This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xtQcXQXW3wRKvjmcrABRCu3brmLdHs4Ro8vg73VuXE8/0/3137302e38302e3132382e302f32322d3234203d3e20323633343335.roa
File:                     3137302e38302e3132382e302f32322d3234203d3e20323633343335.roa (raw, json)
Hash identifier:          31DxfRoEAhQVcvb7zp1b1Rq5+QZ4AtLL1BnPRHnvscA=
Subject key identifier:   E3:24:37:CD:F3:0A:5A:06:D0:71:39:E2:23:51:08:9F:11:49:CB:9A
Certificate issuer:       /CN=835FA6ED38818DF808D715E49DCFE5BC7EC6C792
Certificate serial:       033F86D8EC1E67E6C41C31D8E1F0F8D958E73797
Authority key identifier: 83:5F:A6:ED:38:81:8D:F8:08:D7:15:E4:9D:CF:E5:BC:7E:C6:C7:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835FA6ED38818DF808D715E49DCFE5BC7EC6C792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xtQcXQXW3wRKvjmcrABRCu3brmLdHs4Ro8vg73VuXE8/0/3137302e38302e3132382e302f32322d3234203d3e20323633343335.roa
Signing time:             Thu 13 Nov 2025 18:47:26 +0000
ROA not before:           Thu 13 Nov 2025 18:42:26 +0000
ROA not after:            Thu 12 Nov 2026 18:47:26 +0000
asID:                     263435
IP address blocks:        170.80.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xtQcXQXW3wRKvjmcrABRCu3brmLdHs4Ro8vg73VuXE8/0/835FA6ED38818DF808D715E49DCFE5BC7EC6C792.crl
                          rsync://rpki-repo.registro.br/repo/9xtQcXQXW3wRKvjmcrABRCu3brmLdHs4Ro8vg73VuXE8/0/835FA6ED38818DF808D715E49DCFE5BC7EC6C792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835FA6ED38818DF808D715E49DCFE5BC7EC6C792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3f:86:d8:ec:1e:67:e6:c4:1c:31:d8:e1:f0:f8:d9:58:e7:37:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835FA6ED38818DF808D715E49DCFE5BC7EC6C792
        Validity
            Not Before: Nov 13 18:42:26 2025 GMT
            Not After : Nov 12 18:47:26 2026 GMT
        Subject: CN=E32437CDF30A5A06D07139E22351089F1149CB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:e8:66:3a:71:28:4b:e8:6c:2c:0a:81:cd:
                    6b:b0:ee:33:12:22:dc:b0:d8:96:f2:9c:8b:7d:a9:
                    06:e4:85:f7:ac:16:f1:59:72:2a:3c:08:67:8a:95:
                    6f:41:ec:df:99:26:87:c0:74:03:b2:cf:39:cb:3d:
                    ba:e5:1a:bc:b9:37:ac:a5:a4:ce:1b:f0:4c:a0:7e:
                    e7:a7:8c:d8:eb:eb:62:24:e6:97:c7:5a:c5:fc:aa:
                    e4:3a:37:5b:2e:47:3f:cf:88:f5:fb:50:02:88:a2:
                    fb:e5:97:79:97:a6:04:3d:2c:19:35:dd:43:a4:14:
                    04:ed:27:2b:36:22:25:6e:2b:d5:2e:f7:cc:a1:6c:
                    64:d2:a8:21:00:47:10:79:af:11:4a:44:c6:0f:e7:
                    c2:d8:e5:fd:88:ab:bf:9d:66:28:e5:87:8b:92:b8:
                    92:18:1d:e8:74:9c:1c:c7:31:20:14:09:13:a5:8d:
                    b2:7d:7b:c5:3f:f4:4c:79:8f:47:2c:b7:93:e3:bb:
                    2f:47:53:d1:15:70:a3:fd:70:0f:93:7f:f8:18:22:
                    91:3c:d9:e7:f3:6f:be:e3:1d:d6:db:c8:21:20:ee:
                    75:87:21:fd:f6:a7:eb:e6:7c:de:6b:30:75:24:74:
                    ce:2f:08:85:46:50:1f:1a:d9:89:e2:e8:8e:74:64:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:37:CD:F3:0A:5A:06:D0:71:39:E2:23:51:08:9F:11:49:CB:9A
            X509v3 Authority Key Identifier:
                keyid:83:5F:A6:ED:38:81:8D:F8:08:D7:15:E4:9D:CF:E5:BC:7E:C6:C7:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xtQcXQXW3wRKvjmcrABRCu3brmLdHs4Ro8vg73VuXE8/0/835FA6ED38818DF808D715E49DCFE5BC7EC6C792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835FA6ED38818DF808D715E49DCFE5BC7EC6C792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xtQcXQXW3wRKvjmcrABRCu3brmLdHs4Ro8vg73VuXE8/0/3137302e38302e3132382e302f32322d3234203d3e20323633343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:f2:a6:4b:68:c1:93:db:0c:99:3f:ab:bf:6a:73:de:04:a0:
         42:c9:e5:3b:b5:de:ee:69:02:a5:07:00:f4:95:ea:a9:49:34:
         b5:20:74:70:e2:f1:92:3e:91:e1:a3:eb:70:fc:a3:60:6b:ba:
         9d:6f:f4:c2:6a:c4:5b:30:6b:b1:f7:4e:5a:00:7d:43:da:3e:
         63:4b:ed:54:77:46:50:9b:b1:8d:52:26:93:9d:fb:c1:98:e4:
         4e:6d:3f:e2:60:58:f7:43:0f:47:46:c3:7f:eb:6e:a1:e5:1f:
         bf:2c:d4:b2:4d:43:fe:55:e6:b4:3b:0d:51:46:b8:3d:06:b9:
         62:62:5b:20:32:31:6e:e1:cf:3e:c9:c9:e8:f0:0c:28:8e:ba:
         dc:96:d3:96:a7:cc:e9:88:2b:1e:ab:31:8d:58:fc:d1:ec:10:
         44:6a:9a:75:2f:4e:fe:80:06:49:c6:c1:41:68:06:da:3b:aa:
         8b:a0:6d:ae:47:49:7e:6e:cf:27:23:2d:0e:00:64:08:14:75:
         3d:af:34:b1:9a:85:35:2a:28:72:48:30:5b:f5:d0:67:73:4c:
         94:42:35:05:9c:05:0a:fa:09:45:29:53:cd:ba:a1:c8:7a:5d:
         fb:4f:4f:9e:5c:68:0d:68:59:7f:04:88:88:4c:b7:aa:00:46:
         a7:fe:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:05:55 2025 by rpki-client