This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32322d3232203d3e203532383338.roa
File:                     3137372e36362e3130302e302f32322d3232203d3e203532383338.roa (raw, json)
Hash identifier:          C8/cQxPPrPYXYcM2eqEAu00sST9NiXuPhcqfVNm32Nc=
Subject key identifier:   58:AA:83:AA:E5:AD:17:92:C0:52:4A:E9:78:A3:61:28:DA:E5:D7:72
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       5D095A85DC8B7F747830CCD43D19760989CB0B44
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32322d3232203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:41:10 +0000
ROA not before:           Wed 03 Dec 2025 00:36:10 +0000
ROA not after:            Wed 02 Dec 2026 00:41:10 +0000
asID:                     52838
IP address blocks:        177.66.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 10:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:09:5a:85:dc:8b:7f:74:78:30:cc:d4:3d:19:76:09:89:cb:0b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:36:10 2025 GMT
            Not After : Dec  2 00:41:10 2026 GMT
        Subject: CN=58AA83AAE5AD1792C0524AE978A36128DAE5D772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:78:22:d7:1d:3a:e8:62:d3:c3:30:42:fe:bc:
                    67:19:dd:2f:6f:1b:59:bb:cf:30:b7:e0:8c:08:b6:
                    38:21:10:92:8f:86:c9:1b:62:24:6e:2d:5a:70:1b:
                    c4:28:e0:42:34:6a:75:3e:1a:a6:37:d8:ee:69:08:
                    e7:7f:9a:ba:50:f8:ef:03:d3:90:60:db:b1:b2:db:
                    a4:36:51:13:93:7e:f4:20:14:27:06:8c:74:8d:19:
                    fe:fd:bc:41:5b:f1:24:7d:c5:ac:17:1d:b1:f8:99:
                    b8:78:23:12:34:62:ce:7d:fc:c8:b8:80:11:7e:8d:
                    7b:b7:36:97:02:2c:1d:b4:9b:2c:0b:f2:ba:db:0c:
                    9f:25:04:7f:90:f7:b3:fc:ce:dc:90:62:19:f8:ac:
                    a8:1f:28:ef:69:f9:90:2a:44:b3:64:3f:85:f3:9f:
                    38:67:71:0f:76:e6:1a:9a:57:1d:4a:ca:aa:05:62:
                    f8:82:58:fa:87:86:4d:f3:85:d2:46:f0:75:ae:70:
                    ea:da:9b:69:02:a6:68:69:a2:6c:ba:65:09:c3:1f:
                    eb:04:1a:57:38:5c:9c:ae:6c:c6:eb:a1:82:f3:ce:
                    d7:b5:3c:88:cd:65:d4:ff:f0:0b:00:2e:d0:e8:53:
                    3f:23:5d:d5:43:95:69:e2:b2:85:30:d7:10:09:a8:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AA:83:AA:E5:AD:17:92:C0:52:4A:E9:78:A3:61:28:DA:E5:D7:72
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32322d3232203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:2f:70:79:cd:42:2a:5a:59:8b:26:a0:03:cc:55:74:28:41:
         e7:f2:6a:b6:a5:cf:c5:8c:9f:34:75:5f:95:ce:ce:11:31:ef:
         f6:b3:75:21:fd:88:06:3b:42:61:21:b1:8d:1a:00:21:b5:74:
         c8:29:68:ed:12:76:00:c7:5c:19:30:8a:3a:65:26:ec:37:fe:
         43:11:39:57:c2:e2:f3:72:c9:e5:a2:72:1c:6e:cb:c8:47:7b:
         3b:05:dd:6e:95:81:66:b0:dd:34:dc:7a:5e:6e:5d:86:5e:e5:
         5e:16:8d:93:73:0e:a0:39:51:43:52:7e:0f:2d:3d:e1:0b:00:
         d4:13:85:a1:da:da:4a:04:4e:4d:d4:89:17:76:c1:5e:01:e3:
         a5:b0:01:d6:40:3a:0e:fa:63:8c:21:30:65:ae:19:8e:ba:64:
         f5:9f:e6:a4:b5:6c:e5:04:b9:56:10:65:8e:e1:ff:61:00:48:
         03:23:8c:e4:f9:b9:5f:3c:c3:08:f3:53:c6:7d:90:91:82:4d:
         b3:4b:63:2c:1f:33:2e:64:d3:7d:9c:d7:ca:6d:e4:c7:19:67:
         88:7a:8b:d0:29:45:25:3c:5b:3a:e5:87:21:4e:e4:88:49:5b:
         5a:4a:08:2d:3b:30:01:89:52:81:eb:73:63:8f:fe:4e:85:1f:
         9e:00:49:62
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUXQlahdyLf3R4MMzUPRl2CYnLC0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC
MzIwNDgyOTAeFw0yNTEyMDMwMDM2MTBaFw0yNjEyMDIwMDQxMTBaMDMxMTAvBgNV
BAMTKDU4QUE4M0FBRTVBRDE3OTJDMDUyNEFFOTc4QTM2MTI4REFFNUQ3NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCReCLXHTroYtPDMEL+vGcZ3S9v
G1m7zzC34IwItjghEJKPhskbYiRuLVpwG8Qo4EI0anU+GqY32O5pCOd/mrpQ+O8D
05Bg27Gy26Q2UROTfvQgFCcGjHSNGf79vEFb8SR9xawXHbH4mbh4IxI0Ys59/Mi4
gBF+jXu3NpcCLB20mywL8rrbDJ8lBH+Q97P8ztyQYhn4rKgfKO9p+ZAqRLNkP4Xz
nzhncQ925hqaVx1KyqoFYviCWPqHhk3zhdJG8HWucOram2kCpmhpomy6ZQnDH+sE
Glc4XJyubMbroYLzzte1PIjNZdT/8AsALtDoUz8jXdVDlWnisoUw1xAJqExlAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUWKqDquWtF5LAUkrpeKNhKNrl13IwHwYDVR0j
BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz
RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzEz
NzM3MmUzNjM2MmUzMTMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMyMzgz
MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCsUJkMA0GCSqGSIb3DQEBCwUAA4IBAQCNL3B5zUIqWlmL
JqADzFV0KEHn8mq2pc/FjJ80dV+Vzs4RMe/2s3Uh/YgGO0JhIbGNGgAhtXTIKWjt
EnYAx1wZMIo6ZSbsN/5DETlXwuLzcsnlonIcbsvIR3s7Bd1ulYFmsN003Hpebl2G
XuVeFo2Tcw6gOVFDUn4PLT3hCwDUE4Wh2tpKBE5N1IkXdsFeAeOlsAHWQDoO+mOM
ITBlrhmOumT1n+aktWzlBLlWEGWO4f9hAEgDI4zk+blfPMMI81PGfZCRgk2zS2Ms
HzMuZNN9nNfKbeTHGWeIeovQKUUlPFs65YchTuSISVtaSggtOzABiVKB63Njj/5O
hR+eAEli
-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:04 2025 by rpki-client