This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32342d3234203d3e20323636333839.roa
File:                     3137302e38312e33362e302f32342d3234203d3e20323636333839.roa (raw, json)
Hash identifier:          tUXmGy9L4GTR8065ZQDmFnmPKNJagVfQUCUd+vnDmQk=
Subject key identifier:   DA:95:45:C2:01:03:F7:FD:C4:C1:A7:C8:62:88:1D:BB:F2:05:33:E5
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       61A7C4166C66176F1EEA09611352CAAD62B7ED8E
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32342d3234203d3e20323636333839.roa
Signing time:             Wed 31 Dec 2025 12:08:49 +0000
ROA not before:           Wed 31 Dec 2025 12:03:49 +0000
ROA not after:            Wed 30 Dec 2026 12:08:49 +0000
asID:                     266389
IP address blocks:        170.81.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 03:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a7:c4:16:6c:66:17:6f:1e:ea:09:61:13:52:ca:ad:62:b7:ed:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Dec 31 12:03:49 2025 GMT
            Not After : Dec 30 12:08:49 2026 GMT
        Subject: CN=DA9545C20103F7FDC4C1A7C862881DBBF20533E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6f:10:32:d3:9c:78:db:e0:01:55:c9:b4:a7:
                    e4:84:72:3b:8c:1e:99:61:74:3e:21:19:7e:06:51:
                    f4:10:2e:7b:59:ef:34:01:b3:21:f2:27:94:46:00:
                    51:31:57:31:18:cc:51:94:65:0b:3d:42:cd:06:d4:
                    fd:4e:be:ef:90:ea:0e:ad:7b:36:49:5c:0b:bc:2f:
                    89:4b:0f:70:08:3f:f3:3f:fd:12:71:4a:d3:21:c2:
                    6c:eb:9d:28:6c:ba:a3:0c:60:e8:ac:f4:27:1b:76:
                    3f:cf:b8:14:92:e2:b1:3c:ed:c9:11:99:64:e6:6c:
                    51:5d:ff:1f:eb:25:79:ee:cf:c0:df:28:1c:7c:53:
                    2b:54:48:a5:8e:0c:ca:e8:a1:5e:3f:c0:bd:2e:a0:
                    6c:fd:e5:eb:6b:c6:58:e1:14:eb:1e:fe:63:ea:fe:
                    25:57:57:6f:f3:58:83:23:d7:a0:f3:76:49:e0:0a:
                    1e:c7:01:e8:25:78:f3:28:cb:d8:52:35:42:f9:83:
                    fd:d2:29:ce:c9:f5:7c:ce:6d:f2:a9:22:99:4d:ea:
                    d4:ac:c3:16:4c:3a:0f:ae:a3:76:ec:18:77:49:14:
                    9b:24:0e:1c:40:fd:36:4d:94:46:5c:15:6d:88:2e:
                    4c:02:18:e3:d5:a8:6e:4f:1f:16:12:53:56:69:4c:
                    76:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:95:45:C2:01:03:F7:FD:C4:C1:A7:C8:62:88:1D:BB:F2:05:33:E5
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33362e302f32342d3234203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:da:0d:04:09:e9:d0:79:e1:c4:22:b5:ed:06:70:e2:80:
         6e:4b:c4:97:d7:f4:d8:d6:c7:4f:fa:71:c6:7b:b1:d9:92:77:
         a2:b1:98:f9:09:b4:70:9f:e4:ee:7a:99:c8:47:5f:3c:99:6c:
         fa:2b:f5:6d:0a:91:1d:a6:67:1a:a6:ac:4b:2a:77:ad:71:66:
         46:c8:8a:69:e6:2d:46:7e:29:da:39:ef:76:9f:1b:7a:84:90:
         f6:ae:45:f6:e2:37:40:69:23:77:35:4c:c1:47:d2:dd:7f:38:
         cd:37:90:7f:16:59:78:b0:55:c6:26:92:7c:1c:ae:6d:3b:68:
         a0:7e:1d:2c:f0:05:f3:cd:b0:5e:8b:bb:72:09:25:6d:7e:8f:
         b0:e5:bb:b5:95:ff:33:65:e6:59:88:13:66:68:a3:c4:84:8e:
         73:87:29:3e:db:db:71:ed:41:64:e5:58:3f:7f:30:78:10:2c:
         8a:1c:31:3d:f3:1c:4c:66:4d:54:ae:7d:fd:ca:e9:c4:0f:0b:
         a1:2f:b5:a3:4c:41:4a:ee:57:8b:fe:3b:64:23:8d:4f:92:e3:
         96:d9:a9:bc:19:87:7e:9c:d5:0c:8b:9a:81:9f:42:1d:a1:1a:
         40:4b:c3:f0:10:1f:5a:b6:10:d6:aa:94:9d:ad:4f:90:70:98:
         2d:15:05:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:18:46 2026 by rpki-client