This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/3137372e3138342e34382e302f32302d3234203d3e203532383936.roa
File:                     3137372e3138342e34382e302f32302d3234203d3e203532383936.roa (raw, json)
Hash identifier:          B0kuXzZZjdbj6jb80sPkZS6tpb/pisRQ8jCld4qndLk=
Subject key identifier:   5A:D5:3C:24:59:36:70:77:E5:74:46:DE:69:DA:3A:CC:41:B9:92:C5
Certificate issuer:       /CN=B171168B147A39B40BADE73A49290C2ACE3D34C9
Certificate serial:       0DFAD25A5F6F75E7597AD731821AA78455BC2D42
Authority key identifier: B1:71:16:8B:14:7A:39:B4:0B:AD:E7:3A:49:29:0C:2A:CE:3D:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B171168B147A39B40BADE73A49290C2ACE3D34C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/3137372e3138342e34382e302f32302d3234203d3e203532383936.roa
Signing time:             Tue 23 Dec 2025 20:54:02 +0000
ROA not before:           Tue 23 Dec 2025 20:49:02 +0000
ROA not after:            Tue 22 Dec 2026 20:54:02 +0000
asID:                     52896
IP address blocks:        177.184.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.crl
                          rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B171168B147A39B40BADE73A49290C2ACE3D34C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 16:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fa:d2:5a:5f:6f:75:e7:59:7a:d7:31:82:1a:a7:84:55:bc:2d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B171168B147A39B40BADE73A49290C2ACE3D34C9
        Validity
            Not Before: Dec 23 20:49:02 2025 GMT
            Not After : Dec 22 20:54:02 2026 GMT
        Subject: CN=5AD53C2459367077E57446DE69DA3ACC41B992C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:8b:d6:6a:99:5d:5e:3b:ff:21:f3:55:fd:
                    e6:6c:e5:18:a6:70:fa:f8:31:25:82:07:9c:9c:44:
                    00:41:56:6c:f8:79:8b:84:89:62:56:7d:61:b9:ab:
                    47:67:e7:5e:1a:b4:7e:1e:2e:c3:c5:6a:d9:7e:f6:
                    7d:02:67:4c:50:b0:58:c6:fe:30:45:7d:03:29:18:
                    30:57:84:23:fa:5e:9c:85:47:51:36:e0:11:b8:2e:
                    b1:ac:dd:ca:65:6b:ff:40:f3:91:0a:28:ca:e2:02:
                    0b:51:be:51:d2:51:86:1f:fa:d2:83:56:f8:0d:9a:
                    30:3d:cf:bc:72:f3:6a:d4:cc:cb:8e:13:ed:2f:0a:
                    26:d1:2a:bd:52:7e:42:5b:7e:12:7a:7a:f0:77:53:
                    ec:63:90:76:65:fc:6d:ca:cb:e8:e7:95:79:c4:8d:
                    e0:25:0b:3f:f6:66:46:3d:96:25:85:8c:55:8a:a4:
                    e2:72:86:97:6f:c9:28:f2:75:5b:36:2f:31:f3:a9:
                    f1:c8:57:78:63:db:ce:69:6a:55:99:c9:6b:9b:8c:
                    d6:d2:6f:bb:d1:b3:30:e4:80:78:d9:4c:e3:46:ba:
                    a8:1e:e4:ef:e0:08:fd:22:c2:ec:b6:25:5b:68:8f:
                    30:6b:4b:6c:53:14:ae:18:da:e0:e7:81:b7:88:aa:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D5:3C:24:59:36:70:77:E5:74:46:DE:69:DA:3A:CC:41:B9:92:C5
            X509v3 Authority Key Identifier:
                keyid:B1:71:16:8B:14:7A:39:B4:0B:AD:E7:3A:49:29:0C:2A:CE:3D:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/B171168B147A39B40BADE73A49290C2ACE3D34C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B171168B147A39B40BADE73A49290C2ACE3D34C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVFH1oZAfCo5WStkofuXW6XDNXzb5C9gWmbee97jJFrv/0/3137372e3138342e34382e302f32302d3234203d3e203532383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:0d:1c:88:f5:e0:b9:e9:b0:99:33:ea:9b:56:7e:d7:c1:1f:
         86:96:88:66:b5:15:b2:1b:00:7a:73:dd:64:d2:b7:ac:a3:09:
         91:66:c2:04:0c:d3:de:ea:e0:93:ae:32:92:88:33:29:50:cd:
         90:e0:73:60:22:ee:a1:df:98:3f:16:ae:21:19:2c:25:05:5a:
         53:9b:67:0f:32:d6:80:ab:98:81:68:df:0f:5f:b8:ef:4d:11:
         1d:37:ae:7f:55:12:3d:13:21:99:d1:16:98:79:35:a0:a4:08:
         83:83:78:e7:28:95:02:e0:cb:a7:ce:48:82:10:5f:bc:ff:f3:
         8e:4a:87:87:cc:0f:82:27:2e:a4:aa:65:f9:fc:3a:96:d6:a9:
         4e:1d:73:fb:32:55:12:b0:fd:75:38:34:4a:29:69:01:46:0f:
         9f:c0:c9:55:74:0b:a9:33:1c:b9:d7:47:3d:f5:05:3b:8c:52:
         91:70:9d:82:92:0c:0d:60:95:b1:3b:23:30:41:a6:13:e9:33:
         17:e0:f7:9b:40:3c:1c:9e:4d:d0:da:3e:d4:2d:51:04:90:7d:
         5b:39:36:a5:7b:48:5e:26:28:3f:a3:a1:f7:ed:75:b0:d6:5f:
         82:35:c1:2b:68:1c:eb:43:f6:92:fe:58:5c:c2:dc:a0:fd:12:
         d4:6e:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:24:14 2025 by rpki-client