This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35332e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35332e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          Ce9bnF1kgK6toUeD/4z3oplLjsmTg2z51yTymIEbhWM=
Subject key identifier:   7E:60:AB:5A:AD:69:59:D5:B8:76:4B:25:BD:AD:1C:13:10:97:27:18
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       77FC2FAFBF2AA7779D6F871A5B3B7F49EAF752E5
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35332e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 19 Dec 2025 16:50:00 +0000
ROA not before:           Fri 19 Dec 2025 16:45:00 +0000
ROA not after:            Fri 18 Dec 2026 16:50:00 +0000
asID:                     52930
IP address blocks:        177.185.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fc:2f:af:bf:2a:a7:77:9d:6f:87:1a:5b:3b:7f:49:ea:f7:52:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Dec 19 16:45:00 2025 GMT
            Not After : Dec 18 16:50:00 2026 GMT
        Subject: CN=7E60AB5AAD6959D5B8764B25BDAD1C1310972718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:d8:8b:ad:84:08:63:d9:8a:20:ea:d1:98:
                    89:5f:20:fc:4d:4b:28:5b:0d:c7:de:47:34:7f:28:
                    1a:cb:3a:87:19:83:20:e1:64:fa:3b:e4:77:af:13:
                    26:bf:77:c4:cb:ed:db:7a:ef:12:ab:9e:f5:50:07:
                    25:b9:b8:1e:ba:59:1f:97:3a:ea:71:ac:b5:2e:25:
                    14:63:7d:7e:6f:d5:3e:b4:06:37:42:f0:3e:f8:7e:
                    df:c8:d8:87:d5:2f:8e:8f:c9:47:93:3c:0b:7c:ca:
                    fa:08:85:ef:e6:23:7f:37:de:18:03:20:3c:45:14:
                    6c:81:63:13:bf:b2:ec:fc:5c:b3:ba:9f:8d:1d:bb:
                    76:09:3d:e6:88:21:86:59:b6:4f:d2:d3:b9:f3:34:
                    2d:09:3c:9c:11:fc:10:89:bb:ac:e9:16:9e:23:cd:
                    22:55:49:1c:8d:e8:a2:58:3d:17:2f:e4:01:07:b0:
                    cc:02:bb:5a:c1:43:8e:0e:fa:22:7f:23:38:7f:7e:
                    5c:13:17:cd:11:12:b7:04:74:e3:12:46:40:9d:16:
                    2e:41:69:2f:f1:a1:a3:0e:d4:12:e1:50:30:82:15:
                    f9:33:bf:49:59:11:e2:f6:0b:ab:e9:c8:b7:f4:9c:
                    38:bf:70:35:51:34:0a:44:9a:65:58:5a:2b:48:c8:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:60:AB:5A:AD:69:59:D5:B8:76:4B:25:BD:AD:1C:13:10:97:27:18
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35332e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f7:91:13:51:c0:56:61:cd:13:cc:64:e9:30:df:c7:2b:31:
         e1:70:44:3b:ff:b7:e6:3d:96:66:95:64:f3:93:15:75:8a:58:
         0d:9f:1a:ca:4d:e4:68:27:48:07:33:eb:c3:4d:7c:18:86:f9:
         48:18:c6:1a:6a:2c:cc:f3:51:f3:89:ec:90:40:de:06:19:a1:
         69:ee:43:a1:32:92:e7:69:98:ec:f7:c6:2d:35:6d:a1:0d:5b:
         54:bd:d8:3a:0b:d2:e9:f0:06:8d:bb:89:e2:2d:96:82:e9:8b:
         81:b8:6c:15:98:f8:59:b8:a0:f7:8e:d5:15:61:70:29:65:59:
         9d:ea:af:6a:0f:27:2d:93:e2:ac:54:fa:d1:db:27:ea:ff:27:
         8c:5c:1e:f0:54:94:49:da:77:17:75:0a:13:20:24:f9:0d:51:
         62:67:fc:0f:25:ed:78:8a:3e:7e:b7:15:3c:e4:e0:bc:7f:e7:
         3a:23:99:ca:66:ee:7e:de:7d:a0:77:2c:cd:8f:24:1e:0e:6e:
         d8:a7:c4:39:29:08:e8:20:c3:92:dc:5a:dc:9b:2b:ae:80:d8:
         f8:9f:2d:5a:91:a9:a1:49:41:79:8e:13:81:8d:ae:68:b3:33:
         60:20:4f:a0:e6:12:4f:65:a6:ea:24:09:93:ec:26:64:b9:68:
         1a:a9:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:59:03 2025 by rpki-client