This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130372e302f32342d3234203d3e20323635303933.roa
File:                     3137302e3233332e3130372e302f32342d3234203d3e20323635303933.roa (raw, json)
Hash identifier:          j8MIyRH+pMLdFRJ7pSL/iej1bQUwiDY9wwhWEvl1lj8=
Subject key identifier:   7D:0D:72:D5:FB:51:C4:4C:09:9E:1B:15:54:E2:B5:91:C3:F1:2E:3D
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       2F2D3E81E5DC56D12D305B5AEBB5533389287915
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130372e302f32342d3234203d3e20323635303933.roa
Signing time:             Tue 18 Nov 2025 12:32:14 +0000
ROA not before:           Tue 18 Nov 2025 12:27:14 +0000
ROA not after:            Tue 17 Nov 2026 12:32:14 +0000
asID:                     265093
IP address blocks:        170.233.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2d:3e:81:e5:dc:56:d1:2d:30:5b:5a:eb:b5:53:33:89:28:79:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Nov 18 12:27:14 2025 GMT
            Not After : Nov 17 12:32:14 2026 GMT
        Subject: CN=7D0D72D5FB51C44C099E1B1554E2B591C3F12E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:f9:7c:9e:fa:ab:4f:e2:e8:fa:59:5b:71:
                    aa:c2:84:22:01:53:d9:e7:d3:04:1e:35:f4:34:af:
                    ff:da:15:35:f6:97:ba:15:7e:aa:9c:f7:e3:e6:1a:
                    d3:86:29:49:e4:ff:71:aa:b7:2a:61:d1:1d:8c:d5:
                    77:9a:00:eb:31:a8:a3:84:4f:6c:41:d5:f2:e5:7c:
                    aa:73:b0:ca:08:9c:f8:52:ec:d7:c4:31:e7:c5:64:
                    df:e9:4e:1a:43:d8:68:cd:9e:1e:9f:83:65:a5:1b:
                    91:5a:f7:5d:15:93:27:53:4a:a7:ec:46:57:18:ba:
                    d6:2a:6e:0f:82:39:aa:e6:d4:06:21:81:f9:8c:80:
                    5e:cb:7c:18:a8:57:31:01:d4:ea:4e:e9:84:b5:e9:
                    a7:51:37:3c:82:7c:a1:5d:40:11:a9:32:83:70:0c:
                    b3:9c:ff:e5:aa:df:20:ac:cd:23:db:77:ba:d7:87:
                    64:c0:0a:f1:08:04:d2:e2:62:7c:19:84:70:04:16:
                    1f:53:83:bc:a1:dd:0f:43:3f:5c:26:c4:df:9e:10:
                    6f:50:e8:1b:4b:a3:2e:c8:0e:09:65:53:83:75:de:
                    14:fa:bf:5f:69:25:db:65:0e:5e:b8:01:90:45:00:
                    1c:25:e2:70:61:bb:4a:5b:c6:07:c9:ea:8c:bc:5f:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0D:72:D5:FB:51:C4:4C:09:9E:1B:15:54:E2:B5:91:C3:F1:2E:3D
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130372e302f32342d3234203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:95:70:c0:07:da:82:f3:49:08:d0:30:e7:87:b2:be:f9:1e:
         0d:1f:00:9b:83:5e:16:13:e6:0a:e3:22:1e:fb:f3:69:4b:1e:
         00:a4:48:e3:10:1d:3b:4c:88:c4:3a:67:2e:03:82:fa:fa:c6:
         fe:63:e9:64:21:e0:54:a7:40:c7:d3:b3:c3:d7:23:03:6f:78:
         4a:03:28:82:67:0a:d7:df:b0:7d:67:d1:7a:07:11:30:28:10:
         7f:51:0e:12:21:a1:fa:35:df:78:c0:49:57:6f:a9:f4:97:5a:
         09:c0:12:41:1d:21:d7:55:c2:87:74:85:13:75:bb:f4:d9:e2:
         a9:7d:ba:e7:9d:83:17:d6:b7:f1:ae:fb:cb:3a:22:b7:8d:45:
         f1:89:d5:d7:38:76:5b:ee:61:5f:72:c4:2f:b6:aa:fa:28:f7:
         89:c8:3a:57:8c:55:69:e5:22:85:77:51:f6:f3:f3:ff:75:e5:
         89:2a:27:d6:76:d7:c5:fb:a8:45:34:09:6d:70:46:20:5b:55:
         b6:40:10:12:59:bd:41:9e:6d:8c:5f:54:18:8a:78:7d:13:e7:
         70:53:68:02:06:9f:50:b3:be:b3:13:b1:5b:0d:0a:a8:a2:f9:
         85:28:2d:0b:54:98:55:bf:f8:50:a9:56:08:b9:20:21:de:c2:
         c4:11:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:36 2025 by rpki-client