This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131362e302f32332d3233203d3e20323633363334.roa
File:                     3137392e3132352e3131362e302f32332d3233203d3e20323633363334.roa (raw, json)
Hash identifier:          HoNh/4V44stFgSez6a6AHOm1rQM2hwzzdr2Dc8EUvuU=
Subject key identifier:   08:C1:5A:0C:65:4F:6D:80:66:6B:32:A6:C9:F2:EB:D1:79:73:8E:58
Certificate issuer:       /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Certificate serial:       1FD6D736D6736F61C291ECC0655EDD374FD01EE1
Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131362e302f32332d3233203d3e20323633363334.roa
Signing time:             Mon 22 Dec 2025 18:34:40 +0000
ROA not before:           Mon 22 Dec 2025 18:29:40 +0000
ROA not after:            Mon 21 Dec 2026 18:34:40 +0000
asID:                     263634
IP address blocks:        179.125.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl
                          rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 18:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d6:d7:36:d6:73:6f:61:c2:91:ec:c0:65:5e:dd:37:4f:d0:1e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
        Validity
            Not Before: Dec 22 18:29:40 2025 GMT
            Not After : Dec 21 18:34:40 2026 GMT
        Subject: CN=08C15A0C654F6D80666B32A6C9F2EBD179738E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:f1:8c:41:cf:5e:a0:59:98:2a:84:f7:31:
                    2d:5a:46:33:c2:ed:d4:25:c6:87:29:76:e2:ea:37:
                    60:08:3f:f8:7b:a1:4a:78:4a:01:dc:d9:38:31:d9:
                    1e:5c:0d:72:06:4e:a1:fc:26:a0:29:41:4c:43:e1:
                    3c:3b:d8:37:6c:f3:ca:a7:38:09:6c:4a:09:31:5d:
                    1a:47:e3:38:f8:78:c8:00:76:68:53:36:6a:97:9e:
                    03:b8:12:56:a7:7b:b3:1d:5b:ca:91:5c:5f:b5:3a:
                    85:fa:75:91:b8:01:5a:92:48:a3:33:7e:75:21:bc:
                    0a:45:91:50:28:3d:1d:03:23:57:61:36:ef:02:63:
                    23:ee:f8:d9:8a:13:0b:ee:69:7d:0f:e4:a9:46:33:
                    1a:cc:a9:dc:a5:6c:2f:32:e4:4f:6c:1f:be:84:15:
                    e2:89:80:de:2c:0b:ee:31:10:f9:ca:09:ca:fc:8c:
                    a4:94:45:0e:e0:0f:91:47:c5:4d:30:94:ef:ea:93:
                    46:aa:5e:12:bb:a8:59:ad:77:8a:f1:14:98:39:62:
                    23:f8:ab:73:5a:e4:06:d1:92:78:a8:d3:79:39:0e:
                    f1:8f:16:cc:29:df:27:f0:d8:4a:36:33:5c:f1:ed:
                    16:a8:ec:75:6d:2f:b4:8d:dd:f6:54:8c:db:0c:e6:
                    90:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:5A:0C:65:4F:6D:80:66:6B:32:A6:C9:F2:EB:D1:79:73:8E:58
            X509v3 Authority Key Identifier:
                keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131362e302f32332d3233203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:80:f1:13:16:5e:d9:08:5e:48:74:8a:d2:1a:76:f9:67:
         9f:09:15:50:bb:49:b1:b4:e9:70:90:fe:b9:d4:68:c7:eb:4a:
         90:81:95:2b:c5:87:66:f2:25:6d:bc:c7:c4:c3:9a:59:03:c7:
         ca:c0:5e:76:44:55:47:aa:28:32:b8:e9:be:04:87:76:ac:ba:
         4f:18:0d:b9:38:4a:2e:ed:ef:b1:25:6b:83:f5:f9:ad:2a:a6:
         6c:cb:e7:93:b4:db:31:bb:f8:15:b1:85:18:40:9e:c7:d0:ba:
         6c:bc:c1:14:8b:c4:57:6f:26:a3:4a:c9:e1:22:7f:76:72:08:
         d7:75:93:11:1e:cf:4f:26:70:06:a7:64:98:2e:39:39:ef:ff:
         71:2a:f6:8d:5c:ca:42:38:cb:78:02:2a:28:ee:b3:6a:1d:4b:
         6b:ce:ec:52:7c:51:37:0e:c3:70:21:a5:f5:88:76:fa:0f:99:
         39:38:ab:e9:3b:98:9b:96:5c:60:e5:ee:23:aa:71:b5:09:af:
         73:eb:e7:9f:36:12:9a:a8:ed:ac:3d:bd:81:be:8a:48:cd:3b:
         62:85:15:86:4d:f5:91:17:fe:22:6d:b6:94:fc:c7:41:e3:75:
         b3:be:46:a2:7a:a0:17:88:02:58:7d:db:68:7c:66:30:7c:ac:
         23:49:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:18:35 2025 by rpki-client