This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
File:                     3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          mXktAkG9bTQnUwo3vNVymGm9oU1+Xyxo9W0A1S4py0E=
Subject key identifier:   89:A4:A1:BA:B3:FF:2B:D7:A5:6F:FE:93:87:35:F1:AF:39:DD:B5:30
Certificate issuer:       /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial:       2E0E34581D5197017D1AB68E2D97B49B92B94705
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
Signing time:             Sun 16 Nov 2025 12:41:15 +0000
ROA not before:           Sun 16 Nov 2025 12:36:15 +0000
ROA not after:            Sun 15 Nov 2026 12:41:15 +0000
asID:                     262503
IP address blocks:        167.249.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0e:34:58:1d:51:97:01:7d:1a:b6:8e:2d:97:b4:9b:92:b9:47:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
        Validity
            Not Before: Nov 16 12:36:15 2025 GMT
            Not After : Nov 15 12:41:15 2026 GMT
        Subject: CN=89A4A1BAB3FF2BD7A56FFE938735F1AF39DDB530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:a9:76:97:66:a8:ff:34:a8:c2:48:5e:aa:
                    97:ab:19:03:5a:ea:76:eb:d6:31:75:ac:c1:28:10:
                    56:3e:34:a8:b4:f4:81:d4:f2:a6:75:bd:1a:bb:1c:
                    b5:1e:b6:3b:71:33:f3:6e:17:a5:35:9e:14:f1:54:
                    d2:a7:d2:ef:7e:36:f0:6c:77:29:8a:78:26:cf:1d:
                    fc:1f:b1:93:25:99:c7:9d:a2:79:d8:c9:bb:09:49:
                    d2:7b:16:84:0e:29:e0:2d:2c:06:b0:b9:9e:c1:22:
                    e3:d6:1b:05:28:3a:b1:3e:2b:50:0c:bd:89:53:11:
                    be:b4:54:1a:ed:1a:4a:ca:63:90:28:81:27:4e:fa:
                    59:8b:79:67:d4:65:3a:b3:23:53:e1:0b:02:0b:62:
                    11:39:fc:b6:be:1c:e6:2f:dc:d8:e9:83:46:76:3d:
                    e8:26:8e:39:ec:82:47:7e:0d:87:d7:91:d5:55:61:
                    1a:17:ff:38:53:1b:7c:2d:9a:03:47:f0:d5:50:10:
                    c2:11:96:df:5c:d0:d0:9e:af:24:12:66:bf:eb:3d:
                    ec:1c:ce:8c:6d:b1:74:94:34:c2:17:be:c0:b7:cc:
                    1e:d1:81:07:11:da:78:91:59:ad:45:3c:6e:84:d3:
                    c5:1e:d9:6c:38:5f:e2:ac:19:31:23:53:6e:a6:68:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A4:A1:BA:B3:FF:2B:D7:A5:6F:FE:93:87:35:F1:AF:39:DD:B5:30
            X509v3 Authority Key Identifier:
                keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:bd:38:6b:27:fc:3f:19:29:81:8f:db:79:33:a7:33:33:d8:
         14:98:0c:5b:f7:40:a2:91:83:cb:84:5e:81:ea:a9:1c:0a:ed:
         24:fb:e8:4f:d0:ce:5a:de:58:87:8b:e1:cb:24:a6:c5:40:cf:
         2d:80:ed:8f:46:a9:89:ee:d1:62:e5:73:4a:a6:40:83:33:5b:
         73:6e:06:f1:19:65:73:0d:93:09:77:50:24:7b:ee:ae:2d:11:
         84:0c:64:60:97:de:9e:21:c2:78:73:c1:d3:c8:f4:79:e5:f6:
         f8:17:b5:09:a9:c5:e0:5a:d0:aa:88:f4:aa:c4:ce:2a:bb:56:
         02:1f:36:58:c0:ca:50:82:72:3b:03:2f:08:a8:dc:26:ae:69:
         4d:99:50:16:16:5e:55:8e:77:bf:24:99:93:8f:c2:6f:05:74:
         3e:f6:1c:d3:5e:83:46:38:03:79:e8:80:11:0a:e4:50:73:7a:
         63:89:a8:b3:72:ba:f4:80:a5:0a:fa:41:fc:13:14:b5:e2:1c:
         57:80:57:67:61:d5:48:40:fa:6f:90:2f:34:12:ab:9e:08:b2:
         48:10:15:eb:4f:55:45:a1:64:76:fc:82:d2:b1:29:26:e3:ab:
         2f:cc:ab:22:c0:fb:cf:15:8a:bc:e8:7a:a1:d8:ca:ce:64:16:
         be:f3:55:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:29:15 2025 by rpki-client