This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e32382e302f32322d3232203d3e20323633363038.roa
File:                     3137302e3234342e32382e302f32322d3232203d3e20323633363038.roa (raw, json)
Hash identifier:          OPFUxJdyLFN2HGw2l2Wj9/VYm6NuLcX0pioEgMkFnYg=
Subject key identifier:   79:C6:98:DF:5D:29:02:2D:7D:5D:73:7B:ED:BF:14:00:1B:BC:AB:63
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       2BE7DB3FEEF0319C40F32FD3D96F1F56476E65CC
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e32382e302f32322d3232203d3e20323633363038.roa
Signing time:             Mon 24 Nov 2025 13:40:18 +0000
ROA not before:           Mon 24 Nov 2025 13:35:18 +0000
ROA not after:            Mon 23 Nov 2026 13:40:18 +0000
asID:                     263608
IP address blocks:        170.244.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 07:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e7:db:3f:ee:f0:31:9c:40:f3:2f:d3:d9:6f:1f:56:47:6e:65:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Nov 24 13:35:18 2025 GMT
            Not After : Nov 23 13:40:18 2026 GMT
        Subject: CN=79C698DF5D29022D7D5D737BEDBF14001BBCAB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:75:1a:11:4f:22:21:1a:cb:c2:67:1c:a0:
                    93:21:5b:86:e2:a7:87:e0:3f:81:82:1d:e0:60:6c:
                    18:50:62:db:be:48:6e:60:65:fb:e9:b7:8d:5e:a2:
                    3e:c2:35:65:0c:dc:f7:96:c5:46:02:15:9b:33:77:
                    31:ec:78:b6:59:ac:b8:e7:42:d4:09:9b:72:18:d8:
                    09:0d:45:9b:11:41:f6:27:91:e5:fc:d2:c5:ac:ea:
                    cf:af:a9:f7:ba:33:d6:db:29:39:dd:3e:fe:85:07:
                    b8:98:cb:d7:92:9e:6d:31:82:dd:6c:58:b8:ad:0a:
                    b4:c0:34:99:b1:8b:cc:c9:99:97:e2:61:c1:9a:c7:
                    c3:f3:8d:da:12:83:55:e6:0f:c2:2b:4c:99:29:6c:
                    5d:44:a9:df:57:da:30:83:8b:6e:5c:4c:67:b0:7e:
                    03:cd:33:d7:15:bc:d2:50:66:8d:51:99:45:2e:65:
                    c7:09:27:e9:65:4c:48:0a:94:b0:ac:90:c6:3d:89:
                    a9:20:7d:e9:6b:36:fc:b0:08:58:5e:5d:df:93:e1:
                    c6:de:b5:cb:fb:21:dd:99:52:24:78:70:df:b3:9d:
                    55:d5:dd:fc:e7:cf:54:88:83:51:3c:2f:5b:c3:52:
                    b7:1d:3f:4c:c4:7f:be:63:ca:25:e4:6a:33:02:26:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C6:98:DF:5D:29:02:2D:7D:5D:73:7B:ED:BF:14:00:1B:BC:AB:63
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e32382e302f32322d3232203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:29:7e:06:c1:34:b3:86:5f:d2:8c:38:70:c5:67:67:2e:0d:
         1e:d0:f1:cf:66:a8:07:d9:f5:8f:f3:37:1d:41:0a:e7:1e:bc:
         27:54:57:39:4c:7c:93:79:f5:18:eb:7a:7b:4f:6f:86:08:24:
         e4:08:09:1f:76:aa:db:01:9e:fb:ea:dd:0b:41:58:5d:42:57:
         91:3a:a3:60:45:7e:a2:b3:7c:40:24:fc:a2:6e:56:e9:58:64:
         83:89:3e:c2:b9:a6:66:f4:bf:1d:26:19:a9:77:be:55:f0:30:
         9f:45:04:60:54:a4:e8:0a:d0:26:d0:aa:77:17:4c:2c:2a:7f:
         48:a1:d2:cd:7e:81:a8:fd:b6:8a:21:07:46:9e:6a:8e:83:6e:
         10:e3:77:5a:06:c5:1f:bf:38:c4:f5:c5:29:cf:3e:cd:98:12:
         3d:c4:28:c5:4f:93:40:ff:98:0a:61:e4:65:be:ac:c0:41:80:
         44:2f:b7:3e:bc:2d:8e:61:da:01:cf:09:01:69:73:f5:45:0f:
         10:a2:7c:cd:8f:3a:e5:82:9e:45:ee:7c:fe:8d:16:05:ed:a7:
         a4:39:a0:07:62:5d:37:84:57:01:7f:fe:1d:6f:55:df:3e:e6:
         dd:03:01:50:7a:68:9d:61:16:e9:d9:95:6c:63:e8:e1:1c:62:
         24:50:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:08:54 2025 by rpki-client