This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa
File:                     3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa (raw, json)
Hash identifier:          +YGfYXVXEcm5L3mWBrrv7wGprkhO969viMkdy2B7JzI=
Subject key identifier:   3D:B6:10:79:FB:EF:0A:9E:4E:DD:54:C5:D1:F2:01:B7:22:39:AA:D2
Certificate issuer:       /CN=5E9CEC440C325459B3067A402A845FD05A2D92AA
Certificate serial:       2B9CC2C3F02F0D539AAB392C294A06E031AA7EA7
Authority key identifier: 5E:9C:EC:44:0C:32:54:59:B3:06:7A:40:2A:84:5F:D0:5A:2D:92:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E9CEC440C325459B3067A402A845FD05A2D92AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa
Signing time:             Wed 12 Nov 2025 18:18:15 +0000
ROA not before:           Wed 12 Nov 2025 18:13:15 +0000
ROA not after:            Wed 11 Nov 2026 18:18:15 +0000
asID:                     266460
IP address blocks:        170.82.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/5E9CEC440C325459B3067A402A845FD05A2D92AA.crl
                          rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/5E9CEC440C325459B3067A402A845FD05A2D92AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E9CEC440C325459B3067A402A845FD05A2D92AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9c:c2:c3:f0:2f:0d:53:9a:ab:39:2c:29:4a:06:e0:31:aa:7e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E9CEC440C325459B3067A402A845FD05A2D92AA
        Validity
            Not Before: Nov 12 18:13:15 2025 GMT
            Not After : Nov 11 18:18:15 2026 GMT
        Subject: CN=3DB61079FBEF0A9E4EDD54C5D1F201B72239AAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:ca:d1:ff:a4:54:9c:e9:44:bc:0e:11:ea:
                    f5:ac:58:d5:f8:d2:75:e3:e4:34:88:f1:2b:b3:49:
                    bf:93:d0:94:18:28:b0:5c:f5:96:cf:1e:3e:e7:39:
                    dd:c1:59:24:b9:78:fc:ac:a3:07:b7:fa:e8:03:18:
                    f0:eb:f8:b2:50:10:2f:d3:91:99:07:8d:62:84:95:
                    4f:52:20:3e:86:d7:ef:ae:c5:33:1b:a6:04:f1:f3:
                    c0:20:fe:d8:8f:83:35:19:1d:44:e6:88:46:d6:3a:
                    f9:0f:06:b2:66:3b:17:92:46:28:0d:2c:e5:5a:c3:
                    6e:25:f3:c7:66:8f:f3:14:f7:7b:46:71:ac:ab:e8:
                    be:b9:c3:39:f6:67:f2:47:8c:98:4e:10:e3:f1:09:
                    18:48:5a:71:39:91:23:f1:13:a6:41:54:3b:69:ae:
                    6d:8c:e3:73:51:47:79:30:29:50:e2:ea:c1:f1:65:
                    aa:d7:5c:60:5b:59:af:54:10:9a:ff:7c:ed:d3:83:
                    30:49:6b:08:a5:70:42:7d:03:0b:42:98:c0:b6:ca:
                    07:c9:ab:a3:c2:d9:21:8a:58:23:2a:cf:30:b6:5e:
                    e3:ee:88:99:aa:3f:58:00:a0:d2:ae:d7:92:ed:bd:
                    bf:d5:c0:90:1b:a2:04:7e:2d:f0:e6:ee:33:cd:aa:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B6:10:79:FB:EF:0A:9E:4E:DD:54:C5:D1:F2:01:B7:22:39:AA:D2
            X509v3 Authority Key Identifier:
                keyid:5E:9C:EC:44:0C:32:54:59:B3:06:7A:40:2A:84:5F:D0:5A:2D:92:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/5E9CEC440C325459B3067A402A845FD05A2D92AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E9CEC440C325459B3067A402A845FD05A2D92AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:40:22:4a:ec:db:21:b2:2f:4e:b0:76:d2:57:a4:4c:7f:dc:
         70:1d:11:46:cc:98:f5:5a:08:24:f6:4a:f2:89:f9:38:a1:ed:
         b7:b9:58:27:aa:e3:22:09:17:20:f3:76:16:c0:4c:86:cb:e3:
         28:e1:83:71:37:47:4f:6f:b2:de:e9:87:8d:fc:2c:12:da:b5:
         ad:12:25:12:e8:c3:9c:53:f2:bf:7d:df:ef:ff:33:a4:b2:e6:
         7b:6b:b6:2f:d9:fd:bd:4c:06:25:a7:ad:20:c0:41:af:62:e4:
         f2:43:bd:13:da:ed:65:ff:44:1c:fb:cd:83:0c:80:ce:84:47:
         58:cb:ca:92:60:f3:1a:43:41:2b:09:a0:05:69:e1:40:22:18:
         2f:a6:29:db:05:f7:e0:ca:c6:b9:98:89:70:43:43:43:49:8f:
         a1:d7:cc:81:04:ac:3d:e8:96:d8:18:96:30:83:77:07:93:8e:
         44:42:40:f3:f4:b0:95:19:d6:d2:42:28:03:4e:85:87:05:b5:
         74:24:1b:60:b9:d5:bb:f8:33:de:50:37:66:1f:87:aa:92:77:
         dd:4a:4a:6f:94:96:2b:e3:71:41:dc:c5:9e:91:3f:b7:6b:e9:
         53:b4:41:dd:ea:78:1a:56:67:24:0e:34:80:83:6f:6c:62:6f:
         54:50:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:58:44 2025 by rpki-client