This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133362e302f32322d3232203d3e203631353837.roa
File:                     3137302e3235342e3133362e302f32322d3232203d3e203631353837.roa (raw, json)
Hash identifier:          0vsFLqOmKVAX983PuMmpFNsHjVC04MxT9HCWKnod8MQ=
Subject key identifier:   D2:08:B2:C6:57:5C:40:E2:4C:D2:14:5F:C3:02:81:07:1C:C5:2F:14
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       116E72A33CF557D63FA85759C0960CA2CE86A694
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133362e302f32322d3232203d3e203631353837.roa
Signing time:             Tue 02 Dec 2025 19:03:41 +0000
ROA not before:           Tue 02 Dec 2025 18:58:41 +0000
ROA not after:            Tue 01 Dec 2026 19:03:41 +0000
asID:                     61587
IP address blocks:        170.254.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6e:72:a3:3c:f5:57:d6:3f:a8:57:59:c0:96:0c:a2:ce:86:a6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec  2 18:58:41 2025 GMT
            Not After : Dec  1 19:03:41 2026 GMT
        Subject: CN=D208B2C6575C40E24CD2145FC30281071CC52F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:79:ec:92:dd:39:92:a2:fe:cc:5d:56:40:
                    e3:d1:a7:01:e4:1e:28:5a:2f:7c:bb:d0:97:64:d7:
                    4c:7b:47:4e:9f:75:76:7c:5c:8f:38:63:78:ff:d8:
                    ea:c2:bb:85:d4:0f:e9:b5:21:f7:12:69:0f:48:64:
                    49:c1:89:63:6f:d1:90:2c:12:98:15:a7:4c:5c:c7:
                    eb:56:03:a0:4e:76:b7:92:4e:41:5c:b0:7d:74:a7:
                    37:52:09:de:78:0a:ce:4f:e4:63:8a:f7:5e:4a:46:
                    b4:1d:22:69:e0:a1:c7:56:05:70:11:1b:8d:6a:4c:
                    bb:4a:ab:e2:8b:3f:d6:6e:0a:80:67:98:7f:b2:4b:
                    cd:76:1e:90:3b:7f:1e:37:9e:66:02:da:66:cc:e0:
                    42:31:24:94:7e:66:ff:a0:4c:3a:51:a1:56:e3:82:
                    00:8d:1c:53:83:a6:26:bc:69:45:65:8e:49:a5:e4:
                    30:3f:95:4b:79:7b:d1:ab:2b:94:99:d9:66:60:aa:
                    88:63:2d:c7:f8:52:28:d1:e4:3b:19:f7:7a:23:2d:
                    7d:18:61:09:5f:12:76:06:7e:05:eb:9a:75:2c:1b:
                    af:1e:a3:99:90:86:94:ef:e4:53:bc:71:e9:ec:8a:
                    94:e9:d1:02:21:9e:36:dd:9d:24:00:fb:83:57:89:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:08:B2:C6:57:5C:40:E2:4C:D2:14:5F:C3:02:81:07:1C:C5:2F:14
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133362e302f32322d3232203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:67:3b:ad:61:e9:67:c6:c1:3a:fc:5c:b4:5d:09:5d:2c:ac:
         a5:4f:8e:28:50:a6:b9:7a:50:ce:a8:17:99:e0:ad:12:7f:30:
         00:4a:60:f8:63:9a:ab:e6:ef:71:ea:7b:95:7d:84:56:b3:5e:
         66:f0:fe:50:cd:36:2c:d3:a8:5a:bd:db:0c:e9:b8:90:9e:27:
         99:3b:3d:ea:4a:00:e9:b5:0d:99:09:52:99:95:41:b4:8a:38:
         d5:62:53:94:f5:06:8e:f6:df:3c:52:d6:37:f1:f4:72:0a:27:
         41:69:eb:09:2e:14:a1:32:c3:83:5c:84:d2:79:d8:e4:33:c2:
         53:97:b0:4d:6e:ca:40:81:a5:65:5f:1d:d5:2e:80:a9:0f:5a:
         b1:9a:3c:62:47:f9:45:ae:06:46:a5:f6:15:78:80:ae:24:d3:
         4f:7c:9a:fb:34:3a:9d:43:80:c4:80:e4:c0:5b:10:34:45:98:
         13:e4:70:08:49:9b:69:4d:9d:07:fa:ec:05:e6:5b:26:a2:ce:
         72:c6:59:59:6d:ba:75:67:c3:23:7b:62:52:d7:11:4e:31:57:
         e8:09:0f:6e:b9:4c:c0:18:a8:aa:4f:fc:59:3e:04:a2:38:fc:
         49:a5:07:e1:52:f3:0a:66:5b:06:3f:b5:33:41:ef:d5:18:41:
         ca:2b:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:59 2025 by rpki-client