This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa
File:                     3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          msFKHzwScuCHwmamqqD174YlStw+N5v/pD+SSZUAIwo=
Subject key identifier:   32:5F:55:7E:21:B2:4D:1C:89:20:CA:E9:32:8E:B7:3B:38:83:EB:BC
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       0502843EFB4936A8A5B04924F560A79A42AE4465
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa
Signing time:             Thu 11 Dec 2025 15:43:49 +0000
ROA not before:           Thu 11 Dec 2025 15:38:49 +0000
ROA not after:            Thu 10 Dec 2026 15:43:49 +0000
asID:                     263444
IP address blocks:        177.91.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:02:84:3e:fb:49:36:a8:a5:b0:49:24:f5:60:a7:9a:42:ae:44:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Dec 11 15:38:49 2025 GMT
            Not After : Dec 10 15:43:49 2026 GMT
        Subject: CN=325F557E21B24D1C8920CAE9328EB73B3883EBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:67:88:3d:e0:27:f0:63:43:1d:4d:d4:12:
                    ec:f4:73:c3:c1:6a:88:a6:51:e2:dc:75:ec:50:da:
                    b9:de:8f:0f:d0:ee:1b:8b:42:c9:93:49:0d:e7:00:
                    5d:2f:53:a5:4e:2f:7d:5b:97:fe:7b:34:1a:6e:58:
                    1f:18:a9:80:20:9d:11:a8:80:9e:55:5a:86:e3:29:
                    06:b6:19:4f:5d:01:aa:82:d0:af:f2:e5:f7:8c:d0:
                    4b:2d:ad:d6:60:8c:a1:0d:39:a2:47:d4:af:d9:2f:
                    e9:f7:e4:fb:f6:98:21:ce:26:fb:93:61:cd:d0:20:
                    77:e3:03:9d:be:9e:0e:05:17:54:fe:d3:b0:9e:e4:
                    46:93:ee:92:40:eb:1e:54:96:65:20:31:a0:c0:13:
                    21:bd:63:d7:bc:83:f1:ee:c2:25:a7:f9:54:34:8f:
                    f5:75:24:f0:8b:ca:f0:dc:41:51:69:c5:ed:c4:c0:
                    95:8b:00:a6:0b:d9:8a:99:42:4e:77:99:9b:ea:f3:
                    94:a2:c9:9a:ce:8d:4d:56:8a:fd:f1:a5:88:51:ff:
                    e7:48:a8:b6:fa:0d:d4:b2:db:e6:d2:85:82:98:b8:
                    b2:6b:d4:fb:ee:3d:73:9c:3a:a5:ee:f2:f0:2e:cd:
                    eb:08:f0:49:96:89:01:d3:42:67:35:5c:2c:a5:b3:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5F:55:7E:21:B2:4D:1C:89:20:CA:E9:32:8E:B7:3B:38:83:EB:BC
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:eb:a0:d8:6e:08:6a:68:30:c7:8d:60:cf:59:20:a9:7f:eb:
         db:2a:d5:9c:56:3f:02:c2:a3:31:93:5d:5b:44:a1:f5:3e:2f:
         aa:93:76:90:5d:2b:66:99:8e:c8:6a:30:5c:0b:4f:ab:22:a3:
         7f:1f:2d:53:95:aa:46:0a:74:d1:48:60:4b:59:a0:3b:4d:00:
         b1:c3:e9:46:b4:4a:d6:eb:58:ef:ed:01:17:b9:f0:c0:8e:11:
         22:5d:e3:55:01:67:aa:75:04:6f:a3:5f:20:cd:66:93:9d:80:
         7a:3c:bf:47:fb:ee:a9:4d:18:b5:07:38:79:a1:3e:35:0a:2b:
         07:f4:f1:80:42:80:eb:47:49:c4:ab:76:31:eb:e3:b0:da:d7:
         66:49:59:61:29:3d:cc:bf:92:43:a8:f9:76:c4:a5:67:1c:6c:
         41:24:8c:c1:fe:7d:57:a2:d0:e6:96:5b:bc:31:99:63:c0:35:
         f4:ce:67:e4:29:ed:00:95:4c:47:35:96:1f:cb:65:20:f8:40:
         60:26:84:ff:23:41:06:f0:98:15:08:82:38:84:9d:2f:d7:a9:
         1f:24:d5:4b:d3:63:44:d1:19:fa:f7:ea:6d:1e:33:d1:9f:a5:
         d3:0f:35:3a:a7:64:e2:0f:fa:0c:8b:d6:b9:a8:08:96:ce:67:
         20:b6:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:33:56 2025 by rpki-client