This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa
File:                     3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier:          LZj2mDsiJNpKzD1q1DVs60M7rf2YP0xYLmiLGBPtgtM=
Subject key identifier:   6E:9D:7A:E6:15:4B:7F:3B:CE:82:88:0C:10:9C:8F:A5:6E:6C:03:E2
Certificate issuer:       /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial:       283E6D8ACBB58EC8727DFD834F4186E82C6271FE
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa
Signing time:             Mon 17 Nov 2025 17:12:54 +0000
ROA not before:           Mon 17 Nov 2025 17:07:54 +0000
ROA not after:            Mon 16 Nov 2026 17:12:54 +0000
asID:                     263290
IP address blocks:        170.150.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3e:6d:8a:cb:b5:8e:c8:72:7d:fd:83:4f:41:86:e8:2c:62:71:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
        Validity
            Not Before: Nov 17 17:07:54 2025 GMT
            Not After : Nov 16 17:12:54 2026 GMT
        Subject: CN=6E9D7AE6154B7F3BCE82880C109C8FA56E6C03E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:7d:c7:ef:7c:f6:2a:1d:5c:99:2b:a7:1b:
                    71:34:34:e4:e1:ac:7d:fa:ef:16:83:1c:1f:f8:c6:
                    3d:d6:6f:3b:02:65:e4:de:6b:a3:b6:14:5a:1c:0b:
                    37:9d:69:89:6f:9e:60:64:c8:2d:24:1f:d4:bc:5a:
                    95:b4:19:be:f5:b8:cb:8d:c8:06:bf:89:54:6e:fb:
                    fd:84:8c:e8:fe:e3:4e:e0:06:37:2a:0d:ec:c7:17:
                    7e:be:76:fd:5a:0e:78:9b:3b:2f:04:27:14:b6:bc:
                    6e:5e:06:ce:72:09:51:f5:30:55:ef:d5:a5:4a:6c:
                    3d:d3:bf:80:b2:8f:b7:57:9a:d0:8a:e7:76:20:34:
                    a9:7c:06:fd:48:25:f1:d1:50:d6:f6:ce:05:c0:8a:
                    2a:c8:2c:ff:e2:17:5b:12:b5:20:4a:b7:96:4d:0b:
                    5c:fd:8f:ce:b3:a7:2c:8e:9a:d9:5d:cd:3f:17:b4:
                    ce:43:da:81:ab:98:47:91:2b:ed:7b:92:fb:56:ee:
                    f2:65:d8:68:a4:67:c8:a3:f6:91:ef:38:91:1d:79:
                    20:64:60:3e:34:d9:5d:d4:36:35:42:6c:fc:b2:4d:
                    9a:d2:c0:d8:47:8d:89:56:a0:25:c6:f7:0a:70:bd:
                    73:10:34:8f:78:36:f8:38:3a:f5:89:1f:47:54:d1:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9D:7A:E6:15:4B:7F:3B:CE:82:88:0C:10:9C:8F:A5:6E:6C:03:E2
            X509v3 Authority Key Identifier:
                keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3231312e302f32342d3234203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:05:b5:6e:1f:de:a0:da:a3:d0:29:58:89:28:a3:18:ed:2d:
         65:fa:a9:f2:e2:4f:27:3e:3d:ef:03:c9:54:c3:51:82:57:6d:
         57:4c:43:8e:5f:d8:14:b9:d6:52:33:6d:56:be:45:f1:78:80:
         6e:bf:bc:75:e0:77:a1:55:85:0e:93:0c:92:a2:d4:8d:22:ce:
         2f:14:46:2c:2d:13:b0:cb:ec:ea:0e:ee:a1:b6:40:57:df:9f:
         d0:9e:98:62:6b:3c:b6:aa:45:45:6b:f8:51:ae:0e:5b:be:d4:
         2a:40:e9:76:42:10:c8:c2:ee:be:d9:21:43:10:2d:38:4b:20:
         0e:f2:eb:e7:2f:e6:08:70:26:be:46:af:1c:1e:2b:0f:26:b5:
         d4:1f:e8:10:c5:06:b7:e0:2e:e5:1a:cd:a7:8b:f1:fc:59:af:
         52:d3:62:53:3c:39:2e:3e:9f:e7:af:51:80:80:d3:41:13:ae:
         f5:60:d9:cc:1a:f2:84:2c:34:01:aa:a9:8d:73:27:1c:d5:0f:
         99:c1:19:ed:5a:5b:f1:d4:a6:83:60:1c:a1:9b:ab:d2:3c:f8:
         a3:94:e0:26:8a:62:be:53:d8:26:45:29:61:4e:f4:f5:78:f7:
         cc:46:c2:a5:ae:e4:f4:0a:63:4a:7d:df:1b:eb:2a:66:0b:09:
         ba:c8:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:18 2025 by rpki-client