This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa
File:                     3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          AptZbWEZqKFJfN9bqXr8TiV7uKKyCZzrn9GjSo3ySZ8=
Subject key identifier:   C5:DB:DB:A7:D0:BF:83:89:BB:42:76:F8:97:FF:95:58:2E:60:77:08
Certificate issuer:       /CN=B410AE9221B712152EE021F11F6C4A32F7D29278
Certificate serial:       7A6DAA81BE8F2A61437CF9AF01A6EDE132076E14
Authority key identifier: B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa
Signing time:             Thu 20 Nov 2025 18:40:59 +0000
ROA not before:           Thu 20 Nov 2025 18:35:59 +0000
ROA not after:            Thu 19 Nov 2026 18:40:59 +0000
asID:                     262530
IP address blocks:        170.247.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6d:aa:81:be:8f:2a:61:43:7c:f9:af:01:a6:ed:e1:32:07:6e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410AE9221B712152EE021F11F6C4A32F7D29278
        Validity
            Not Before: Nov 20 18:35:59 2025 GMT
            Not After : Nov 19 18:40:59 2026 GMT
        Subject: CN=C5DBDBA7D0BF8389BB4276F897FF95582E607708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b1:12:fd:fa:88:81:5d:01:eb:6c:87:6a:24:
                    83:5a:0d:57:d5:9e:6c:fd:26:78:ce:c1:13:ed:f8:
                    d3:9e:9b:f3:d4:4c:24:c5:fc:05:2f:34:f7:58:40:
                    bc:93:e9:9a:8f:9b:30:49:71:98:58:c6:f2:5a:24:
                    19:32:c2:db:d3:ec:a7:21:f9:0c:05:34:ab:1f:77:
                    71:7a:2c:51:24:3c:c7:54:b5:33:3f:dc:7f:92:b4:
                    68:df:31:40:d6:70:79:73:67:d4:c8:65:70:e3:24:
                    9a:e5:f7:53:44:52:1c:73:b8:ef:99:dc:23:c3:85:
                    14:10:91:ba:70:7f:2d:c7:66:6e:26:87:a9:e5:2a:
                    ed:67:c5:05:af:ff:81:a6:12:51:8b:00:91:e5:04:
                    c6:63:32:f9:a5:8b:f4:5e:53:c9:9b:9d:89:ce:ab:
                    bc:c4:90:33:f1:ca:3d:31:22:70:45:4b:cd:77:90:
                    fb:51:f3:14:a0:0c:74:25:98:d7:fd:ca:2b:47:7d:
                    b6:fe:e0:34:58:9f:dc:fa:30:2b:84:4b:86:77:8f:
                    f7:22:9d:28:2e:ac:d9:3c:9c:8b:5c:45:c6:e0:1f:
                    ce:23:c3:88:a9:49:a7:44:80:78:0e:a9:a0:cd:2e:
                    5e:cc:f6:45:f6:88:df:03:f7:e5:e0:78:97:89:54:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DB:DB:A7:D0:BF:83:89:BB:42:76:F8:97:FF:95:58:2E:60:77:08
            X509v3 Authority Key Identifier:
                keyid:B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:a0:38:8d:a4:c7:0d:ab:33:1c:a9:f9:5d:6f:4a:29:ae:4f:
         52:41:9f:0d:0b:7e:10:8e:44:0a:3b:dd:7a:6e:18:f5:f8:f6:
         f2:39:29:58:b2:89:f5:95:f2:30:d9:ce:c0:0e:e6:bc:02:0c:
         63:a0:bb:e1:6a:25:c7:87:c4:20:84:41:63:d9:4c:9b:e7:e1:
         02:68:b3:c6:76:2b:bc:15:4f:6f:ab:54:a0:c7:ca:cc:00:0b:
         02:2a:33:14:55:ad:8f:33:80:8b:8e:25:b4:92:9f:1f:1d:ca:
         47:7a:23:40:3e:3c:4c:42:5a:e4:9a:2f:64:36:73:b6:c0:b2:
         cc:fd:62:6d:16:d3:bb:f6:15:34:11:5f:15:49:30:ae:40:01:
         f0:1f:15:67:63:f6:c4:8d:22:a9:c9:bd:35:08:c9:4d:a6:ab:
         fc:d8:02:ac:96:9f:2b:b9:f8:87:08:53:3f:3c:d9:28:75:46:
         99:cd:30:87:84:42:31:63:89:04:b2:a4:dd:da:9d:ce:52:8e:
         c0:00:30:44:08:19:24:0a:4f:75:99:4b:c1:2d:79:8e:28:c6:
         9b:2d:cc:fa:9d:41:37:59:3c:cd:31:62:d8:eb:45:4f:e5:b3:
         a6:f9:66:5e:a1:75:59:fb:34:9f:65:56:96:f9:2e:df:04:9e:
         08:cc:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:00 2025 by rpki-client