This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa
File:                     3137372e37302e3136302e302f32302d3234203d3e203533303139.roa (raw, json)
Hash identifier:          Z+mfum6E0qJUsrZjD4z+JHLn4pZCtvz2Zl2YyWVdcp4=
Subject key identifier:   DB:72:40:C0:36:33:67:AA:45:F1:2E:21:B3:1D:2B:E5:6F:C6:C5:90
Certificate issuer:       /CN=34BF6A56915CA33890219A0C1EA36D5F1688801B
Certificate serial:       765D816F004499DF34013D861507810AC9192F22
Authority key identifier: 34:BF:6A:56:91:5C:A3:38:90:21:9A:0C:1E:A3:6D:5F:16:88:80:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BF6A56915CA33890219A0C1EA36D5F1688801B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa
Signing time:             Fri 12 Dec 2025 13:36:52 +0000
ROA not before:           Fri 12 Dec 2025 13:31:52 +0000
ROA not after:            Fri 11 Dec 2026 13:36:52 +0000
asID:                     53019
IP address blocks:        177.70.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/34BF6A56915CA33890219A0C1EA36D5F1688801B.crl
                          rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/34BF6A56915CA33890219A0C1EA36D5F1688801B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BF6A56915CA33890219A0C1EA36D5F1688801B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 08:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5d:81:6f:00:44:99:df:34:01:3d:86:15:07:81:0a:c9:19:2f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34BF6A56915CA33890219A0C1EA36D5F1688801B
        Validity
            Not Before: Dec 12 13:31:52 2025 GMT
            Not After : Dec 11 13:36:52 2026 GMT
        Subject: CN=DB7240C0363367AA45F12E21B31D2BE56FC6C590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:6a:67:ba:9b:5b:5e:c0:5a:1c:63:87:20:
                    e8:fe:bf:06:50:0d:46:25:2c:08:a4:1a:b1:52:d6:
                    d9:d2:9e:7b:6d:bc:7c:a9:d2:e2:7d:58:e7:df:59:
                    c6:28:b2:55:ed:1c:75:67:7d:ff:96:06:8c:e2:ea:
                    fb:09:6e:dd:55:87:57:ee:35:b1:6f:59:2e:b9:76:
                    11:34:0a:80:34:47:61:ca:81:93:97:a0:7e:74:02:
                    60:eb:4a:67:12:0c:f9:f4:1b:ff:9e:ed:d3:92:5d:
                    22:f9:52:6d:24:0b:2b:84:6c:aa:28:66:74:d5:66:
                    fa:fc:78:a2:9c:a0:94:90:74:36:17:01:e2:a0:e1:
                    4e:82:f2:15:b0:08:1e:09:ce:68:d8:b4:64:3d:44:
                    ad:c9:98:e6:16:ac:0c:72:98:a3:16:92:4c:7b:66:
                    c0:5f:37:26:e4:ad:d8:08:8f:62:8b:28:1b:a6:54:
                    34:3d:73:f9:21:94:e5:66:e4:c7:3e:ef:03:3e:56:
                    6f:ee:5a:d2:d8:91:54:95:52:d2:30:0b:cf:5a:45:
                    47:8c:0e:53:58:f8:f3:bc:06:1c:1a:cc:58:46:c6:
                    23:ec:e6:c1:b3:ee:d3:11:08:b7:d2:c5:90:a0:3a:
                    e3:57:b8:20:10:41:f4:31:de:ad:fb:8c:24:13:c5:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:72:40:C0:36:33:67:AA:45:F1:2E:21:B3:1D:2B:E5:6F:C6:C5:90
            X509v3 Authority Key Identifier:
                keyid:34:BF:6A:56:91:5C:A3:38:90:21:9A:0C:1E:A3:6D:5F:16:88:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/34BF6A56915CA33890219A0C1EA36D5F1688801B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BF6A56915CA33890219A0C1EA36D5F1688801B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:b1:ee:52:75:60:4c:b4:b5:16:34:34:23:ad:cc:14:f7:18:
         47:0a:13:d1:a9:8b:6a:5d:8d:63:ba:40:fd:2f:23:fb:16:a8:
         b1:46:56:25:ed:63:87:ce:13:54:96:05:03:99:cd:11:e0:0d:
         c9:88:38:5f:2d:93:f5:10:24:4f:d3:ab:24:3b:dd:73:8d:42:
         ba:fc:5e:10:20:e8:b5:39:17:d7:89:90:cf:ad:0e:89:56:84:
         0d:3e:9e:0c:84:62:be:de:2f:ab:d9:9d:35:b9:53:d1:27:f9:
         88:bc:16:d2:b0:f4:33:3d:69:16:0f:ef:21:30:8c:c5:14:d9:
         59:06:34:94:29:1e:e7:35:9c:54:77:44:f9:62:c2:e2:5a:7e:
         6f:fc:9f:30:47:19:b0:78:a3:83:98:8c:6a:68:f4:78:bf:0c:
         1f:0f:0c:ad:3b:95:e3:28:be:8a:4b:2d:96:ec:1b:18:d2:13:
         9c:8c:96:0d:ff:3c:b1:be:bc:61:c3:e7:54:9a:af:02:41:49:
         a9:cc:d2:a9:af:6b:3f:13:fa:a3:e8:0a:e0:7b:db:a6:97:37:
         66:a9:0c:3c:2c:86:a9:00:4e:f5:54:73:e4:d2:e1:c9:f7:ec:
         af:da:0e:51:0e:0c:cb:27:59:38:d5:1f:ca:51:e2:31:c4:c6:
         04:7f:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 01:05:47 2025 by rpki-client