This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131372e302f32342d3234203d3e20323633363334.roa
File:                     3137392e3132352e3131372e302f32342d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          vc+cOnWbqByNf6vg7+NRv2fK+aYUaWaV3l4WZtvyhDw=
Subject key identifier:   CF:3D:C0:CF:0D:68:DC:63:04:B7:8A:CD:66:7F:1F:40:45:C3:5F:7B
Certificate issuer:       /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Certificate serial:       0AC2895BF8069414BE74CEB7B7F55512A94E1276
Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131372e302f32342d3234203d3e20323633363334.roa
Signing time:             Mon 22 Dec 2025 18:34:38 +0000
ROA not before:           Mon 22 Dec 2025 18:29:38 +0000
ROA not after:            Mon 21 Dec 2026 18:34:38 +0000
asID:                     263634
IP address blocks:        179.125.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl
                          rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 18:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c2:89:5b:f8:06:94:14:be:74:ce:b7:b7:f5:55:12:a9:4e:12:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
        Validity
            Not Before: Dec 22 18:29:38 2025 GMT
            Not After : Dec 21 18:34:38 2026 GMT
        Subject: CN=CF3DC0CF0D68DC6304B78ACD667F1F4045C35F7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:5f:aa:2f:75:7a:b7:f4:b9:1f:0a:ef:56:
                    0e:fc:fb:5f:dd:31:39:9c:68:f3:fd:c4:1e:0a:e0:
                    7e:23:b0:5c:a1:4a:9a:c8:cd:e4:7f:52:a7:e8:42:
                    bf:2e:d6:95:29:43:bf:ee:94:3b:a2:05:e1:1f:a4:
                    e7:a4:c9:6b:77:02:a5:90:5f:c6:bd:8c:e1:13:64:
                    26:17:40:f1:64:5b:e2:43:2a:b9:59:75:70:c8:a8:
                    4e:c3:0f:c5:4b:f4:d2:af:e0:8b:b2:3d:76:9e:64:
                    62:5a:e2:88:3c:b2:42:ea:69:0d:c6:3a:85:00:18:
                    10:d9:9e:63:ef:c2:dc:a5:44:fc:89:1d:87:c4:ac:
                    e6:27:ca:77:2e:01:4d:d4:1f:21:c2:60:5f:7a:2d:
                    a7:ad:dc:60:6b:1d:c7:a9:87:a6:8d:78:d1:1d:65:
                    b7:bb:b5:61:44:3a:c6:ae:4a:43:84:a4:1a:9a:aa:
                    1a:71:c8:72:d5:4f:13:f2:b2:a3:6a:27:2d:27:83:
                    75:8b:74:a8:cf:74:f1:b6:72:e7:42:72:5e:eb:04:
                    d3:e5:80:52:b9:93:1e:ac:0a:c4:61:e5:20:29:a6:
                    0a:86:d8:f5:69:67:aa:2f:cf:33:6f:88:98:3f:b6:
                    e8:4f:d1:a6:41:5e:02:4a:af:2e:3b:e4:fe:44:bb:
                    49:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3D:C0:CF:0D:68:DC:63:04:B7:8A:CD:66:7F:1F:40:45:C3:5F:7B
            X509v3 Authority Key Identifier:
                keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131372e302f32342d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ad:96:29:68:7d:bd:f5:db:69:3d:4b:e4:44:04:1b:52:26:
         83:8e:64:80:44:cf:c4:d6:27:36:4e:0d:6c:96:cf:65:fc:8e:
         ec:dc:4a:f8:4a:62:aa:65:eb:be:64:4b:92:d1:97:99:a4:95:
         c6:a7:46:6c:5d:b2:19:67:4a:e4:72:c3:a9:83:50:ba:e7:d9:
         60:d4:55:27:50:d0:e5:71:25:e0:51:c4:5b:d3:cd:24:03:f3:
         c9:84:af:14:bf:70:c2:8f:97:ca:01:92:2d:29:5e:42:74:1f:
         11:c6:9b:20:bc:78:cf:dd:f3:ca:8f:7f:dd:2e:b6:ae:28:76:
         d6:2b:14:ae:39:e6:fb:6e:c3:1d:59:7b:42:be:7a:34:bf:58:
         a5:73:ce:48:d6:51:6d:a4:f4:5b:9e:d2:ba:18:aa:ee:92:a5:
         42:0d:c5:ed:7b:67:fe:83:76:ed:63:ba:1e:94:65:18:94:de:
         96:ad:48:4e:49:5b:78:b5:2f:f1:c6:8d:18:3d:a0:c5:6f:07:
         f5:00:f1:23:81:2a:82:87:3c:c6:10:62:a2:39:0d:6f:74:53:
         6f:ec:2c:83:1a:6d:e2:6a:9c:7e:a6:ab:c2:47:33:af:26:58:
         ba:dc:ea:48:33:40:98:ee:41:43:e3:e1:51:42:64:05:23:0a:
         fb:3f:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:46:32 2025 by rpki-client