This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/3137302e3234372e3130342e302f32322d3332203d3e20323634313530.roa
File:                     3137302e3234372e3130342e302f32322d3332203d3e20323634313530.roa (raw, json)
Hash identifier:          gwKzdA/1DuNz2+Ixo1yANj9rN7IpwJ+vJjsa0EEBjEQ=
Subject key identifier:   FA:EB:CE:D8:45:7F:EE:77:8F:AB:38:2A:F9:B9:27:27:11:D2:6E:B1
Certificate issuer:       /CN=EA7287487718BBD2E6952437F15830212EA9BEA4
Certificate serial:       04225A7D51AA7C65EFE9CEE7815E475C38C00D62
Authority key identifier: EA:72:87:48:77:18:BB:D2:E6:95:24:37:F1:58:30:21:2E:A9:BE:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7287487718BBD2E6952437F15830212EA9BEA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/3137302e3234372e3130342e302f32322d3332203d3e20323634313530.roa
Signing time:             Fri 07 Nov 2025 14:41:31 +0000
ROA not before:           Fri 07 Nov 2025 14:36:31 +0000
ROA not after:            Fri 06 Nov 2026 14:41:31 +0000
asID:                     264150
IP address blocks:        170.247.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/EA7287487718BBD2E6952437F15830212EA9BEA4.crl
                          rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/EA7287487718BBD2E6952437F15830212EA9BEA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7287487718BBD2E6952437F15830212EA9BEA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:22:5a:7d:51:aa:7c:65:ef:e9:ce:e7:81:5e:47:5c:38:c0:0d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7287487718BBD2E6952437F15830212EA9BEA4
        Validity
            Not Before: Nov  7 14:36:31 2025 GMT
            Not After : Nov  6 14:41:31 2026 GMT
        Subject: CN=FAEBCED8457FEE778FAB382AF9B9272711D26EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:87:98:cc:da:6d:67:28:6d:ea:5f:c5:db:
                    c7:35:9c:7f:60:ca:bd:98:a7:9a:93:ce:16:df:67:
                    2e:e8:09:6f:b1:f6:d8:da:6b:58:2c:91:2a:ba:ee:
                    ad:89:30:72:d6:58:41:ec:16:49:e4:a9:dc:08:97:
                    da:a2:82:8e:22:69:4d:52:13:c2:d0:86:3d:9e:0b:
                    c7:c5:63:c5:05:4e:a2:00:e0:db:9d:40:fc:20:8e:
                    91:a0:5b:10:ce:d9:01:f1:27:61:48:3c:47:53:f1:
                    cc:73:d0:30:c0:f4:13:97:87:8c:8a:f2:10:d6:e9:
                    08:86:96:9f:7d:82:2f:d4:4e:d7:88:b4:29:b0:84:
                    2b:cd:ef:c2:82:24:e6:30:e4:a6:8a:ed:93:06:70:
                    0a:ee:bc:36:d4:8a:3b:7d:d6:80:fd:7a:7b:02:c4:
                    e2:41:bc:c5:c7:19:92:ec:3b:ff:3c:3f:40:38:36:
                    59:8b:71:ce:49:35:ae:26:94:06:1f:96:9d:02:d9:
                    2b:c1:1d:fd:d3:61:0b:ae:69:f7:3d:9a:39:cc:52:
                    fc:74:74:1d:20:bd:32:f8:aa:6b:cd:a2:cb:08:47:
                    8c:63:4b:49:1e:3a:02:0d:25:37:14:c4:86:91:c8:
                    f8:04:a4:ba:b7:3c:3f:e0:7b:b6:0d:86:1f:fc:ad:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EB:CE:D8:45:7F:EE:77:8F:AB:38:2A:F9:B9:27:27:11:D2:6E:B1
            X509v3 Authority Key Identifier:
                keyid:EA:72:87:48:77:18:BB:D2:E6:95:24:37:F1:58:30:21:2E:A9:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/EA7287487718BBD2E6952437F15830212EA9BEA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7287487718BBD2E6952437F15830212EA9BEA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/3137302e3234372e3130342e302f32322d3332203d3e20323634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e5:7d:61:8e:0c:c8:3c:0f:dd:ad:6b:be:f8:c6:d8:7e:c9:2d:
         e6:4b:4e:64:02:12:d1:66:aa:99:d5:22:2d:31:4f:55:7c:29:
         1f:47:6f:1f:e2:82:68:a6:9f:ab:12:59:3c:d8:46:fe:d7:ec:
         10:e1:e7:ef:2b:3e:af:ec:18:3b:f3:e6:95:75:32:10:4f:e7:
         d1:df:3e:6c:2b:8d:90:2b:aa:a2:1f:5a:87:40:ce:4b:1d:e6:
         5a:cf:98:24:06:6d:89:3b:ac:84:da:e3:53:25:b4:36:24:4a:
         3d:10:76:58:5d:53:0f:6a:2e:3e:a2:bc:59:2f:ee:ba:c9:cd:
         6f:79:a3:cd:c8:dd:64:eb:0d:89:2d:95:f2:46:87:6b:f5:5b:
         cd:75:19:12:61:3c:df:2c:ca:b7:2e:ff:17:67:de:de:f9:31:
         b2:6e:61:d4:8a:a7:06:84:24:4c:29:a7:62:bb:f4:72:bf:3b:
         80:2b:91:58:5e:72:59:65:8c:31:dd:48:02:67:49:dd:90:77:
         39:9d:16:98:ac:ec:b5:a1:17:02:5d:62:a8:13:3e:e7:0f:00:
         e9:0d:cd:cb:51:2b:51:07:be:1b:ae:13:2a:e7:44:19:17:8d:
         9d:3f:6a:16:0e:b7:40:a0:71:20:40:91:17:63:ef:43:38:67:
         46:e9:c3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:54 2025 by rpki-client