This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130322e302f32332d3233203d3e203532383338.roa
File:                     3137372e36362e3130322e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier:          bkTyVJqrvVqfEjbO834LsRIVP/HixR8HUsIboE+7aeg=
Subject key identifier:   AB:F5:DD:15:33:ED:67:D5:32:70:5B:52:76:43:F8:BA:C0:E3:C5:0E
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       623F46B6DFE44BC2E0E17EA105B314F7F02DF7C7
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130322e302f32332d3233203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:42:38 +0000
ROA not before:           Wed 03 Dec 2025 00:37:38 +0000
ROA not after:            Wed 02 Dec 2026 00:42:38 +0000
asID:                     52838
IP address blocks:        177.66.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 10:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3f:46:b6:df:e4:4b:c2:e0:e1:7e:a1:05:b3:14:f7:f0:2d:f7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:37:38 2025 GMT
            Not After : Dec  2 00:42:38 2026 GMT
        Subject: CN=ABF5DD1533ED67D532705B527643F8BAC0E3C50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:07:95:6b:fe:a6:3b:8e:1f:6a:ac:3a:49:
                    f1:a4:9b:e2:87:72:70:06:1b:c1:c8:e8:a4:63:15:
                    49:ac:19:e2:c8:f5:f3:38:d8:f2:0f:7e:9d:e1:ab:
                    7a:c2:8a:bc:8a:38:76:4d:09:97:27:78:3e:7f:c7:
                    72:ef:d4:a4:7d:51:6a:c1:7e:ce:a7:b7:ef:1b:76:
                    81:02:d1:55:16:64:a0:9d:eb:27:9b:ec:51:c3:0f:
                    15:50:af:46:ac:85:bc:4a:1b:db:ad:35:98:92:a3:
                    d9:32:44:04:bf:33:58:6e:72:da:38:6a:ac:93:f1:
                    c7:c9:dd:f3:05:a5:10:78:e5:6c:01:2b:b8:a3:76:
                    58:53:fa:96:53:56:54:83:ec:ec:7b:5d:d8:24:42:
                    bc:e2:eb:11:a5:8e:a4:b5:ae:58:24:e4:d8:aa:1e:
                    1d:e9:e8:af:81:4e:2b:52:0c:97:e6:33:6c:46:79:
                    8e:03:2a:b6:ac:de:d0:22:d0:a7:90:f6:0c:b0:87:
                    f8:fd:03:86:0a:b6:55:c5:d3:98:10:67:60:cb:d7:
                    20:8e:25:97:45:29:ae:6e:d2:81:d5:24:61:7b:e9:
                    26:f0:16:b8:28:c4:b6:da:cc:67:6d:03:5c:30:40:
                    b4:a6:34:de:9e:5c:93:5e:1c:0a:1a:ac:8b:5e:3c:
                    13:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F5:DD:15:33:ED:67:D5:32:70:5B:52:76:43:F8:BA:C0:E3:C5:0E
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130322e302f32332d3233203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:6b:68:ea:17:59:72:79:fe:b1:fb:a4:a8:1a:9d:f1:b6:
         ec:db:50:7d:58:d3:c5:b8:8d:9d:62:fa:72:2b:ec:ad:8f:23:
         31:e8:0a:59:16:e6:4e:e2:74:bc:29:1d:7a:64:15:8c:4e:ed:
         f9:04:37:df:88:92:82:58:0c:e1:a2:b2:3a:01:ea:a0:2c:4d:
         43:2b:3b:7f:59:18:36:9b:d9:be:a7:0a:ce:e6:a9:5c:65:02:
         00:e5:41:3e:38:54:00:05:9f:58:7b:22:85:e8:4c:4d:fe:82:
         e8:a1:03:e8:a2:c1:e4:6d:38:af:ce:3f:42:21:34:98:e5:47:
         21:c7:bc:6c:c0:6f:e4:cb:47:13:1d:dc:9f:35:eb:f1:9b:21:
         28:60:38:9c:22:41:4b:d8:c8:ee:26:df:ca:d3:89:be:6c:fa:
         47:2e:a5:a1:91:f5:57:be:12:37:56:3c:b3:00:99:03:3b:bc:
         74:99:a9:8f:94:b9:bc:a1:9f:18:37:4f:21:e0:74:ff:6e:d7:
         d2:be:17:21:1c:5a:de:92:8e:20:64:4f:94:da:6d:25:92:06:
         cf:6a:73:22:49:f7:bc:07:86:41:89:bb:d3:c8:b6:bb:56:55:
         3f:b7:12:3e:3e:a0:7e:2e:5d:55:66:a9:bd:69:85:32:38:79:
         c9:fc:f2:3c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUYj9Gtt/kS8Lg4X6hBbMU9/At98cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC
MzIwNDgyOTAeFw0yNTEyMDMwMDM3MzhaFw0yNjEyMDIwMDQyMzhaMDMxMTAvBgNV
BAMTKEFCRjVERDE1MzNFRDY3RDUzMjcwNUI1Mjc2NDNGOEJBQzBFM0M1MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjQeVa/6mO44faqw6SfGkm+KH
cnAGG8HI6KRjFUmsGeLI9fM42PIPfp3hq3rCiryKOHZNCZcneD5/x3Lv1KR9UWrB
fs6nt+8bdoEC0VUWZKCd6yeb7FHDDxVQr0ashbxKG9utNZiSo9kyRAS/M1hucto4
aqyT8cfJ3fMFpRB45WwBK7ijdlhT+pZTVlSD7Ox7XdgkQrzi6xGljqS1rlgk5Niq
Hh3p6K+BTitSDJfmM2xGeY4DKras3tAi0KeQ9gywh/j9A4YKtlXF05gQZ2DL1yCO
JZdFKa5u0oHVJGF76SbwFrgoxLbazGdtA1wwQLSmNN6eXJNeHAoarItePBPzAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUq/XdFTPtZ9UycFtSdkP4usDjxQ4wHwYDVR0j
BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz
RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzEz
NzM3MmUzNjM2MmUzMTMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzgz
MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBsUJmMA0GCSqGSIb3DQEBCwUAA4IBAQAbimto6hdZcnn+
sfukqBqd8bbs21B9WNPFuI2dYvpyK+ytjyMx6ApZFuZO4nS8KR16ZBWMTu35BDff
iJKCWAzhorI6AeqgLE1DKzt/WRg2m9m+pwrO5qlcZQIA5UE+OFQABZ9YeyKF6ExN
/oLooQPoosHkbTivzj9CITSY5Uchx7xswG/ky0cTHdyfNevxmyEoYDicIkFL2Mju
Jt/K04m+bPpHLqWhkfVXvhI3VjyzAJkDO7x0mamPlLm8oZ8YN08h4HT/btfSvhch
HFreko4gZE+U2m0lkgbPanMiSfe8B4ZBibvTyLa7VlU/txI+PqB+Ll1VZqm9aYUy
OHnJ/PI8
-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:05 2025 by rpki-client