This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32332d3233203d3e203532383338.roa
File:                     3137372e36362e3130302e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier:          8sRsuo181BmBIniHfltKFWzo6b/9tqkirzNxhJ2+oBU=
Subject key identifier:   CD:31:01:E8:01:42:63:19:F0:60:19:AE:AB:43:DD:DC:72:26:B6:BC
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       654AE350BFA1283AF9C30620C1AC141160C9EE01
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32332d3233203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:42:18 +0000
ROA not before:           Wed 03 Dec 2025 00:37:18 +0000
ROA not after:            Wed 02 Dec 2026 00:42:18 +0000
asID:                     52838
IP address blocks:        177.66.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 10:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4a:e3:50:bf:a1:28:3a:f9:c3:06:20:c1:ac:14:11:60:c9:ee:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:37:18 2025 GMT
            Not After : Dec  2 00:42:18 2026 GMT
        Subject: CN=CD3101E801426319F06019AEAB43DDDC7226B6BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cb:87:d4:ee:ff:9f:c9:fa:63:99:62:eb:be:
                    78:41:5f:aa:db:96:5f:d2:20:66:37:71:43:3e:8c:
                    61:a3:ac:f9:0b:35:bf:b2:e6:5b:ee:3e:ca:b1:27:
                    b1:ab:4b:04:0e:92:3f:6b:f0:b3:a6:23:bf:f7:57:
                    5c:fb:b4:0a:fc:56:27:25:31:28:ff:f1:8b:9c:30:
                    36:c0:b7:7e:aa:d8:a7:d8:34:d2:26:bd:f6:d9:45:
                    0c:28:c3:bd:aa:11:66:27:5c:90:96:5f:44:97:d3:
                    97:56:e7:29:9f:6c:d2:1c:7d:05:5c:cc:de:b2:de:
                    39:ef:0d:9c:ab:ce:aa:15:69:ef:c0:81:12:6b:ce:
                    eb:8b:c6:8a:fa:ee:94:cf:c7:7a:9e:d7:a1:de:3a:
                    1f:09:b9:74:1e:c0:a8:ad:44:eb:ea:c8:e7:59:42:
                    2e:b0:b0:2c:4d:3c:2f:f8:df:bd:cb:0b:97:fa:be:
                    e2:e0:09:31:0d:1c:83:7e:8c:38:32:ef:63:51:45:
                    92:5d:1e:55:bc:b2:0c:ac:4e:30:10:f4:48:53:f6:
                    96:1d:85:24:78:8e:00:14:85:19:82:2f:d4:9d:2d:
                    25:06:5e:96:02:b5:5b:2b:a6:44:97:45:15:dc:c1:
                    4d:e8:04:41:79:e1:5f:cf:f5:ed:05:30:54:41:a4:
                    75:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:31:01:E8:01:42:63:19:F0:60:19:AE:AB:43:DD:DC:72:26:B6:BC
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130302e302f32332d3233203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:75:7c:17:6c:c7:7f:03:44:e0:29:a8:b5:dd:f2:82:a2:0b:
         7e:e4:0c:d0:9a:99:bd:a0:e4:41:87:1b:10:eb:8d:d9:cc:f4:
         5b:73:a3:e1:75:3d:8b:3a:22:56:c1:b2:bc:50:73:c8:87:71:
         bc:d8:73:f6:2b:eb:03:8f:3e:43:dd:92:e9:3a:0d:18:34:e7:
         fe:4e:c7:35:5f:dc:2d:42:02:82:e9:d1:e7:ea:fc:3b:d9:36:
         e8:84:5d:3d:c3:93:7d:fc:4d:30:bb:6c:e2:dd:18:14:d1:01:
         77:0a:5c:58:10:95:56:5c:c1:a8:10:28:73:e5:f6:04:33:7e:
         61:de:7e:d3:12:ec:2c:83:68:6c:e4:80:52:67:9e:b6:b8:b8:
         76:97:70:53:40:6e:7e:fe:fd:44:91:54:d7:0a:81:09:98:54:
         b3:f7:25:49:c2:0b:14:19:ef:d5:76:43:56:08:eb:46:fc:3d:
         fe:4b:0f:62:4d:9d:b0:1c:61:fd:39:a7:06:af:5e:59:21:3b:
         0c:2e:7f:b4:61:0f:f1:39:06:7e:aa:94:46:be:70:85:0a:49:
         17:a4:2c:72:7d:56:89:0b:39:5b:5f:58:e0:0f:44:81:e1:6b:
         f3:4a:23:9f:1a:6a:f8:30:7c:e2:d8:2b:8f:46:8c:d4:1a:a2:
         4d:dc:d3:eb
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUZUrjUL+hKDr5wwYgwawUEWDJ7gEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC
MzIwNDgyOTAeFw0yNTEyMDMwMDM3MThaFw0yNjEyMDIwMDQyMThaMDMxMTAvBgNV
BAMTKENEMzEwMUU4MDE0MjYzMTlGMDYwMTlBRUFCNDNERERDNzIyNkI2QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpy4fU7v+fyfpjmWLrvnhBX6rb
ll/SIGY3cUM+jGGjrPkLNb+y5lvuPsqxJ7GrSwQOkj9r8LOmI7/3V1z7tAr8Vicl
MSj/8YucMDbAt36q2KfYNNImvfbZRQwow72qEWYnXJCWX0SX05dW5ymfbNIcfQVc
zN6y3jnvDZyrzqoVae/AgRJrzuuLxor67pTPx3qe16HeOh8JuXQewKitROvqyOdZ
Qi6wsCxNPC/4373LC5f6vuLgCTENHIN+jDgy72NRRZJdHlW8sgysTjAQ9EhT9pYd
hSR4jgAUhRmCL9SdLSUGXpYCtVsrpkSXRRXcwU3oBEF54V/P9e0FMFRBpHVRAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUzTEB6AFCYxnwYBmuq0Pd3HImtrwwHwYDVR0j
BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz
RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzEz
NzM3MmUzNjM2MmUzMTMwMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzgz
MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBsUJkMA0GCSqGSIb3DQEBCwUAA4IBAQBDdXwXbMd/A0Tg
Kai13fKCogt+5AzQmpm9oORBhxsQ643ZzPRbc6PhdT2LOiJWwbK8UHPIh3G82HP2
K+sDjz5D3ZLpOg0YNOf+Tsc1X9wtQgKC6dHn6vw72TbohF09w5N9/E0wu2zi3RgU
0QF3ClxYEJVWXMGoEChz5fYEM35h3n7TEuwsg2hs5IBSZ562uLh2l3BTQG5+/v1E
kVTXCoEJmFSz9yVJwgsUGe/VdkNWCOtG/D3+Sw9iTZ2wHGH9OacGr15ZITsMLn+0
YQ/xOQZ+qpRGvnCFCkkXpCxyfVaJCzlbX1jgD0SB4WvzSiOfGmr4MHzi2CuPRozU
GqJN3NPr
-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:04 2025 by rpki-client