This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa
File:                     3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa (raw, json)
Hash identifier:          ySrq0TOlfP8kIAyPYS5kMiMrMoRNNxMUFpLpQKEk7AM=
Subject key identifier:   9F:77:9F:B7:2C:A9:DE:3B:CE:D4:22:D5:D5:2A:5F:CD:C6:8E:71:21
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       42FE6DFA4399251AF059F09808618DCC3FC89257
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa
Signing time:             Wed 10 Dec 2025 11:53:18 +0000
ROA not before:           Wed 10 Dec 2025 11:48:18 +0000
ROA not after:            Wed 09 Dec 2026 11:53:18 +0000
asID:                     263624
IP address blocks:        179.124.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
                          rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 01:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fe:6d:fa:43:99:25:1a:f0:59:f0:98:08:61:8d:cc:3f:c8:92:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: Dec 10 11:48:18 2025 GMT
            Not After : Dec  9 11:53:18 2026 GMT
        Subject: CN=9F779FB72CA9DE3BCED422D5D52A5FCDC68E7121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:be:a2:e0:44:ce:49:fa:b9:06:9f:10:e6:
                    38:a8:bb:9f:79:0c:de:01:fe:e9:90:42:9f:0f:e5:
                    d7:6a:fc:f4:d3:c3:2c:b4:65:c9:81:0a:fc:57:51:
                    cb:6b:f7:e0:ee:6f:05:90:57:6f:38:33:14:3e:ca:
                    c1:8f:f0:e8:d8:33:aa:76:bd:87:5a:59:3e:42:9d:
                    30:11:c9:ac:d8:62:40:6c:02:61:e2:d6:9a:27:bd:
                    91:24:ab:ef:8e:13:a2:1a:3a:af:59:ce:20:8a:ad:
                    22:e1:b3:7a:8b:52:a7:4e:c3:db:d3:0f:5f:fd:8c:
                    f9:76:a5:de:b9:9e:93:cb:c7:6c:e8:eb:a7:e2:e7:
                    03:5a:4c:d5:2e:ec:3d:8c:95:11:60:b4:1b:b6:d5:
                    29:c4:a7:f4:a2:96:5e:16:c2:3c:b1:fa:13:81:7b:
                    92:83:8e:65:45:05:e4:c4:56:3b:f7:ce:66:99:3b:
                    44:86:8d:0a:d5:02:3f:04:34:f9:18:83:3f:1f:3d:
                    51:48:db:e6:46:03:f6:46:d9:cd:a5:07:d1:30:23:
                    0e:e1:6d:3c:0b:50:44:8d:12:41:af:70:0f:5f:ed:
                    c7:5c:44:47:45:14:4d:26:c4:4f:cc:d4:1a:ba:b1:
                    a9:29:1e:c7:62:d2:1a:66:11:eb:da:52:a5:0b:87:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:77:9F:B7:2C:A9:DE:3B:CE:D4:22:D5:D5:2A:5F:CD:C6:8E:71:21
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:4c:a5:17:7b:a8:57:d2:dc:93:b1:22:14:ae:13:a1:8e:ac:
         b9:6d:71:2f:1b:2f:05:cf:bd:e0:59:bc:06:65:3d:8d:47:e8:
         a0:9b:7a:93:c1:43:31:f9:42:4f:e0:e4:e4:b9:39:42:39:aa:
         79:7e:4f:2d:6b:39:53:37:61:57:c4:7e:77:c5:ea:ec:ed:97:
         39:7a:48:95:89:44:4d:37:0c:fc:f0:cb:f6:0d:41:26:5e:c6:
         e0:79:2e:40:20:43:e9:a5:1e:51:0e:76:97:d5:23:cf:a3:60:
         0b:e9:dc:b1:c6:ab:28:25:87:24:ff:16:65:83:30:5b:2f:44:
         f1:23:1e:94:87:8b:53:77:5b:f8:0f:f6:52:b4:46:8d:c3:64:
         70:f0:f5:34:57:d6:fb:47:c3:bc:31:5b:bc:4a:34:91:90:aa:
         73:fe:61:d7:09:78:78:02:bf:e0:45:82:e8:c5:84:79:14:b0:
         ca:fb:44:52:1b:5d:4e:df:84:ba:94:ec:79:eb:d1:96:41:6a:
         6d:e3:f7:0b:03:83:00:fd:5f:a3:52:24:2f:9e:42:9e:87:11:
         8e:e1:41:f7:29:9a:0d:e1:2b:e9:72:5d:a3:34:a3:f8:88:0e:
         6a:0a:f6:9a:f4:66:d9:4d:7f:c4:7c:32:b6:2b:33:be:58:69:
         ae:75:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:34:36 2025 by rpki-client