This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/3137302e3233312e3137322e302f32322d3234203d3e20323632353930.roa
File:                     3137302e3233312e3137322e302f32322d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          OaJsje9fvU74AVRyh99W/4a80Z6PosiruOxFR7e2OsQ=
Subject key identifier:   62:70:30:AE:4D:91:93:B5:F8:D7:B2:18:98:13:06:38:37:24:E8:06
Certificate issuer:       /CN=CA79EC19D05A9E6082E976C95B92CAA0660C3D77
Certificate serial:       467B22CED3D7CD838BABDBB81F8E418C568BCAA8
Authority key identifier: CA:79:EC:19:D0:5A:9E:60:82:E9:76:C9:5B:92:CA:A0:66:0C:3D:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/3137302e3233312e3137322e302f32322d3234203d3e20323632353930.roa
Signing time:             Thu 04 Dec 2025 19:24:22 +0000
ROA not before:           Thu 04 Dec 2025 19:19:22 +0000
ROA not after:            Thu 03 Dec 2026 19:24:22 +0000
asID:                     262590
IP address blocks:        170.231.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.crl
                          rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7b:22:ce:d3:d7:cd:83:8b:ab:db:b8:1f:8e:41:8c:56:8b:ca:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA79EC19D05A9E6082E976C95B92CAA0660C3D77
        Validity
            Not Before: Dec  4 19:19:22 2025 GMT
            Not After : Dec  3 19:24:22 2026 GMT
        Subject: CN=627030AE4D9193B5F8D7B218981306383724E806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:d2:17:2d:06:c7:61:72:ef:0e:e6:82:93:
                    7f:21:71:38:01:39:22:5d:fc:75:e4:d7:2f:15:40:
                    5d:cc:a7:7a:55:55:eb:c3:9e:39:b4:23:00:13:bc:
                    89:db:de:57:15:04:10:d8:1d:a5:b2:1d:ba:8f:01:
                    8d:cc:20:91:73:e7:27:bb:70:40:bd:d4:ec:99:37:
                    45:79:a1:56:9e:2c:aa:9a:4e:c1:e2:59:52:69:c5:
                    8b:58:82:b5:4a:e6:63:3c:2c:37:35:99:78:34:be:
                    c3:bf:61:8c:fe:d7:84:ff:45:34:8c:9f:47:cf:86:
                    a8:be:a0:65:e3:ed:b8:b2:76:6a:e3:61:77:07:ac:
                    7c:12:d7:fd:bc:13:6c:75:e6:e0:0c:4b:34:3e:81:
                    49:df:d7:8a:3b:25:28:9a:de:55:ad:96:59:fd:bd:
                    42:c1:11:f4:aa:11:ff:78:87:49:91:3a:18:12:3c:
                    81:1b:e7:c4:92:d2:42:b8:2d:57:89:0b:e4:d2:33:
                    fc:6e:d8:40:3f:86:2d:65:b7:f6:c3:c5:4c:7e:bd:
                    94:7f:55:9d:21:4e:50:94:a9:84:43:c2:2b:23:09:
                    09:a7:85:f9:75:ff:ee:64:26:8f:58:bf:d2:fd:96:
                    db:71:e0:e1:6e:1d:c6:30:4f:a5:8c:37:25:de:f7:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:70:30:AE:4D:91:93:B5:F8:D7:B2:18:98:13:06:38:37:24:E8:06
            X509v3 Authority Key Identifier:
                keyid:CA:79:EC:19:D0:5A:9E:60:82:E9:76:C9:5B:92:CA:A0:66:0C:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/3137302e3233312e3137322e302f32322d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:1a:0d:70:73:08:23:99:43:b0:1e:68:c2:e1:83:e8:88:93:
         c8:f2:6b:9e:c4:91:10:62:63:3b:7e:2d:1a:03:ae:a3:7c:d7:
         f8:7e:99:18:9c:3c:be:26:a3:22:33:99:a8:66:88:49:af:86:
         37:41:f5:c3:4f:ca:5b:d4:24:da:7d:d1:3e:48:d9:f6:fd:f5:
         d4:31:bc:b9:ad:e0:12:3f:ec:37:63:7e:bd:1d:90:b4:ea:d9:
         b9:be:d0:cb:b3:7a:24:61:04:c7:f5:c2:dc:6a:1b:28:d8:84:
         59:d3:d8:8e:69:02:d4:ca:ae:0d:09:6f:32:9e:40:62:27:08:
         be:aa:2e:65:91:35:95:4d:a2:6b:c8:fd:84:67:ad:1d:c1:f4:
         a8:cd:9b:29:fb:d4:cc:0d:12:79:55:0d:c2:31:6f:50:f8:40:
         22:33:f1:b9:a3:98:bc:8f:4a:5b:5a:09:82:3d:17:dd:61:f6:
         1d:44:75:44:88:08:ff:76:af:df:dc:ab:d6:44:16:03:f0:62:
         24:cd:3d:01:cb:45:47:56:6f:de:fe:34:ab:35:1e:c9:67:89:
         2c:0b:f2:ed:69:a0:23:12:64:c7:0c:e1:e9:89:f6:8a:d8:09:
         fe:9e:cd:90:79:4f:1c:99:fe:e1:c4:76:d4:e3:92:0a:bb:bc:
         ba:5b:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:22 2025 by rpki-client