This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3137372e37322e3134382e302f32322d3332203d3e203532383138.roa
File:                     3137372e37322e3134382e302f32322d3332203d3e203532383138.roa (raw, json)
Hash identifier:          lM7c6M0J2w/4EolNkFZOBJa9bRKzETvZb2ozBmYadl8=
Subject key identifier:   F0:96:BA:F9:66:9E:C1:93:07:16:04:7B:93:34:FC:22:AB:23:11:19
Certificate issuer:       /CN=3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42
Certificate serial:       2D8300DC46AFAB1CF0FD8A9793CB03FF342854B3
Authority key identifier: 3E:28:7C:63:DB:B3:ED:0D:09:ED:B7:0A:34:93:B0:2D:6C:FD:FB:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3137372e37322e3134382e302f32322d3332203d3e203532383138.roa
Signing time:             Wed 26 Nov 2025 17:26:52 +0000
ROA not before:           Wed 26 Nov 2025 17:21:52 +0000
ROA not after:            Wed 25 Nov 2026 17:26:52 +0000
asID:                     52818
IP address blocks:        177.72.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.crl
                          rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 10:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:83:00:dc:46:af:ab:1c:f0:fd:8a:97:93:cb:03:ff:34:28:54:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42
        Validity
            Not Before: Nov 26 17:21:52 2025 GMT
            Not After : Nov 25 17:26:52 2026 GMT
        Subject: CN=F096BAF9669EC1930716047B9334FC22AB231119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:d3:5e:ba:ff:8d:30:0f:10:ac:45:06:16:
                    da:0b:cc:a3:bf:c4:8e:f4:c0:fa:52:9b:8c:ab:5b:
                    3e:eb:ab:67:92:51:57:be:b4:25:11:d2:4f:ed:57:
                    21:c8:00:5d:17:ef:6a:02:19:f6:2d:91:56:59:b3:
                    9e:76:61:15:f7:63:c7:f9:58:ee:f6:51:06:cc:6b:
                    5d:3f:eb:31:52:f3:c4:05:76:b8:07:6f:d2:1e:0e:
                    79:f1:df:11:36:92:69:4f:96:01:5e:8b:60:53:96:
                    7d:6d:32:ec:1d:14:40:f7:74:3c:98:b6:78:80:49:
                    32:81:70:32:90:33:36:95:1b:8c:f1:c4:7d:10:9a:
                    b9:18:d9:d8:6d:10:4f:2f:74:d4:00:42:03:f1:ca:
                    a6:58:2b:73:81:e5:af:c3:bc:e0:46:62:c1:c4:1e:
                    f2:08:e3:52:e3:1d:e1:c4:bd:5d:a2:17:64:b7:f6:
                    47:64:ea:8c:bd:da:94:cd:d3:b6:f0:e4:a2:17:d7:
                    85:f5:3e:75:be:52:40:de:6e:b8:42:93:5f:4f:26:
                    69:5a:b9:6a:4b:cf:1e:2a:13:9d:5f:13:e5:b5:d3:
                    a9:0b:7a:60:bf:87:99:55:da:f4:31:d0:23:6c:28:
                    22:55:de:55:57:cd:7b:72:47:ec:62:ff:69:2d:41:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:96:BA:F9:66:9E:C1:93:07:16:04:7B:93:34:FC:22:AB:23:11:19
            X509v3 Authority Key Identifier:
                keyid:3E:28:7C:63:DB:B3:ED:0D:09:ED:B7:0A:34:93:B0:2D:6C:FD:FB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3137372e37322e3134382e302f32322d3332203d3e203532383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:f9:76:d5:71:23:37:3e:06:14:9b:f2:19:26:26:b1:3c:bb:
         99:0d:0f:87:ca:96:86:f3:b4:2a:2d:e6:42:11:3a:47:d7:15:
         1a:56:fc:c8:7e:2e:a5:dc:d9:ca:91:45:66:4c:6a:1b:0c:50:
         00:e4:dd:93:d3:92:a3:bd:4c:ba:12:c3:4f:55:39:f1:e0:eb:
         94:96:93:86:54:da:45:5a:c0:50:2b:80:a4:f6:7a:f0:cf:98:
         93:3e:39:59:f6:be:76:9e:41:8e:b0:56:cf:01:4a:cc:48:6d:
         de:7b:08:fb:ae:ae:ae:50:18:0c:f7:78:b1:f7:2a:60:40:bd:
         7e:7d:57:9e:13:ce:fb:fe:da:64:9e:e6:77:9d:4b:ca:cc:0a:
         38:3e:93:70:a7:cf:f0:29:5e:78:f9:f7:61:6a:90:16:25:33:
         0e:a0:7b:e2:d9:8f:89:ca:f6:07:d6:bb:c1:3b:a7:a3:fc:d1:
         4c:75:f6:18:f9:59:3d:1c:49:ed:2f:c2:d6:f5:60:73:6b:cf:
         a2:09:09:3d:bd:4e:b2:ee:05:50:69:9c:7b:7d:a6:6e:e2:0b:
         6d:3d:29:8b:c9:2b:25:b5:57:29:63:e7:2c:2b:e2:d1:6b:87:
         62:be:de:06:4f:17:98:a9:ad:2e:99:ff:6f:c1:2e:c2:92:5a:
         6a:8b:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:45:55 2025 by rpki-client