This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa
File:                     3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa (raw, json)
Hash identifier:          ozLzZZg7XiqULtcYrlxT3KI6u7UhdGDGTFt0U6h5bQg=
Subject key identifier:   F6:CC:F8:89:4B:13:D4:AF:CF:66:D8:37:87:1E:F5:86:86:AE:89:98
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       0438A8DF1A2E70D3CFBE75650ED1FC1923C3C94D
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa
Signing time:             Fri 28 Nov 2025 13:35:10 +0000
ROA not before:           Fri 28 Nov 2025 13:30:10 +0000
ROA not after:            Fri 27 Nov 2026 13:35:10 +0000
asID:                     266446
IP address blocks:        170.82.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 01:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:38:a8:df:1a:2e:70:d3:cf:be:75:65:0e:d1:fc:19:23:c3:c9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Nov 28 13:30:10 2025 GMT
            Not After : Nov 27 13:35:10 2026 GMT
        Subject: CN=F6CCF8894B13D4AFCF66D837871EF58686AE8998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:75:34:ad:5f:b9:bf:0e:cd:31:b6:a0:51:1c:
                    c9:65:52:56:f6:f6:75:1e:31:71:11:1b:b7:64:06:
                    63:f6:02:5e:f2:83:04:71:e3:88:43:64:35:6d:60:
                    1c:70:e9:5f:ee:8b:61:20:be:6d:77:1f:50:8e:c9:
                    d7:db:16:76:f3:93:0a:b8:8e:c2:5e:a0:da:63:a3:
                    bd:7f:67:79:5c:63:83:db:bc:06:ec:c8:2e:5d:17:
                    c9:bb:7f:b9:95:4d:71:b0:6e:93:42:1f:84:51:93:
                    5f:0b:12:95:af:d4:27:1c:0c:2c:0e:9e:49:51:e0:
                    e7:43:7a:fb:b2:94:40:18:99:3c:9b:03:85:07:42:
                    31:4d:c2:13:ec:07:5e:4d:d6:f3:d2:88:4d:b7:93:
                    56:c0:59:bd:a1:af:95:00:67:3d:0a:05:45:30:c0:
                    3a:2d:35:71:9f:07:83:ef:07:76:ab:75:71:18:23:
                    c2:cb:11:54:9a:36:e9:42:ab:87:48:8b:a3:8d:e7:
                    d9:f8:56:3b:f2:c7:82:17:6a:77:bf:29:1a:45:7d:
                    c9:01:1c:44:17:75:d9:7e:58:4b:c1:01:04:fb:4e:
                    56:e7:e0:5e:76:0f:37:64:3d:c7:07:73:a9:47:e2:
                    43:22:77:29:a7:d0:26:72:8a:d5:2b:40:3d:31:b5:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CC:F8:89:4B:13:D4:AF:CF:66:D8:37:87:1E:F5:86:86:AE:89:98
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:18:80:47:31:ba:d2:d8:96:43:89:68:30:aa:39:9d:3c:b1:
         55:39:59:92:12:69:fa:73:93:7c:e9:09:f1:cf:3a:c3:4f:0f:
         69:9e:85:7d:dd:1e:6d:66:92:d0:66:5f:b1:c8:f6:5c:a7:e4:
         0a:61:c3:55:f6:2f:71:5f:ce:ef:b2:a5:c7:60:a4:73:99:5c:
         b3:53:d8:e7:00:b5:c8:56:a3:da:2f:e9:42:73:f8:92:60:48:
         cb:aa:9e:6d:58:20:0b:ae:88:a4:42:84:2a:63:45:b5:00:46:
         74:f6:bd:d4:ae:d6:1f:0d:ac:60:5b:c8:26:fb:8e:37:d8:13:
         fb:70:df:33:ac:f1:66:24:96:d7:a4:ad:07:ab:94:48:e8:fb:
         2d:b6:a7:ce:85:0c:97:3d:cb:27:2a:83:24:74:e3:06:3c:b0:
         24:62:e7:7b:e5:84:55:a6:09:ac:cd:de:5f:f3:70:c5:5d:06:
         3e:3c:c6:31:c9:80:2d:f8:20:b0:57:fa:85:d1:22:dd:86:a2:
         63:7a:ce:43:b2:e5:78:90:ee:ad:92:c5:d2:c2:1b:d8:d2:9d:
         71:07:7e:62:95:84:39:5d:d3:0e:3d:6f:16:69:7e:af:f4:b9:
         89:12:38:03:ab:8c:a0:25:41:cb:ab:70:d5:b6:3d:25:92:33:
         08:e7:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:09 2025 by rpki-client