This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136312e302f32342d3234203d3e20323633343434.roa
File:                     3137372e39312e3136312e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          rnCbkkHFpMG9heNfimM7hW8JckDxFanpSUYn1/OCTq4=
Subject key identifier:   B5:90:DB:45:48:E3:C8:D0:AF:B7:A5:2F:B9:43:D2:28:B2:F2:6E:FB
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       74DB4F460F906D43FB5E8207DD44424BB0DBDA21
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136312e302f32342d3234203d3e20323633343434.roa
Signing time:             Thu 11 Dec 2025 15:43:47 +0000
ROA not before:           Thu 11 Dec 2025 15:38:47 +0000
ROA not after:            Thu 10 Dec 2026 15:43:47 +0000
asID:                     263444
IP address blocks:        177.91.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:db:4f:46:0f:90:6d:43:fb:5e:82:07:dd:44:42:4b:b0:db:da:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Dec 11 15:38:47 2025 GMT
            Not After : Dec 10 15:43:47 2026 GMT
        Subject: CN=B590DB4548E3C8D0AFB7A52FB943D228B2F26EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:8a:26:fe:68:03:69:19:ae:02:51:35:a2:
                    6d:ab:38:7f:61:1a:fb:6b:f4:2d:74:d7:b2:2c:71:
                    66:13:b0:87:10:c4:f9:e3:2e:00:16:db:d1:ef:26:
                    ab:d3:14:73:9f:c0:4e:22:4a:07:50:e5:73:da:4e:
                    22:35:92:d0:b4:6b:66:65:f0:fd:6b:23:ed:d9:d4:
                    5b:7f:94:bd:b3:ef:30:9b:99:8c:ba:45:be:03:15:
                    4e:13:e0:b4:4c:68:09:22:d4:89:a1:b9:fe:f2:95:
                    ad:cd:7e:2e:8d:3f:a2:9d:ae:e1:dd:c7:c8:1d:fd:
                    71:77:ec:b2:ec:4c:e9:36:37:37:74:16:5d:73:bd:
                    a9:85:56:93:02:16:b3:79:7f:a7:2b:10:a3:b1:f6:
                    cd:2f:4c:7d:3b:76:4e:c2:98:80:97:24:e4:5c:f2:
                    16:c4:d5:4a:6c:44:95:dc:c9:8e:4b:c3:81:ea:b1:
                    1d:3d:53:f0:9e:15:c7:c3:62:c1:98:48:15:02:25:
                    6a:ab:28:6e:11:95:48:66:18:fe:50:78:8a:5f:a5:
                    16:8d:aa:0f:ea:79:68:b6:76:71:16:0b:60:d7:45:
                    10:bc:cc:21:3b:bb:56:09:14:14:5a:32:1e:c8:8b:
                    53:73:d9:c0:24:ae:94:6e:ba:6e:5b:13:7c:f8:f2:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:90:DB:45:48:E3:C8:D0:AF:B7:A5:2F:B9:43:D2:28:B2:F2:6E:FB
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136312e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:1b:8a:f3:74:5b:b3:44:76:5c:e8:54:f0:8f:9e:dc:cf:54:
         8e:29:44:15:24:b0:8d:cb:0f:86:75:4e:e6:1a:cb:39:68:79:
         c3:6e:99:0f:c1:70:22:79:72:0c:16:0f:ba:69:ea:a6:f8:81:
         61:2e:a7:c7:60:1e:8f:b6:4e:26:0b:ca:4d:1f:01:87:2c:bc:
         ff:3a:c9:de:3c:07:1b:c6:ab:c0:30:f2:3d:a4:f1:11:76:61:
         bb:a1:28:bd:3e:e3:57:0c:08:5d:f3:8f:f2:d3:80:8c:6e:3a:
         62:ee:fb:66:30:f5:50:df:d2:4f:9d:f9:2d:2f:25:ff:97:4b:
         7e:ac:b0:f9:8e:5a:3d:08:e3:e7:47:0b:8a:11:ff:67:af:85:
         d2:0d:06:6b:dd:cd:ae:1a:35:24:15:cd:75:0c:bf:39:3b:27:
         e7:bb:51:d2:f9:fa:7f:1e:ff:55:2a:c5:77:29:07:5f:e8:a0:
         b9:b1:eb:59:74:57:18:bf:f6:e0:b5:78:76:a1:da:35:ab:7b:
         32:27:4a:ea:eb:63:c6:dc:f8:e0:8d:96:f6:d9:a6:df:08:7d:
         e7:bb:59:55:06:32:65:15:16:66:ed:61:10:a6:e0:95:c7:09:
         07:24:62:44:a9:20:a4:ae:d5:a2:ca:6d:02:fb:13:f6:e7:3c:
         9d:44:dd:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdNtPRg+QbUP7XoIH3URCS7Db2iEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3
MDE4NDgwRDAeFw0yNTEyMTExNTM4NDdaFw0yNjEyMTAxNTQzNDdaMDMxMTAvBgNV
BAMTKEI1OTBEQjQ1NDhFM0M4RDBBRkI3QTUyRkI5NDNEMjI4QjJGMjZFRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4oom/mgDaRmuAlE1om2rOH9h
Gvtr9C1017IscWYTsIcQxPnjLgAW29HvJqvTFHOfwE4iSgdQ5XPaTiI1ktC0a2Zl
8P1rI+3Z1Ft/lL2z7zCbmYy6Rb4DFU4T4LRMaAki1Imhuf7yla3Nfi6NP6KdruHd
x8gd/XF37LLsTOk2Nzd0Fl1zvamFVpMCFrN5f6crEKOx9s0vTH07dk7CmICXJORc
8hbE1UpsRJXcyY5Lw4HqsR09U/CeFcfDYsGYSBUCJWqrKG4RlUhmGP5QeIpfpRaN
qg/qeWi2dnEWC2DXRRC8zCE7u1YJFBRaMh7Ii1Nz2cAkrpRuum5bE3z48nHtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtZDbRUjjyNCvt6UvuUPSKLLybvswHwYDVR0j
BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO
dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB
QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv
MzEzNzM3MmUzOTMxMmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxW6EwDQYJKoZIhvcNAQELBQADggEBAKQbivN0
W7NEdlzoVPCPntzPVI4pRBUksI3LD4Z1TuYayzloecNumQ/BcCJ5cgwWD7pp6qb4
gWEup8dgHo+2TiYLyk0fAYcsvP86yd48BxvGq8Aw8j2k8RF2YbuhKL0+41cMCF3z
j/LTgIxuOmLu+2Yw9VDf0k+d+S0vJf+XS36ssPmOWj0I4+dHC4oR/2evhdINBmvd
za4aNSQVzXUMvzk7J+e7UdL5+n8e/1UqxXcpB1/ooLmx61l0Vxi/9uC1eHah2jWr
ezInSurrY8bc+OCNlvbZpt8Ifee7WVUGMmUVFmbtYRCm4JXHCQckYkSpIKSu1aLK
bQL7E/bnPJ1E3dE=
-----END CERTIFICATE-----
Generated at Fri Dec 19 16:05:29 2025 by rpki-client