This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e33302e302f32342d3234203d3e20323633363038.roa
File:                     3137302e3234342e33302e302f32342d3234203d3e20323633363038.roa (raw, json)
Hash identifier:          e/En5u0Rag2ZT3/Jq17ZDNakeqZZL24IJRag67eBmG0=
Subject key identifier:   BF:14:03:2D:55:AA:E7:C1:EA:CB:C9:E1:CA:B0:87:10:19:50:CC:E8
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       25603705657634CC3421991E6807A85125822ED4
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e33302e302f32342d3234203d3e20323633363038.roa
Signing time:             Mon 24 Nov 2025 13:40:10 +0000
ROA not before:           Mon 24 Nov 2025 13:35:10 +0000
ROA not after:            Mon 23 Nov 2026 13:40:10 +0000
asID:                     263608
IP address blocks:        170.244.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 07:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:60:37:05:65:76:34:cc:34:21:99:1e:68:07:a8:51:25:82:2e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Nov 24 13:35:10 2025 GMT
            Not After : Nov 23 13:40:10 2026 GMT
        Subject: CN=BF14032D55AAE7C1EACBC9E1CAB087101950CCE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:35:c5:89:f6:cd:99:25:fc:7f:2b:88:73:
                    ab:a4:35:9d:97:e1:d0:6f:02:9f:a5:2e:ce:51:2a:
                    89:95:f9:e0:e5:1a:df:b2:8e:38:db:63:0b:66:a0:
                    8a:de:e8:10:2f:a9:9f:dc:7b:33:fd:97:4a:3d:c5:
                    18:01:45:f0:4e:43:38:e5:69:65:65:12:75:26:f0:
                    76:a2:c4:02:37:9f:26:ab:fe:ee:8f:38:31:ed:cd:
                    fe:60:7d:63:6b:4b:35:33:ed:95:ec:49:d1:80:db:
                    97:7f:c3:75:cf:02:4a:7f:2a:78:5e:4f:1a:dc:f9:
                    6b:c6:12:d0:f9:77:23:da:7a:70:64:85:f4:68:e5:
                    5c:43:64:5e:c6:96:71:47:47:91:83:e4:ca:eb:ae:
                    af:bf:2e:f2:e2:0f:91:aa:dc:3e:d3:a9:15:6e:4b:
                    50:44:d0:60:0c:1d:95:e6:a8:e8:9b:94:d8:45:38:
                    8d:f0:69:a7:ed:28:d2:38:5b:cf:27:4e:c3:89:34:
                    60:da:ef:d5:b7:95:09:e3:8c:f0:a3:e2:db:83:87:
                    13:43:01:9d:2a:37:d1:2c:36:ea:eb:85:62:c3:38:
                    4a:ec:f4:a9:d4:79:32:b6:ce:2f:f9:e5:d9:70:1d:
                    39:1c:d1:75:33:3f:da:da:6a:ee:14:f6:e9:f7:ef:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:14:03:2D:55:AA:E7:C1:EA:CB:C9:E1:CA:B0:87:10:19:50:CC:E8
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e33302e302f32342d3234203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8b:a7:81:fe:b4:bd:39:1c:f9:3b:8e:7a:10:e5:df:af:12:
         27:6b:ba:d6:2b:3f:00:c8:33:ee:22:4d:e7:5a:b0:49:ee:cb:
         0c:3b:57:fb:c2:1e:59:de:2d:85:b6:97:6b:95:57:1a:1f:a4:
         d5:30:34:ae:4d:fd:ef:03:78:28:e1:08:e6:cc:2e:d1:91:57:
         c0:ad:c0:ff:50:0e:c0:35:09:11:54:2e:e1:6d:97:07:3b:48:
         97:d9:33:b2:66:9a:17:fd:37:b9:71:89:09:86:e3:41:be:c0:
         11:30:3f:90:1c:aa:a9:c7:d6:a9:4c:13:21:74:29:da:14:4f:
         3a:0e:83:11:08:fd:be:78:01:ae:0a:5a:dd:bb:40:c4:4e:cb:
         40:b0:ac:11:20:8f:1a:09:67:22:2b:cc:a5:5f:c2:18:c3:db:
         51:57:42:4b:5c:6f:5e:6f:df:d6:d0:80:c8:f4:1c:ce:1e:f8:
         65:42:ac:31:1b:fa:db:dd:e7:be:18:ea:fb:81:3a:87:8f:48:
         d9:40:8d:ec:8e:47:cd:b3:33:65:ca:af:a1:9e:82:33:45:94:
         bf:fe:c5:09:c8:5b:41:a7:81:19:37:93:50:f1:00:c0:71:b6:
         6d:eb:2b:e9:d9:d6:41:db:a8:a5:36:e0:2b:aa:37:80:95:3d:
         d4:97:9f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:08:51 2025 by rpki-client