:f3:d1:24:b1:d8:13:2c:ad:55:c1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2ED7096D82C455B93F804D0ACF61CDF723EC0B
        Validity
            Not Before: Dec 11 20:12:47 2025 GMT
            Not After : Dec 10 20:17:47 2026 GMT
        Subject: CN=FE9F0E1AEE6BA44404803BDB8B873C470AB0C184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:52:d4:0e:8e:cb:b0:65:c1:7c:f3:aa:bc:
                    5c:7d:4a:8a:a9:a8:ab:0b:53:ad:ae:3e:88:e1:43:
                    84:04:c3:e4:9c:72:3e:0b:c2:a9:e9:22:17:9c:bd:
                    ab:b4:ef:09:62:bc:5c:5f:b0:4e:45:43:d5:9c:ed:
                    b5:cd:5d:ab:82:51:2f:ce:7f:29:b2:9d:72:93:0f:
                    0a:e8:04:f5:ab:bd:c6:6f:f4:9f:b9:cf:a4:f9:62:
                    80:30:dd:99:84:7d:f9:de:71:4e:8c:73:33:81:7e:
                    9f:30:c0:95:4d:04:66:95:8b:82:a0:f2:87:10:b8:
                    83:b8:72:62:f6:f5:b5:6e:99:1c:b7:5b:a1:ae:94:
                    70:64:0c:e3:a6:a6:d6:1c:41:59:63:bf:3f:e5:bf:
                    2d:dc:be:8f:31:6a:08:72:2e:4b:ab:3b:80:3f:20:
                    52:fa:c3:11:cd:7b:a8:43:2e:8a:32:1b:93:c2:5b:
                    68:51:df:d4:84:bd:ff:92:8a:b3:47:b3:f1:9b:d0:
                    14:3b:75:71:bd:7d:20:ff:07:92:6b:9d:5a:5b:fe:
                    4c:37:92:20:30:85:40:33:bd:2f:9d:c7:91:99:eb:
                    70:c5:ef:90:8d:6e:b1:91:03:ce:5f:b2:35:b0:77:
                    06:e3:5d:7e:4e:eb:87:12:68:88:df:7b:f1:6b:bf:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9F:0E:1A:EE:6B:A4:44:04:80:3B:DB:8B:87:3C:47:0A:B0:C1:84
            X509v3 Authority Key Identifier:
                keyid:FE:2E:D7:09:6D:82:C4:55:B9:3F:80:4D:0A:CF:61:CD:F7:23:EC:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/3137372e38352e3136382e302f32322d3332203d3e203631373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:f3:bb:93:d9:4a:e2:5e:b4:44:5c:9a:f7:d6:da:85:3c:9b:
         ef:7f:5d:4c:5c:f9:07:04:21:21:5d:a1:1a:e6:2e:8b:9e:1a:
         83:e3:e8:28:56:68:aa:46:06:4e:64:92:0f:e4:7b:7b:29:54:
         c5:74:c1:e9:94:0f:f4:de:86:38:a0:4f:56:64:73:c1:05:b3:
         eb:2e:d7:f7:93:35:62:c3:a8:97:04:b9:0f:db:52:31:0e:75:
         e1:40:ba:2b:d3:68:26:f7:0f:07:2e:81:58:4b:3f:e1:e8:bd:
         0a:f1:f9:a1:f7:79:6b:d7:97:91:1e:b6:87:27:84:f5:cc:19:
         f0:ad:40:4d:a6:9c:b3:1b:41:29:9c:08:87:9a:e6:ba:c3:ae:
         f9:76:3d:1d:8f:9e:1f:1e:56:a5:0d:c8:e5:50:15:84:21:c7:
         7c:65:d5:af:b9:ab:f6:b6:19:7a:d2:03:46:a7:ae:61:81:cb:
         fb:38:ed:6f:bf:0f:8c:50:e4:99:ba:3b:66:b3:b8:df:d6:2c:
         80:05:49:4d:41:e0:6e:64:84:55:73:33:52:75:5f:1a:0d:01:
         a3:31:cb:e9:85:1e:d2:93:9c:56:cc:8b:ac:72:6f:5d:3b:dc:
         bc:25:9b:67:bb:61:44:ca:19:63:1c:fe:df:4a:36:b2:d8:d8:
         a8:89:48:fd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeIihw03SpihT89EksdgTLK1VwYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUyRUQ3MDk2RDgyQzQ1NUI5M0Y4MDREMEFDRjYxQ0RG
NzIzRUMwQjAeFw0yNTEyMTEyMDEyNDdaFw0yNjEyMTAyMDE3NDdaMDMxMTAvBgNV
BAMTKEZFOUYwRTFBRUU2QkE0NDQwNDgwM0JEQjhCODczQzQ3MEFCMEMxODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKElLUDo7LsGXBfPOqvFx9Soqp
qKsLU62uPojhQ4QEw+Sccj4LwqnpIhecvau07wlivFxfsE5FQ9Wc7bXNXauCUS/O
fymynXKTDwroBPWrvcZv9J+5z6T5YoAw3ZmEffnecU6MczOBfp8wwJVNBGaVi4Kg
8ocQuIO4cmL29bVumRy3W6GulHBkDOOmptYcQVljvz/lvy3cvo8xaghyLkurO4A/
IFL6wxHNe6hDLooyG5PCW2hR39SEvf+SirNHs/Gb0BQ7dXG9fSD/B5JrnVpb/kw3
kiAwhUAzvS+dx5GZ63DF75CNbrGRA85fsjWwdwbjXX5O64cSaIjfe/Frv57fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/p8OGu5rpEQEgDvbi4c8RwqwwYQwHwYDVR0j
BBgwFoAU/i7XCW2CxFW5P4BNCs9hzfcj7AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWROeWR2ZUU0eTNLRmc3eGoxRGl4Wk15ckdXeFVnR1pNZG9qdmlETVNV
NDMvMC9GRTJFRDcwOTZEODJDNDU1QjkzRjgwNEQwQUNGNjFDREY3MjNFQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMkVENzA5NkQ4MkM0NTVC
OTNGODA0RDBBQ0Y2MUNERjcyM0VDMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVkTnlkdmVFNHkzS0ZnN3hqMURpeFpNeXJHV3hVZ0daTWRvanZpRE1TVTQzLzAv
MzEzNzM3MmUzODM1MmUzMTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNjMx
MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVWoMA0GCSqGSIb3DQEBCwUAA4IBAQA387uT2Uri
XrREXJr31tqFPJvvf11MXPkHBCEhXaEa5i6LnhqD4+goVmiqRgZOZJIP5Ht7KVTF
dMHplA/03oY4oE9WZHPBBbPrLtf3kzViw6iXBLkP21IxDnXhQLor02gm9w8HLoFY
Sz/h6L0K8fmh93lr15eRHraHJ4T1zBnwrUBNppyzG0EpnAiHmua6w675dj0dj54f
HlalDcjlUBWEIcd8ZdWvuav2thl60gNGp65hgcv7OO1vvw+MUOSZujtms7jf1iyA
BUlNQeBuZIRVczNSdV8aDQGjMcvphR7Sk5xWzIuscm9dO9y8JZtnu2FEyhljHP7f
Sjay2NioiUj9
-----END CERTIFICATE-----
Generated at Tue Dec 23 08:22:05 2025 by rpki-client