This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32342d3234203d3e20323636333839.roa
File:                     3137302e38312e33362e302f32342d3234203d3e20323636333839.roa (raw, json)
Hash identifier:          1aw7KbkX37ywE8MZ4znk7gvmQlJ30a0TCobMetaDwrk=
Subject key identifier:   7D:70:3E:62:C7:0C:0A:32:51:A7:47:FA:7D:B7:4D:D6:06:51:6D:73
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       6B5BE2D46358B956D9C097CAA3D091A412F0325F
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32342d3234203d3e20323636333839.roa
Signing time:             Wed 12 Nov 2025 01:01:59 +0000
ROA not before:           Wed 12 Nov 2025 00:56:59 +0000
ROA not after:            Wed 11 Nov 2026 01:01:59 +0000
asID:                     266389
IP address blocks:        170.81.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5b:e2:d4:63:58:b9:56:d9:c0:97:ca:a3:d0:91:a4:12:f0:32:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Nov 12 00:56:59 2025 GMT
            Not After : Nov 11 01:01:59 2026 GMT
        Subject: CN=7D703E62C70C0A3251A747FA7DB74DD606516D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:d8:ff:5f:a0:e5:16:68:60:c1:ca:e6:25:
                    d7:34:fe:79:88:37:f9:d5:07:aa:c4:da:13:11:40:
                    e5:b1:dc:c8:ed:45:63:45:48:a4:e9:9c:7a:be:82:
                    6f:2d:8f:bc:c6:5f:41:7c:ca:1d:2e:b0:80:41:6a:
                    80:5e:da:c2:7c:56:e6:ac:ff:fd:d3:41:45:a7:ce:
                    f5:1f:6f:0f:68:d3:9b:06:ff:10:1c:c0:df:10:58:
                    5c:2d:dd:0a:36:24:fe:4d:5d:53:51:ff:d0:ea:32:
                    00:b2:46:63:c2:43:a8:b9:5a:02:ac:a7:35:6b:4a:
                    e8:e3:2d:3f:03:af:0f:55:a4:01:3b:9b:97:1f:9b:
                    fe:68:a2:6d:cc:b2:15:fa:19:8d:dc:50:86:8a:c3:
                    43:7f:ea:c4:33:fb:2b:c9:8e:a6:e8:8a:20:ff:dd:
                    5b:2d:28:f7:0a:ca:b8:ab:cf:ab:6b:6c:ac:58:42:
                    f8:51:d4:9c:6a:b2:18:8b:c5:7f:86:af:fe:b5:1e:
                    ca:e0:fc:1a:b9:39:66:99:10:46:8c:e3:20:2d:6e:
                    51:b5:ca:94:28:e0:a5:be:2f:76:8d:6f:e8:9f:c4:
                    16:5f:34:24:05:e9:ed:7c:af:9e:0a:30:28:1b:85:
                    c4:85:ed:d7:ac:95:77:ed:84:2d:4b:6e:ea:9b:bf:
                    ec:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:70:3E:62:C7:0C:0A:32:51:A7:47:FA:7D:B7:4D:D6:06:51:6D:73
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32342d3234203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:59:8f:b8:47:76:e0:90:64:98:d9:cb:df:3a:55:5f:d6:
         96:87:15:3e:74:8b:90:0b:52:b6:5b:36:b6:dc:38:64:2b:13:
         21:4c:10:ed:06:9f:9e:11:a0:3b:79:b1:bd:72:e0:0b:18:3b:
         06:14:a7:fb:d1:b2:bc:fa:14:d5:a1:08:bd:3b:4e:fd:64:37:
         7b:7a:f8:b6:e5:fa:f3:24:3c:f8:0d:0b:91:40:a5:df:3a:49:
         de:5c:a1:e0:0c:39:e7:a6:eb:8e:d9:a1:a9:7c:7b:09:8e:46:
         42:78:ee:13:73:22:79:99:9f:03:4c:12:ab:64:17:b0:9d:e0:
         00:48:8e:9c:d1:9c:86:cb:0d:ee:59:7b:23:95:ce:ad:e6:43:
         2e:ac:57:f3:07:b2:a4:1b:05:da:31:61:54:3b:bd:ec:27:cc:
         16:ba:a0:19:62:1e:65:39:47:5c:ef:7a:e5:fc:41:42:5a:d1:
         b6:13:c2:05:d2:b0:b7:6d:12:52:7d:55:60:d6:1f:36:7a:b4:
         27:cb:63:c1:85:89:69:bf:ca:6e:9b:2e:99:a6:7f:d5:ae:4c:
         b4:71:3c:c2:32:50:57:14:57:ad:b5:7d:f1:18:73:94:3d:35:
         90:db:75:3e:19:b1:09:de:cb:6b:1b:20:0b:49:79:f9:87:77:
         ba:a2:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:26 2025 by rpki-client