This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3137302e37382e3233322e302f32322d3332203d3e203232333831.roa
File:                     3137302e37382e3233322e302f32322d3332203d3e203232333831.roa (raw, json)
Hash identifier:          jeWgoiBzGhYQJyKmwyzQywGclpif9Eg4bgC5/rbvpHw=
Subject key identifier:   4E:F6:15:2B:07:6A:78:D6:3D:E7:D1:33:AE:16:13:53:C4:D8:1E:7C
Certificate issuer:       /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
Certificate serial:       51574829F791B40210DB6AC8977787361106E520
Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3137302e37382e3233322e302f32322d3332203d3e203232333831.roa
Signing time:             Tue 11 Nov 2025 15:44:16 +0000
ROA not before:           Tue 11 Nov 2025 15:39:16 +0000
ROA not after:            Tue 10 Nov 2026 15:44:16 +0000
asID:                     22381
IP address blocks:        170.78.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:57:48:29:f7:91:b4:02:10:db:6a:c8:97:77:87:36:11:06:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112
        Validity
            Not Before: Nov 11 15:39:16 2025 GMT
            Not After : Nov 10 15:44:16 2026 GMT
        Subject: CN=4EF6152B076A78D63DE7D133AE161353C4D81E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:fe:a4:00:38:0e:d3:f1:e6:fd:9b:65:bf:
                    45:99:a0:98:c3:05:27:c5:a7:76:12:69:04:5e:da:
                    f1:d5:ff:b6:d6:41:eb:a9:ca:23:ab:1d:39:7d:03:
                    00:36:8b:fa:28:94:86:6c:83:82:2c:88:32:a8:85:
                    f6:11:49:67:b8:a6:49:ec:56:1e:7f:95:53:12:2b:
                    f0:83:79:b6:0f:ed:74:c6:6e:b0:d4:a8:61:45:0f:
                    19:f3:2f:a6:1f:f8:8b:7e:ea:29:99:11:0e:a9:01:
                    bc:2a:50:eb:3a:a2:5f:63:02:33:f0:a0:82:a0:0c:
                    4d:e6:e9:2f:c0:1f:41:a6:32:81:6d:cc:2b:f3:da:
                    7b:17:21:d6:b5:27:5d:ce:e0:79:6c:19:95:9a:68:
                    1c:41:28:0b:91:d5:49:fe:ca:47:6a:66:bd:07:29:
                    5e:c5:ee:61:1a:cf:5d:cc:b2:af:9f:9d:56:fb:8a:
                    02:89:3c:93:f4:8b:c1:ba:36:48:6b:ba:b6:5d:c5:
                    50:46:17:d2:66:3c:1e:38:e8:72:e2:a4:a2:2e:88:
                    6a:27:ed:47:0b:f0:cb:47:31:be:85:1c:45:04:86:
                    b1:de:cc:2b:97:dc:d2:0e:6a:4a:b2:6c:ca:73:e6:
                    1d:78:bd:7d:56:58:ca:b8:c0:b9:b8:48:a0:b1:1a:
                    cb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F6:15:2B:07:6A:78:D6:3D:E7:D1:33:AE:16:13:53:C4:D8:1E:7C
            X509v3 Authority Key Identifier:
                keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/3137302e37382e3233322e302f32322d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:ee:ce:ad:fb:67:a3:08:2a:8e:41:a4:1e:6b:f3:f3:cf:46:
         bb:a8:b1:09:26:c9:4a:ea:7b:d8:e2:e6:ef:b4:f1:67:58:7e:
         33:09:35:33:8a:2d:2d:62:56:66:a2:d5:34:1c:33:69:5c:9a:
         3b:42:9d:cc:e9:b6:dd:62:a4:f5:8b:be:64:50:0e:aa:7f:2e:
         1b:41:7a:ec:a5:e3:ce:9f:43:63:d9:67:d3:48:2d:a1:26:06:
         14:1a:02:95:e5:c8:81:39:f8:23:fe:67:ed:59:5b:55:4a:d4:
         57:d2:cc:d9:7c:e4:42:49:26:81:e5:43:1c:ad:6e:99:67:d6:
         d4:c4:b9:6a:2b:a3:c7:d9:9c:3c:1b:bb:96:26:3a:14:12:24:
         31:17:d4:9d:d5:c9:fe:86:27:04:72:b0:03:c4:4a:83:f3:78:
         22:75:bf:4b:9c:05:82:22:a0:6a:6c:17:88:96:39:39:4c:4a:
         41:07:62:5c:de:cc:d7:2f:25:5f:86:5c:41:4d:15:11:c4:71:
         e1:a7:f3:6b:55:56:40:a8:50:92:bf:d6:d9:2e:52:10:13:c1:
         c0:45:6f:0e:8f:5d:6b:0e:25:41:4e:4d:e3:cb:b3:1c:b3:f8:
         71:30:35:1d:cf:1c:59:c6:6f:a8:33:42:1b:f8:7d:ca:4b:2a:
         1f:af:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:02 2025 by rpki-client