This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa
File:                     3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          RPQiwjEiNk04crMdyklhynW7Kkvm8RcMSYG56aPTPak=
Subject key identifier:   4B:78:AE:0E:9B:02:7A:96:92:8C:6C:DD:88:B4:79:F1:BA:9C:94:58
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       4765D78895794276E7435EDEA49DB22EF987F7EE
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa
Signing time:             Thu 11 Dec 2025 15:43:47 +0000
ROA not before:           Thu 11 Dec 2025 15:38:47 +0000
ROA not after:            Thu 10 Dec 2026 15:43:47 +0000
asID:                     263444
IP address blocks:        177.91.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:65:d7:88:95:79:42:76:e7:43:5e:de:a4:9d:b2:2e:f9:87:f7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Dec 11 15:38:47 2025 GMT
            Not After : Dec 10 15:43:47 2026 GMT
        Subject: CN=4B78AE0E9B027A96928C6CDD88B479F1BA9C9458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:8b:75:22:c8:15:7e:2e:12:7b:d6:c0:84:
                    39:e9:da:a7:b9:2d:ad:df:f6:dc:0f:7a:0b:7d:ba:
                    94:9a:88:27:4a:df:47:1c:78:08:04:f7:73:ec:76:
                    a8:ed:b2:e8:ad:4a:cf:21:06:8d:2e:27:fa:f9:30:
                    b9:e4:87:7f:fb:d0:f9:26:d4:ef:c0:25:7a:2c:73:
                    65:bb:8a:80:7c:6d:39:04:f5:6b:e1:3c:e3:a2:47:
                    3f:b3:7a:90:2b:6d:43:df:23:4a:c3:56:05:cc:a9:
                    2e:7d:f7:2b:4c:a6:32:f7:dc:a6:1a:a6:d3:b7:d8:
                    fe:0e:8b:fe:cc:c1:71:4f:51:16:3d:3b:c9:03:3e:
                    9e:d5:a0:7b:79:76:bd:8b:e1:23:fe:71:0f:cc:cf:
                    54:1c:5d:b2:ca:fc:01:8f:71:c3:5b:06:fd:c3:6f:
                    df:94:4f:1b:cf:cc:b9:bf:20:8b:9d:f2:1d:cd:d6:
                    6f:7f:06:c7:42:b9:a8:f7:60:06:f4:95:44:e7:c4:
                    fd:33:bc:f8:eb:da:e6:1b:dc:27:95:2e:91:f9:cc:
                    6c:b9:be:48:78:ae:8d:57:ae:5e:45:8c:c1:01:a4:
                    fc:c8:73:13:cb:e1:ff:27:e2:5e:60:95:c1:b0:03:
                    18:79:fc:96:02:3b:90:b9:fe:74:e9:8b:36:b3:52:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:78:AE:0E:9B:02:7A:96:92:8C:6C:DD:88:B4:79:F1:BA:9C:94:58
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:1d:e6:7b:93:16:59:83:67:a8:5d:b9:d7:0f:78:bf:a5:
         14:9d:70:0d:b6:6d:d3:77:80:5e:09:6d:4f:fb:b5:cc:20:46:
         bc:50:85:9f:7e:36:0a:a0:a1:48:b7:f7:e5:d8:e7:bd:1c:d7:
         54:3f:dc:16:3e:36:a5:38:86:05:c2:bb:3a:6e:a9:b4:32:b9:
         4d:3d:70:b0:a9:0c:f0:ee:66:25:62:59:d5:a7:b4:c2:16:a1:
         e5:36:21:8b:58:4a:d7:d3:ef:77:9f:5f:cb:9c:bd:e7:88:ea:
         d2:d3:76:18:f2:a4:43:7a:f9:10:b2:ea:42:b8:6f:d5:e7:44:
         43:58:2d:c5:a7:11:6f:d8:28:9f:e2:50:d6:50:91:ed:f7:19:
         6d:a6:1c:cf:dd:02:76:cb:83:99:f2:15:27:8e:d3:76:77:39:
         df:a4:e3:90:15:b3:a5:b2:84:76:a1:9d:b0:c7:1a:0c:b1:fc:
         12:c3:f5:7c:74:3a:f0:ce:28:27:b9:3c:19:a5:8d:b6:17:7d:
         d3:4d:bc:80:04:b5:dc:93:c4:3a:a2:ff:0f:c4:9e:77:19:a6:
         b4:8d:83:37:5d:68:56:39:f6:ee:13:cc:ed:d3:87:91:61:41:
         60:56:45:48:c7:27:e2:3b:78:56:32:4f:04:4c:f4:56:b3:de:
         81:80:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:33:42 2025 by rpki-client