This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa
File:                     3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier:          C1K3a3eVj7iuOWZKlo48Gs3N9RZD6HCjjXEu5lqxK2M=
Subject key identifier:   9E:4C:7E:0B:9A:EE:41:CE:98:4C:22:EC:75:10:4A:75:0C:54:9B:98
Certificate issuer:       /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial:       47015433E0763C4CE9CBE8E0C59A56E57147D0D4
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa
Signing time:             Mon 17 Nov 2025 17:12:54 +0000
ROA not before:           Mon 17 Nov 2025 17:07:54 +0000
ROA not after:            Mon 16 Nov 2026 17:12:54 +0000
asID:                     263290
IP address blocks:        170.150.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:01:54:33:e0:76:3c:4c:e9:cb:e8:e0:c5:9a:56:e5:71:47:d0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
        Validity
            Not Before: Nov 17 17:07:54 2025 GMT
            Not After : Nov 16 17:12:54 2026 GMT
        Subject: CN=9E4C7E0B9AEE41CE984C22EC75104A750C549B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:30:83:f5:fb:69:57:81:9d:5d:f4:60:56:88:
                    dc:83:1d:08:77:12:8d:b5:87:60:36:63:36:23:71:
                    88:6f:17:1a:48:ef:e0:c6:6c:6b:d2:df:57:03:6d:
                    07:2b:1e:62:a5:8b:8a:ec:e7:03:e9:38:31:ec:85:
                    a2:26:84:6e:17:1a:a0:48:77:4d:09:38:9a:c5:25:
                    d5:2e:5d:4a:65:fd:3d:4c:05:ee:b6:47:37:5b:e6:
                    4a:da:92:d8:46:12:0a:91:1b:6a:e9:9e:09:dd:28:
                    60:50:04:53:2d:19:1c:7c:fe:6b:87:eb:f2:44:79:
                    c9:e0:95:26:d8:86:4d:c7:7f:24:56:35:b3:1f:fc:
                    47:cb:a6:5c:0e:d3:a9:0f:3d:e8:19:ef:e4:bc:35:
                    0b:4b:33:bf:80:c5:3a:f1:b7:b0:cd:36:c6:74:85:
                    77:b2:d9:58:f8:5f:ef:1b:1d:f9:ca:da:15:89:04:
                    87:02:9a:2c:1a:9a:90:e4:52:5c:e1:88:d6:5e:42:
                    10:ac:7d:a0:c8:1b:4e:9b:bb:86:0c:77:ae:06:55:
                    fe:8d:bb:94:0d:ea:06:85:16:94:0a:2e:7a:84:95:
                    cf:3d:c4:82:79:94:dd:e9:c8:e7:b7:ba:02:a9:80:
                    49:8d:8e:4a:2c:8c:63:a7:84:9d:0f:9f:69:84:6b:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4C:7E:0B:9A:EE:41:CE:98:4C:22:EC:75:10:4A:75:0C:54:9B:98
            X509v3 Authority Key Identifier:
                keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b3:60:0c:be:be:b3:7a:02:61:c6:77:fa:8f:c8:ea:63:5a:
         48:fa:0e:9d:d2:f0:24:e5:47:79:ed:4b:11:a0:9e:20:cf:23:
         45:80:8e:31:69:a4:33:af:f7:0c:43:b0:3a:6a:7b:27:93:a4:
         35:02:17:a7:a3:f4:82:62:a6:bc:9e:bb:23:c8:3a:2c:a7:fd:
         8b:cb:bb:55:1c:f9:ec:7a:53:ba:93:d4:19:04:14:44:d3:f0:
         36:2c:d5:1d:be:6e:f1:bc:c3:13:82:62:57:98:8d:d5:e6:34:
         24:13:b6:1c:df:79:b1:04:e1:82:96:e3:a7:ac:45:f6:9c:08:
         b2:38:6c:d6:a5:93:51:48:d1:9b:1c:e4:fa:b0:46:e4:de:87:
         e2:53:09:00:a9:7c:f1:c2:57:5d:70:b2:5c:d2:c9:bc:e4:ef:
         5b:2a:a5:62:e8:71:44:75:d0:20:d3:f8:1e:7f:5c:e9:28:90:
         ba:e1:99:77:31:45:f9:4e:4a:45:dd:0b:f3:3a:09:be:82:18:
         5f:36:08:9c:81:79:a0:b1:df:74:e0:aa:dc:1d:08:31:ca:f5:
         05:6e:14:46:52:69:47:46:f4:ec:2c:ae:ed:75:c4:07:b9:b8:
         e7:33:a1:4f:43:d4:26:be:61:d0:f1:7e:84:e5:45:7b:08:3d:
         ba:92:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:03 2025 by rpki-client