This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3230302e33322e302f32302d3234203d3e20323636353339.roa
File:                     3137372e3230302e33322e302f32302d3234203d3e20323636353339.roa (raw, json)
Hash identifier:          MPUf4RUd2N54twk8LH4KH+geWPZ8QRgWxi2pB9yPM8U=
Subject key identifier:   C7:81:1E:F8:9D:FF:BB:86:83:54:88:2E:E5:8F:C3:DC:8B:4E:33:4C
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       0C08E53F0509175EA0E49A2D039C35ED74F5A717
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3230302e33322e302f32302d3234203d3e20323636353339.roa
Signing time:             Tue 09 Dec 2025 21:32:30 +0000
ROA not before:           Tue 09 Dec 2025 21:27:30 +0000
ROA not after:            Tue 08 Dec 2026 21:32:30 +0000
asID:                     266539
IP address blocks:        177.200.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:08:e5:3f:05:09:17:5e:a0:e4:9a:2d:03:9c:35:ed:74:f5:a7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Dec  9 21:27:30 2025 GMT
            Not After : Dec  8 21:32:30 2026 GMT
        Subject: CN=C7811EF89DFFBB868354882EE58FC3DC8B4E334C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:58:02:a7:9c:4c:a9:27:7a:cc:f4:64:4f:
                    bd:21:52:a3:e8:42:c3:1f:3b:2c:28:6a:07:43:b0:
                    41:80:fd:a7:9a:0a:37:cb:1a:9e:74:f1:3f:d6:6e:
                    17:b8:5e:27:f0:84:ca:d8:58:44:87:bc:27:66:78:
                    df:24:86:06:b5:ed:0b:af:8b:f0:3d:a1:5d:af:f1:
                    a7:51:6f:b4:90:57:cf:30:af:ef:02:f2:2a:f6:4e:
                    d3:69:85:34:d2:a1:56:67:9b:dc:8d:06:d5:1f:8c:
                    40:e7:4e:7f:de:c6:49:45:48:f3:6b:74:fa:ed:9c:
                    b2:cf:78:7f:fc:83:02:d9:15:51:a5:e9:a0:2e:36:
                    fb:d2:f3:b2:2b:28:c2:f3:55:75:af:34:21:83:93:
                    6c:eb:1d:8c:e5:a2:e0:09:6f:9a:d1:e5:15:86:a4:
                    24:a4:a9:e7:d3:c2:64:7b:c2:9d:9a:4f:b8:7c:35:
                    15:b0:8c:74:63:e1:6d:f6:60:95:2e:4c:c9:fc:b5:
                    49:26:87:04:13:ab:a4:5e:50:78:01:6f:d0:ae:db:
                    32:d2:6e:01:c6:29:65:2c:74:f2:cd:00:b6:4a:b1:
                    74:1f:51:6f:7c:0a:85:d3:1d:60:69:53:c0:99:0c:
                    4a:52:fb:b9:63:5b:01:0c:c9:ac:6f:52:bc:96:32:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:81:1E:F8:9D:FF:BB:86:83:54:88:2E:E5:8F:C3:DC:8B:4E:33:4C
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3230302e33322e302f32302d3234203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:ef:bc:40:3e:c9:e6:cf:be:e1:c8:8e:f4:6f:74:dd:8a:33:
         35:f3:b8:45:e4:ad:a0:8c:89:bd:2b:e3:bb:84:ee:61:57:bc:
         46:b2:b1:46:3d:c4:7f:f6:8c:d8:78:52:74:1a:81:2a:45:8e:
         6d:f9:4c:24:e9:86:10:cd:92:a4:67:59:1b:82:98:37:1a:69:
         76:59:ac:f2:b1:3c:ea:92:ec:39:06:7d:5a:fe:24:5d:d0:fd:
         4f:cc:3f:4a:64:3b:18:c3:ad:c0:46:12:86:a8:d2:b8:ca:3f:
         86:19:60:ee:21:4b:b0:51:50:d9:e3:17:00:22:d0:af:12:e7:
         78:08:3f:ce:09:6c:5e:fd:c4:9d:34:21:13:9f:1d:77:ea:6c:
         77:f3:d4:de:dd:ed:0f:f2:f2:15:cf:c6:71:b9:74:82:61:11:
         54:ed:79:00:76:4e:01:8f:db:55:77:1e:06:0e:7d:87:15:ea:
         d2:1b:de:9a:40:ad:0a:92:4f:bd:e3:d3:60:79:3c:1b:72:49:
         07:f3:7c:fe:5d:69:d4:6d:ee:d7:97:a4:52:db:ad:98:c5:ac:
         6a:3e:b1:b4:d3:14:4a:85:a2:02:84:0c:34:5c:c1:09:98:e0:
         c5:a0:5a:94:b0:ee:57:08:a5:fd:43:9b:7b:a3:f8:ce:6f:aa:
         62:3f:32:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDAjlPwUJF16g5JotA5w17XT1pxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNFQ0FBRDI5QUFGNzUxMjZEOEQyRjU5NEZDNDNBQjBF
N0IzQTEwRDAeFw0yNTEyMDkyMTI3MzBaFw0yNjEyMDgyMTMyMzBaMDMxMTAvBgNV
BAMTKEM3ODExRUY4OURGRkJCODY4MzU0ODgyRUU1OEZDM0RDOEI0RTMzNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtFgCp5xMqSd6zPRkT70hUqPo
QsMfOywoagdDsEGA/aeaCjfLGp508T/Wbhe4XifwhMrYWESHvCdmeN8khga17Quv
i/A9oV2v8adRb7SQV88wr+8C8ir2TtNphTTSoVZnm9yNBtUfjEDnTn/exklFSPNr
dPrtnLLPeH/8gwLZFVGl6aAuNvvS87IrKMLzVXWvNCGDk2zrHYzlouAJb5rR5RWG
pCSkqefTwmR7wp2aT7h8NRWwjHRj4W32YJUuTMn8tUkmhwQTq6ReUHgBb9Cu2zLS
bgHGKWUsdPLNALZKsXQfUW98CoXTHWBpU8CZDEpS+7ljWwEMyaxvUryWMqMrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUx4Ee+J3/u4aDVIgu5Y/D3ItOM0wwHwYDVR0j
BBgwFoAUrOyq0pqvdRJtjS9ZT8Q6sOezoQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1mSmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYy
blovMi9BQ0VDQUFEMjlBQUY3NTEyNkQ4RDJGNTk0RkM0M0FCMEU3QjNBMTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRUNBQUQyOUFBRjc1MTI2
RDhEMkY1OTRGQzQzQUIwRTdCM0ExMEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htZkppVTh1UnZqbzVpSllRcFJ4SzFlWjZrNHh4SjVXMnNRTUY4MUhmMm5aLzIv
MzEzNzM3MmUzMjMwMzAyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxyCAwDQYJKoZIhvcNAQELBQADggEBAF3vvEA+
yebPvuHIjvRvdN2KMzXzuEXkraCMib0r47uE7mFXvEaysUY9xH/2jNh4UnQagSpF
jm35TCTphhDNkqRnWRuCmDcaaXZZrPKxPOqS7DkGfVr+JF3Q/U/MP0pkOxjDrcBG
Eoao0rjKP4YZYO4hS7BRUNnjFwAi0K8S53gIP84JbF79xJ00IROfHXfqbHfz1N7d
7Q/y8hXPxnG5dIJhEVTteQB2TgGP21V3HgYOfYcV6tIb3ppArQqST73j02B5PBty
SQfzfP5dadRt7teXpFLbrZjFrGo+sbTTFEqFogKEDDRcwQmY4MWgWpSw7lcIpf1D
m3uj+M5vqmI/Ms4=
-----END CERTIFICATE-----
Generated at Wed Dec 10 10:53:25 2025 by rpki-client