This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32322d3232203d3e20323636333839.roa
File:                     3137302e38312e33362e302f32322d3232203d3e20323636333839.roa (raw, json)
Hash identifier:          aOXKc6GNvbK6X1AdnGkO1nSJC60blEEnUUA+FBOSnnk=
Subject key identifier:   5D:D2:C5:F3:A7:58:3A:85:9B:84:10:F5:50:51:C3:30:41:A9:46:74
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       2B9616B6B5BA8B01EAF1EE67682448E9615CB945
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32322d3232203d3e20323636333839.roa
Signing time:             Wed 12 Nov 2025 01:01:58 +0000
ROA not before:           Wed 12 Nov 2025 00:56:58 +0000
ROA not after:            Wed 11 Nov 2026 01:01:58 +0000
asID:                     266389
IP address blocks:        170.81.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:96:16:b6:b5:ba:8b:01:ea:f1:ee:67:68:24:48:e9:61:5c:b9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Nov 12 00:56:58 2025 GMT
            Not After : Nov 11 01:01:58 2026 GMT
        Subject: CN=5DD2C5F3A7583A859B8410F55051C33041A94674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:2d:40:2a:7c:0d:18:91:04:f7:61:ed:8e:
                    fc:94:3b:d5:30:da:37:1d:78:f5:b5:35:a7:63:a9:
                    9f:a1:25:b1:b1:4a:01:41:2c:ba:3c:20:bd:14:26:
                    a1:cd:a1:44:2a:3f:af:70:e9:61:e1:4a:50:47:42:
                    62:7b:29:d6:f6:df:0c:77:e3:32:b7:94:e7:74:ba:
                    bd:7a:c5:99:e8:3e:c2:65:68:fd:d4:31:e8:2d:e1:
                    27:0a:55:fe:17:63:04:72:80:b9:b7:e0:43:47:98:
                    c9:47:27:e0:33:a2:33:48:50:ce:e1:fb:bd:b4:d6:
                    c8:a2:1c:e1:68:01:e7:d9:d5:6a:b1:0e:da:bc:02:
                    c2:aa:16:43:b0:11:91:b1:33:a2:ff:bf:bc:51:7b:
                    f7:0c:88:2d:85:41:73:2d:14:90:55:67:c2:55:29:
                    ed:fe:26:12:43:0b:f4:1a:f4:c4:f5:93:c1:fd:98:
                    32:f6:f7:4e:a5:76:ef:23:51:b3:fb:cd:31:ce:22:
                    1b:d1:59:49:a8:45:e3:9a:df:2c:d4:9f:35:81:c2:
                    7f:58:6a:6c:9e:51:ed:ff:36:4f:9d:52:1c:80:94:
                    7d:0d:45:92:e1:f3:a5:54:e5:dc:b0:29:8e:b1:dd:
                    65:5a:51:e5:79:19:6f:35:c6:39:3c:e6:2a:4d:3a:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D2:C5:F3:A7:58:3A:85:9B:84:10:F5:50:51:C3:30:41:A9:46:74
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32322d3232203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:14:21:cb:0e:0d:30:76:f5:46:a0:84:5d:e4:eb:48:46:fc:
         c8:b4:c1:b3:9c:7c:e1:77:0e:22:34:ce:a4:8d:df:df:bc:b0:
         5f:4e:d7:14:66:4a:8a:e6:99:b2:d9:17:84:05:56:09:23:1a:
         94:a8:5b:f1:ef:71:e1:85:57:38:0d:82:c9:1b:96:47:dd:75:
         23:bd:aa:79:90:99:09:dd:7a:33:6e:64:bb:00:93:65:3e:9d:
         f8:d5:96:2c:5e:ff:8c:71:8f:d2:01:8b:6b:4b:a4:a4:b5:9f:
         c8:e9:81:e6:46:77:8e:88:af:72:44:2f:bc:d6:e7:42:97:fa:
         46:2b:bb:c8:42:72:de:45:8c:74:81:fc:0e:63:69:93:b2:95:
         75:e4:d5:e2:43:77:71:fc:24:8b:45:34:3a:d1:8a:ca:ba:ec:
         db:c9:9e:ba:19:d3:3f:c3:14:ff:a7:49:6a:c9:37:6b:6a:53:
         97:f1:8a:b3:7e:18:ea:c1:82:79:dc:5b:49:45:13:00:23:e3:
         c2:25:bb:b0:6c:35:d5:9e:02:0d:2b:d5:ed:54:7c:11:01:a1:
         f3:a7:36:10:c8:61:32:7c:92:6e:39:de:ef:05:ce:09:3e:9c:
         77:da:a8:5b:0f:8b:b3:a0:18:cf:bd:df:91:ed:7d:a9:f3:31:
         e5:7f:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:01 2025 by rpki-client