This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa
File:                     3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa (raw, json)
Hash identifier:          pXbvLBOOS1oGOsbRk7s0H/BkAmayJE1fXwd8WK+z6xM=
Subject key identifier:   B1:8A:F6:37:32:C6:41:DA:D2:2C:72:3E:1B:34:30:74:94:A1:DB:B0
Certificate issuer:       /CN=60E9E1814AC20560AE7B9A36F212037445A23C52
Certificate serial:       0B666539BB38666C6FB569C39F8F68CA4BEAE697
Authority key identifier: 60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa
Signing time:             Thu 20 Nov 2025 23:56:47 +0000
ROA not before:           Thu 20 Nov 2025 23:51:47 +0000
ROA not after:            Thu 19 Nov 2026 23:56:47 +0000
asID:                     265278
IP address blocks:        170.231.149.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.crl
                          rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:66:65:39:bb:38:66:6c:6f:b5:69:c3:9f:8f:68:ca:4b:ea:e6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E9E1814AC20560AE7B9A36F212037445A23C52
        Validity
            Not Before: Nov 20 23:51:47 2025 GMT
            Not After : Nov 19 23:56:47 2026 GMT
        Subject: CN=B18AF63732C641DAD22C723E1B34307494A1DBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:8c:f3:e0:c8:d3:2f:4a:c4:61:95:d5:c2:
                    c4:d3:df:16:fc:61:4a:66:78:c7:cb:fe:83:b0:d7:
                    fa:44:94:57:59:34:bf:90:83:02:cf:50:57:33:02:
                    c2:6c:78:09:3a:9b:7d:c3:7c:7b:ed:5a:f7:9d:72:
                    f7:af:6c:8f:72:4c:56:52:18:3e:79:92:a0:00:6b:
                    9a:de:c9:15:7c:2e:54:06:ce:21:b0:d8:6c:38:7d:
                    87:25:3d:67:50:04:d5:71:ce:63:c2:5c:4e:51:37:
                    2d:e2:ad:fe:e1:07:52:c1:f1:44:f9:44:59:93:6c:
                    a9:b0:39:10:b1:7d:26:43:2b:bc:25:4f:68:29:14:
                    e3:ed:6d:45:6e:cf:91:6d:74:69:1c:76:cc:40:f4:
                    b8:4d:8b:50:da:77:dd:dd:22:f1:4f:d1:6e:3c:e0:
                    75:79:51:63:99:5f:61:98:8d:a8:18:9f:24:c6:08:
                    a6:e1:5e:a6:d8:64:5e:e3:05:8b:92:9a:48:43:84:
                    d8:8c:ea:70:5c:74:47:c4:6c:30:f6:4f:7b:e5:34:
                    3f:e2:de:6c:10:e1:af:0c:7f:6f:f2:72:b3:05:da:
                    68:b0:6d:63:61:04:43:f5:23:15:1a:b8:9c:49:38:
                    0a:61:fc:cf:c8:aa:83:b8:4b:44:79:74:af:51:7e:
                    8d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8A:F6:37:32:C6:41:DA:D2:2C:72:3E:1B:34:30:74:94:A1:DB:B0
            X509v3 Authority Key Identifier:
                keyid:60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:3e:d2:04:7f:cd:96:9e:1d:a6:7a:66:2a:56:bb:52:2e:e6:
         e9:2f:c7:d1:19:c7:dd:33:88:12:77:c9:60:0d:04:00:66:4a:
         58:4d:4a:73:f7:b2:4e:21:b6:62:62:8e:9b:97:de:21:b6:16:
         51:40:ee:c1:ee:91:4e:95:25:8c:63:6c:91:2a:3d:ba:d2:6b:
         e3:b9:f8:92:6a:91:95:0c:4b:6b:e4:60:ae:a6:fe:56:74:ec:
         c5:dd:1e:7c:ac:d9:ca:71:ee:24:cd:97:56:7f:0d:04:a5:80:
         c4:b8:66:98:a4:e3:9f:f4:d2:ff:b4:16:31:3c:62:4c:1f:0e:
         ad:a3:6a:29:71:34:76:7d:cd:a6:b4:74:c2:ee:e8:23:11:c1:
         5c:40:3f:37:d8:84:e3:a1:1c:3d:3a:64:a8:02:71:18:d6:7a:
         c9:50:37:6e:7f:9b:0e:69:b4:c0:34:39:37:69:fa:67:8b:a2:
         d4:a6:c8:d5:36:10:57:ab:1d:95:f0:18:78:5a:e8:b2:9a:af:
         2c:9b:fa:a8:e3:a8:4c:f6:2d:b3:2d:46:c7:0c:8b:40:b0:fb:
         83:e9:29:ef:56:66:b0:3b:d7:fc:bc:1a:6c:1f:2b:43:ae:09:
         4a:a1:18:b4:20:77:0b:ed:8e:b6:07:cb:3d:79:82:6d:28:6d:
         4c:0c:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:24:43 2025 by rpki-client