This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130322e302f32342d3234203d3e203532383338.roa
File:                     3137372e36362e3130322e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier:          jNRdvO6brxlZBBv38kChMzYWFC2J8dWG0SkwZFTCVsk=
Subject key identifier:   2C:98:AA:6F:41:1D:8F:B7:5D:9E:FE:BE:D3:7F:79:9E:C8:74:EC:B8
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       6E2A6688BA88A4A0A46068C21716FD9723A1DB5E
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130322e302f32342d3234203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:43:55 +0000
ROA not before:           Wed 03 Dec 2025 00:38:55 +0000
ROA not after:            Wed 02 Dec 2026 00:43:55 +0000
asID:                     52838
IP address blocks:        177.66.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 10:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2a:66:88:ba:88:a4:a0:a4:60:68:c2:17:16:fd:97:23:a1:db:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:38:55 2025 GMT
            Not After : Dec  2 00:43:55 2026 GMT
        Subject: CN=2C98AA6F411D8FB75D9EFEBED37F799EC874ECB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:6d:93:f8:fa:f8:8d:15:b7:64:a9:6e:e6:
                    92:78:02:7d:20:9e:d6:ee:ec:69:76:09:bf:80:10:
                    2d:b5:4d:be:42:cb:ff:22:89:ac:2f:13:74:dd:ec:
                    2b:41:61:53:b8:1f:26:60:b8:44:59:0f:08:0c:8f:
                    1c:af:b2:6f:87:db:9f:80:05:5b:75:ab:86:e6:a8:
                    71:de:be:a3:54:38:e1:d8:bd:14:9a:67:fd:34:82:
                    aa:af:5b:d4:40:7c:5d:97:63:0e:82:41:7c:ca:f0:
                    a5:1b:fc:3a:6d:bd:fe:8b:36:31:f6:b9:cb:47:76:
                    e8:6c:8f:95:91:53:0d:f7:a6:62:fb:a6:01:db:09:
                    a8:fa:40:58:a7:3f:b3:86:be:c3:78:7b:73:9f:e5:
                    d8:35:17:5f:ad:a7:56:fe:81:43:e3:5c:ef:3e:34:
                    f2:5c:d6:bb:69:66:8d:52:9e:56:ea:36:85:b2:e7:
                    ad:0d:20:5e:61:8d:3b:d8:d9:38:e1:fc:25:7a:2d:
                    f4:df:5c:38:ee:33:cf:7b:98:bc:87:98:c1:d2:91:
                    e3:b1:30:20:e1:86:68:e7:10:1c:ca:8a:a3:af:62:
                    5e:72:1c:b5:26:33:21:73:5f:1f:7b:2c:7d:9b:34:
                    61:9b:49:22:d6:48:c6:ff:af:7a:59:4c:ae:20:2e:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:98:AA:6F:41:1D:8F:B7:5D:9E:FE:BE:D3:7F:79:9E:C8:74:EC:B8
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3137372e36362e3130322e302f32342d3234203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:e3:78:17:b6:44:fc:ca:57:53:20:f0:fc:f9:31:0a:00:8e:
         a9:2f:7f:5f:3d:d5:88:03:35:e6:47:7f:5e:aa:f9:45:ab:12:
         ea:d3:dc:83:8a:6c:51:c8:e1:cd:cf:bc:c8:4c:f5:9c:f1:c4:
         83:97:10:f1:60:45:5e:33:87:ce:80:00:d7:17:e8:69:96:1f:
         08:d8:fb:6d:52:e4:36:a6:23:20:7d:71:77:70:ff:6a:95:c5:
         f4:c1:a5:d5:91:68:98:b3:29:f9:2d:51:64:3c:a8:09:6e:54:
         d4:df:0a:55:dc:12:fb:40:91:3d:1b:2c:e8:5c:7e:a5:f4:42:
         45:2a:aa:1d:1d:d9:d7:7e:19:83:c7:ab:c5:7a:09:ca:9f:0c:
         74:f0:54:5a:ca:e9:a1:07:a8:e2:37:57:36:80:29:66:1a:ad:
         3b:7e:5e:c9:51:09:39:a8:6e:69:c6:ae:d1:5d:a4:02:6e:97:
         ff:f4:98:ba:9b:ee:99:46:49:3b:b6:3a:0b:eb:4e:a0:66:96:
         4a:00:53:91:19:06:3e:d7:f6:2e:bb:6f:b4:3a:28:96:65:59:
         ae:5a:8e:b7:36:ac:3c:09:0c:37:23:18:58:80:98:f1:8a:7f:
         ab:fc:b8:98:3d:de:42:ce:7f:e5:4f:41:5a:be:dd:0e:ca:3c:
         a6:75:a9:31
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUbipmiLqIpKCkYGjCFxb9lyOh214wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC
MzIwNDgyOTAeFw0yNTEyMDMwMDM4NTVaFw0yNjEyMDIwMDQzNTVaMDMxMTAvBgNV
BAMTKDJDOThBQTZGNDExRDhGQjc1RDlFRkVCRUQzN0Y3OTlFQzg3NEVDQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS5m2T+Pr4jRW3ZKlu5pJ4An0g
ntbu7Gl2Cb+AEC21Tb5Cy/8iiawvE3Td7CtBYVO4HyZguERZDwgMjxyvsm+H25+A
BVt1q4bmqHHevqNUOOHYvRSaZ/00gqqvW9RAfF2XYw6CQXzK8KUb/Dptvf6LNjH2
uctHduhsj5WRUw33pmL7pgHbCaj6QFinP7OGvsN4e3Of5dg1F1+tp1b+gUPjXO8+
NPJc1rtpZo1SnlbqNoWy560NIF5hjTvY2Tjh/CV6LfTfXDjuM897mLyHmMHSkeOx
MCDhhmjnEBzKiqOvYl5yHLUmMyFzXx97LH2bNGGbSSLWSMb/r3pZTK4gLk/hAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQULJiqb0Edj7ddnv6+0395nsh07LgwHwYDVR0j
BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz
RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzEz
NzM3MmUzNjM2MmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzgz
MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAsUJmMA0GCSqGSIb3DQEBCwUAA4IBAQAg43gXtkT8yldT
IPD8+TEKAI6pL39fPdWIAzXmR39eqvlFqxLq09yDimxRyOHNz7zITPWc8cSDlxDx
YEVeM4fOgADXF+hplh8I2PttUuQ2piMgfXF3cP9qlcX0waXVkWiYsyn5LVFkPKgJ
blTU3wpV3BL7QJE9GyzoXH6l9EJFKqodHdnXfhmDx6vFegnKnwx08FRayumhB6ji
N1c2gClmGq07fl7JUQk5qG5pxq7RXaQCbpf/9Ji6m+6ZRkk7tjoL606gZpZKAFOR
GQY+1/Yuu2+0OiiWZVmuWo63Nqw8CQw3IxhYgJjxin+r/LiYPd5Czn/lT0Favt0O
yjymdakx
-----END CERTIFICATE-----
Generated at Sun Dec 7 17:07:41 2025 by rpki-client