This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32322d3232203d3e20323636333839.roa
File:                     3137302e38312e33362e302f32322d3232203d3e20323636333839.roa (raw, json)
Hash identifier:          eq/hO+anQ/ZByMv7GyCUzM8sq26nRQqL5xBOfjN66c0=
Subject key identifier:   73:1F:80:E1:85:7B:01:E2:8E:1D:A2:F6:62:11:4A:91:A8:50:F8:D9
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       66BB7EFB434819F12B6CCBB9F62CE43C276BB8D3
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32322d3232203d3e20323636333839.roa
Signing time:             Wed 31 Dec 2025 12:08:49 +0000
ROA not before:           Wed 31 Dec 2025 12:03:49 +0000
ROA not after:            Wed 30 Dec 2026 12:08:49 +0000
asID:                     266389
IP address blocks:        170.81.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 03:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bb:7e:fb:43:48:19:f1:2b:6c:cb:b9:f6:2c:e4:3c:27:6b:b8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Dec 31 12:03:49 2025 GMT
            Not After : Dec 30 12:08:49 2026 GMT
        Subject: CN=731F80E1857B01E28E1DA2F662114A91A850F8D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:bb:ea:3f:b5:39:e2:3a:b9:a3:e7:28:e7:
                    27:e0:3d:8b:64:ce:2f:78:4a:66:1f:94:e6:43:ad:
                    73:92:cb:e6:55:34:05:42:34:3f:4c:0e:ad:5c:df:
                    48:b4:82:86:9f:69:20:4a:98:00:34:be:ca:26:61:
                    2a:75:70:0f:21:5e:29:0b:83:66:dd:71:7e:50:58:
                    b5:e4:74:85:2c:ac:5f:fb:90:44:0a:1c:4a:71:61:
                    23:e8:39:a7:fb:fc:1b:a4:ab:3c:c6:9a:e0:e9:e8:
                    cc:c5:09:f2:56:a6:0e:31:29:d8:9a:68:58:9b:c5:
                    e2:35:0c:d2:55:8d:d0:e8:9a:03:2e:33:2a:80:b8:
                    8d:a0:d3:01:48:52:41:7b:6e:28:30:8e:9b:8d:2e:
                    85:33:2d:1a:6e:15:9c:40:70:0f:e5:37:86:71:8f:
                    17:17:ee:a9:fa:55:e1:15:c8:bc:4f:31:64:53:72:
                    95:f8:05:e5:18:65:3c:fc:6a:2c:ee:6e:7e:f2:de:
                    8e:3e:78:d3:2c:be:78:29:ac:d8:05:78:ea:61:63:
                    b9:f5:c3:14:a1:5d:6b:df:d2:a1:72:f2:31:cc:b8:
                    d4:c7:e0:ef:fc:c5:b8:10:60:5a:b4:ce:02:e2:35:
                    1a:ec:be:73:ca:0f:2a:f5:07:13:40:fd:9a:a8:08:
                    a1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1F:80:E1:85:7B:01:E2:8E:1D:A2:F6:62:11:4A:91:A8:50:F8:D9
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32322d3232203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:34:c0:e2:af:f8:13:7e:54:3a:72:05:95:ca:15:73:3f:ad:
         ae:2d:94:0b:4b:c9:a5:0e:00:76:f4:bb:18:e2:46:0d:b6:2f:
         71:26:1a:d1:1b:63:2c:b6:ac:44:ae:af:bf:4b:37:d9:19:2d:
         fd:eb:d5:00:e0:58:b3:52:f3:4c:2c:84:b7:51:fb:f7:d8:44:
         4e:ea:26:d4:f5:97:b2:2a:03:fe:2b:25:88:19:70:0b:24:37:
         cd:7a:b1:66:bc:c5:70:66:55:aa:5d:03:32:5c:af:aa:97:49:
         1b:ed:eb:d3:43:e2:51:c3:4b:7d:db:43:04:24:93:fd:2f:e2:
         5d:f3:a1:04:e9:7f:a1:05:53:e5:43:77:2f:c9:65:eb:ac:23:
         01:53:4e:26:69:16:db:1d:b1:b1:d3:e5:d9:0c:33:79:08:db:
         37:83:fe:83:27:e1:a7:db:6a:22:95:e7:25:68:43:2d:cb:c7:
         b3:65:e5:09:68:a4:ee:60:a5:de:23:51:f8:07:1e:a1:64:8e:
         ff:45:82:d8:f0:24:52:75:f5:b8:f3:bf:2e:92:a9:0b:25:74:
         37:92:fb:ea:9a:26:9f:7f:d5:f0:c6:f5:8b:7e:f7:b6:4b:9a:
         4e:d7:c2:9e:c4:bf:03:b6:0f:ac:b1:9d:c4:73:cd:c7:d1:87:
         39:eb:08:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:19:01 2026 by rpki-client