This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa
File:                     3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa (raw, json)
Hash identifier:          ng9zZVYWEoNVb4wUHEeV+AdsxW9xu/4VaMOuy/WHLvg=
Subject key identifier:   71:FE:F2:B6:44:E2:C6:7E:16:CA:71:C2:91:0A:5E:60:F8:F0:B4:30
Certificate issuer:       /CN=60E9E1814AC20560AE7B9A36F212037445A23C52
Certificate serial:       63E24622A568622D6661D5FFE24741CC4D1AB932
Authority key identifier: 60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa
Signing time:             Thu 20 Nov 2025 23:56:48 +0000
ROA not before:           Thu 20 Nov 2025 23:51:48 +0000
ROA not after:            Thu 19 Nov 2026 23:56:48 +0000
asID:                     265278
IP address blocks:        170.231.150.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.crl
                          rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e2:46:22:a5:68:62:2d:66:61:d5:ff:e2:47:41:cc:4d:1a:b9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E9E1814AC20560AE7B9A36F212037445A23C52
        Validity
            Not Before: Nov 20 23:51:48 2025 GMT
            Not After : Nov 19 23:56:48 2026 GMT
        Subject: CN=71FEF2B644E2C67E16CA71C2910A5E60F8F0B430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:2b:49:80:2b:4a:cd:16:7a:2f:76:94:65:
                    c8:78:37:a4:db:d8:b7:e2:0d:df:0c:4f:af:35:9f:
                    c0:9a:38:42:56:40:b7:12:97:cb:52:11:76:a3:54:
                    b8:97:35:5a:f8:c0:6a:71:9c:f8:8b:f9:58:bf:4b:
                    5c:fe:f8:63:e9:27:d0:04:24:f2:ad:f1:dc:e9:71:
                    ec:7c:00:56:c0:54:d1:14:60:26:e2:34:da:70:9a:
                    bb:51:d2:c2:a5:f3:69:e2:7b:c1:69:cd:b6:f9:a6:
                    f6:3c:82:bf:ca:82:ce:b8:78:4b:f7:12:95:a0:92:
                    52:e9:72:a4:65:17:8a:b1:13:11:4c:32:5e:52:07:
                    df:6b:f9:c6:ac:24:16:fe:d7:0f:e3:7b:dd:a8:3e:
                    a7:e0:dd:37:ba:45:04:19:fc:c6:79:d0:2f:c9:23:
                    67:fd:61:eb:99:c4:05:42:9b:fe:aa:34:a2:f0:db:
                    0d:35:11:8c:6c:50:e9:c1:fd:ee:95:6e:41:fa:4c:
                    0d:9a:92:2e:76:a4:69:17:63:47:a7:9d:71:7a:31:
                    3e:4d:54:98:9d:07:f2:25:0a:4a:77:20:01:b8:f9:
                    5a:0f:5d:76:50:3a:d5:a2:af:9a:79:b7:0a:23:a3:
                    0f:e0:14:e5:63:31:b5:c2:6d:00:75:70:48:c4:a6:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FE:F2:B6:44:E2:C6:7E:16:CA:71:C2:91:0A:5E:60:F8:F0:B4:30
            X509v3 Authority Key Identifier:
                keyid:60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:61:05:e5:c6:5e:a3:e4:70:f7:b8:ce:2c:93:58:87:e3:89:
         9f:04:ce:f9:85:b6:d2:0f:68:73:08:a8:ea:19:e3:d3:d6:48:
         6e:96:e3:73:9c:25:57:2e:86:d1:93:6f:59:9c:61:61:17:a7:
         3d:80:f1:67:d3:46:79:c6:03:e2:25:17:55:24:50:ee:77:53:
         f7:80:9a:24:07:00:0d:6d:0b:6a:4e:22:1f:f7:9c:f3:05:aa:
         44:7f:f0:7d:52:b7:67:68:df:04:81:8e:99:38:95:39:06:21:
         79:cd:69:e8:be:25:3f:16:d8:3f:61:dd:47:af:63:db:2b:d5:
         1f:de:15:8d:5d:92:f8:41:b7:fb:22:a4:81:06:d7:f2:34:f2:
         1e:f2:93:1f:79:ad:9e:21:7c:12:0a:b5:18:52:da:10:f7:83:
         42:1b:12:25:85:5b:d2:cc:c4:15:81:b0:b7:7f:50:62:f4:cf:
         ad:5a:64:c7:e0:1e:6b:81:f9:51:80:92:77:1d:13:69:f5:cf:
         e6:96:4e:97:82:4c:39:ca:81:18:d6:0f:c5:1d:a0:ae:16:5a:
         93:4a:4d:36:96:64:5d:13:a5:3e:17:0c:5d:23:0c:2b:58:3e:
         1e:59:e6:e6:43:49:44:a0:0e:10:f6:d6:d3:e4:4f:a2:0d:e1:
         ca:df:47:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:31:44 2025 by rpki-client