This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32342d3234203d3e20323632353033.roa
File:                     3136372e3234392e3137302e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          8NB9hOPyhiYvfNI7wEm43nmVUphyoWRRaDHCU6rSjaY=
Subject key identifier:   86:4B:AB:2F:51:85:E9:44:C3:E8:AC:D3:28:B2:99:1F:CB:E9:42:A9
Certificate issuer:       /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial:       3B55859D27CA641041EA2C0F62D12839C4FF71A5
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32342d3234203d3e20323632353033.roa
Signing time:             Sun 16 Nov 2025 12:41:15 +0000
ROA not before:           Sun 16 Nov 2025 12:36:15 +0000
ROA not after:            Sun 15 Nov 2026 12:41:15 +0000
asID:                     262503
IP address blocks:        167.249.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:55:85:9d:27:ca:64:10:41:ea:2c:0f:62:d1:28:39:c4:ff:71:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
        Validity
            Not Before: Nov 16 12:36:15 2025 GMT
            Not After : Nov 15 12:41:15 2026 GMT
        Subject: CN=864BAB2F5185E944C3E8ACD328B2991FCBE942A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:0d:60:9d:1f:6c:23:ab:1c:22:17:cc:a0:
                    2a:a1:d3:60:44:2f:80:8c:ff:f6:8d:9c:36:c0:b7:
                    19:ca:a3:c0:97:fe:e4:cd:35:80:a3:a9:19:3f:34:
                    3d:ff:ef:df:6b:39:18:39:bc:5f:ea:a4:c5:d9:e1:
                    42:95:03:fe:ce:bb:a0:c1:7c:0b:30:01:71:98:2f:
                    fa:69:c3:30:bb:a0:cb:8c:30:4c:98:98:97:98:31:
                    d0:d6:61:ff:8a:28:42:77:02:c2:6f:fa:71:b6:79:
                    e3:cb:36:dc:c4:61:50:8d:74:6e:79:0d:79:36:d1:
                    79:59:f0:58:6a:76:0a:8b:e6:35:cf:00:9d:71:21:
                    f5:55:60:5f:dd:c6:e7:5a:96:78:cb:de:4c:66:e8:
                    68:97:1f:d0:e8:0a:bc:7b:1b:49:a8:d1:c3:eb:8a:
                    d8:fe:1d:96:80:c1:b6:c6:34:7c:88:5f:97:28:3e:
                    36:c9:8f:1e:bd:24:d1:20:6d:0c:33:f2:47:ad:98:
                    22:ba:58:3e:fb:b1:01:94:31:64:66:dd:7a:86:74:
                    b9:35:f1:74:90:a1:77:57:57:54:28:48:da:42:19:
                    fd:b5:7e:8d:5d:ed:25:87:0a:15:e5:9e:28:e9:88:
                    21:f9:90:6c:72:d1:fa:6f:ef:23:dc:3a:23:72:36:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4B:AB:2F:51:85:E9:44:C3:E8:AC:D3:28:B2:99:1F:CB:E9:42:A9
            X509v3 Authority Key Identifier:
                keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:17:e9:97:17:6f:f1:0d:f6:f4:0d:f5:b2:9a:1c:33:44:a8:
         77:06:14:79:55:77:a3:62:fa:ce:c4:80:30:db:41:ff:b0:0b:
         da:8d:38:66:0a:be:42:19:17:88:3c:72:be:0f:a9:d3:ba:dc:
         2f:e0:53:7a:d9:e0:f1:dc:3a:59:30:06:cf:62:06:14:a3:3c:
         27:eb:b5:69:a7:9c:1c:6c:af:07:07:65:cf:84:0f:64:54:fb:
         ef:d0:b1:4f:a1:94:43:59:6f:19:b7:01:b4:10:86:56:b4:17:
         2c:a1:80:a5:37:97:63:0f:08:5b:4f:94:62:5a:5e:d5:81:c7:
         99:ed:91:0f:49:43:45:b1:ed:c9:a0:b4:e3:0a:d6:78:e3:e3:
         b9:60:df:eb:81:a7:1e:f1:14:f0:25:60:91:ce:fb:48:6f:65:
         55:67:c2:24:57:2b:4a:8c:af:6d:46:4c:20:df:5b:49:74:21:
         19:e1:60:f3:3b:d3:6b:5d:db:95:d9:6a:fe:a5:93:71:b7:13:
         ea:ce:92:fe:73:82:6f:f7:ab:79:5d:c6:93:c6:df:38:68:fa:
         88:f7:87:c4:49:3c:c8:1a:bb:0f:cb:f4:73:f3:d5:14:5c:79:
         2c:22:4e:40:cd:a6:ae:3f:34:e1:9c:4c:38:18:ce:84:a5:94:
         0b:06:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:08 2025 by rpki-client