This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138372e302f3234203d3e20323636333338.roa
File:                     3137302e3233382e3138372e302f3234203d3e20323636333338.roa (raw, json)
Hash identifier:          gGE5obA+3rPUY73qCTVXKGFNcJ/MQh52Bo9BOb2JTps=
Subject key identifier:   88:CA:5D:57:0D:56:91:77:16:3F:83:59:B5:78:B8:DB:ED:88:9F:F2
Certificate issuer:       /CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
Certificate serial:       1DB9E2C71515499B3F1CBB1D1AAEE3C0FD817AD4
Authority key identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138372e302f3234203d3e20323636333338.roa
Signing time:             Tue 22 Apr 2025 18:20:55 +0000
ROA not before:           Tue 22 Apr 2025 18:15:55 +0000
ROA not after:            Wed 22 Apr 2026 18:20:55 +0000
asID:                     266338
IP address blocks:        170.238.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl
                          rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b9:e2:c7:15:15:49:9b:3f:1c:bb:1d:1a:ae:e3:c0:fd:81:7a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
        Validity
            Not Before: Apr 22 18:15:55 2025 GMT
            Not After : Apr 22 18:20:55 2026 GMT
        Subject: CN=3082010A0282010100FCE3A15BD36AD63473AC666BCB3DEEEDF63BE65057A0A88A79BE8A0D96FFA0DEC20BCB55EB532332C74D0211BA0C8EAE20F056359F5AEB334F77C3C3AB01E86E0EE38F7E0C07931F1CEB5386DCD788C1B5A279769107C3EB4031FCCEF455CEF3BA38588A61C5599FAD3E532F032EDE48CDE581D4ECAFC8AA687667594AF1523AA915FE80D4A82ACC94B2A0225108422A479E66831712DD98CB04959AE6F87CD03395DCA012EBA1772CAC0A0FC5BB48C22171513DD42FDB66E10B7E06FE91AC4DC4213E53DC38BD041B8D2C5EF8EE4A085A36A1C1009D824BB61B72494033280E45F7C7962E390FFE50260E800CA0C9B4E133380D417E935405BB16CBB7CB02530203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:e3:a1:5b:d3:6a:d6:34:73:ac:66:6b:cb:3d:
                    ee:ed:f6:3b:e6:50:57:a0:a8:8a:79:be:8a:0d:96:
                    ff:a0:de:c2:0b:cb:55:eb:53:23:32:c7:4d:02:11:
                    ba:0c:8e:ae:20:f0:56:35:9f:5a:eb:33:4f:77:c3:
                    c3:ab:01:e8:6e:0e:e3:8f:7e:0c:07:93:1f:1c:eb:
                    53:86:dc:d7:88:c1:b5:a2:79:76:91:07:c3:eb:40:
                    31:fc:ce:f4:55:ce:f3:ba:38:58:8a:61:c5:59:9f:
                    ad:3e:53:2f:03:2e:de:48:cd:e5:81:d4:ec:af:c8:
                    aa:68:76:67:59:4a:f1:52:3a:a9:15:fe:80:d4:a8:
                    2a:cc:94:b2:a0:22:51:08:42:2a:47:9e:66:83:17:
                    12:dd:98:cb:04:95:9a:e6:f8:7c:d0:33:95:dc:a0:
                    12:eb:a1:77:2c:ac:0a:0f:c5:bb:48:c2:21:71:51:
                    3d:d4:2f:db:66:e1:0b:7e:06:fe:91:ac:4d:c4:21:
                    3e:53:dc:38:bd:04:1b:8d:2c:5e:f8:ee:4a:08:5a:
                    36:a1:c1:00:9d:82:4b:b6:1b:72:49:40:33:28:0e:
                    45:f7:c7:96:2e:39:0f:fe:50:26:0e:80:0c:a0:c9:
                    b4:e1:33:38:0d:41:7e:93:54:05:bb:16:cb:b7:cb:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CA:5D:57:0D:56:91:77:16:3F:83:59:B5:78:B8:DB:ED:88:9F:F2
            X509v3 Authority Key Identifier:
                keyid:4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138372e302f3234203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         eb:e6:74:a5:dd:92:26:27:b9:b7:9e:b8:61:51:fa:28:de:a2:
         8f:19:6b:61:47:48:64:6e:b9:55:ce:e2:bb:5c:7b:5c:8c:a7:
         92:64:9a:8f:32:d5:5c:23:14:4e:7c:ce:c9:22:dd:f4:88:b2:
         fc:20:81:63:84:2a:12:d3:b8:74:38:2c:d5:05:58:ef:30:f7:
         8a:61:69:d2:9e:c2:78:a7:67:40:dc:aa:bf:cb:cd:5d:32:42:
         96:53:da:ba:46:06:a5:b1:34:a1:5b:86:4f:7c:27:7a:f2:f0:
         ea:e0:f0:6e:7e:25:5f:a6:7b:57:5f:4a:c8:c0:2d:2a:86:5b:
         02:3b:86:a1:9f:a3:39:fd:31:64:45:c8:51:16:9c:b1:80:7d:
         10:b3:8e:c6:35:b3:63:64:4c:4c:bd:72:74:e1:0b:a6:8b:e2:
         bd:d7:2c:6c:5c:b8:22:0a:2a:8c:69:72:41:1a:3a:2f:27:62:
         c3:35:3e:3b:3e:54:30:69:b6:91:b3:66:21:fc:b8:4f:f8:ff:
         e3:52:f3:b6:de:93:00:33:4e:3b:88:a3:e8:fe:a2:c0:e7:3d:
         f9:37:d2:45:32:ff:8c:5c:66:f6:1b:4d:72:47:63:b0:c1:89:
         27:cb:03:9f:db:24:bb:5a:51:7c:1f:0b:94:79:1d:7b:45:7b:
         d6:d7:ef:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----