This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33372e302f32342d3234203d3e20323636333839.roa
File:                     3137302e38312e33372e302f32342d3234203d3e20323636333839.roa (raw, json)
Hash identifier:          DOX0KQ/OKvEFDeIf2de+nCEw29prUxGE7aFskv6gXrg=
Subject key identifier:   91:F4:21:D7:DD:20:BC:26:4E:97:EB:05:41:89:B3:36:84:51:4B:D2
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       5D59A48452D3859A66E78F4A8193FF73D0A83EB7
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33372e302f32342d3234203d3e20323636333839.roa
Signing time:             Wed 31 Dec 2025 12:08:50 +0000
ROA not before:           Wed 31 Dec 2025 12:03:50 +0000
ROA not after:            Wed 30 Dec 2026 12:08:50 +0000
asID:                     266389
IP address blocks:        170.81.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 03:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:59:a4:84:52:d3:85:9a:66:e7:8f:4a:81:93:ff:73:d0:a8:3e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Dec 31 12:03:50 2025 GMT
            Not After : Dec 30 12:08:50 2026 GMT
        Subject: CN=91F421D7DD20BC264E97EB054189B33684514BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:b8:5c:e0:30:9e:5b:48:e1:8b:5d:f7:ce:
                    ac:de:94:c4:8a:a6:c4:47:20:79:a4:fc:f0:7c:b0:
                    54:f6:37:73:46:24:c2:dd:bd:e5:63:22:68:45:c9:
                    4e:ef:57:91:20:38:5a:fa:59:13:8c:34:2f:8e:80:
                    30:51:5c:ae:27:28:23:6c:67:7d:a7:05:38:98:2d:
                    42:33:ac:f9:fb:e1:86:33:01:d6:1b:be:20:a4:53:
                    f1:86:9b:22:46:f6:59:fc:b3:99:6b:81:0c:6c:02:
                    4d:2a:66:14:c4:0d:c9:a5:23:2e:ae:de:df:56:1d:
                    dc:0c:86:76:42:d9:38:9b:23:74:f7:34:69:07:a5:
                    d3:41:51:41:a5:79:1b:2e:05:c7:1e:52:59:e5:59:
                    f5:1c:87:42:03:c2:b1:25:16:51:7e:61:04:19:9b:
                    5b:5e:d4:61:aa:cc:1f:51:63:de:9e:cb:eb:60:8e:
                    ea:d3:ab:50:33:1b:57:c1:6f:3c:87:6a:fa:0a:41:
                    78:e5:6c:c2:60:82:98:b5:f0:13:f2:02:aa:68:ba:
                    89:01:bf:48:73:25:c6:3f:6d:80:45:3b:73:4d:3e:
                    5a:4a:9f:89:3d:20:a8:12:02:de:51:05:80:a0:e6:
                    c7:d6:f6:42:9a:56:b3:db:b4:d9:29:3b:9c:3b:67:
                    60:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:21:D7:DD:20:BC:26:4E:97:EB:05:41:89:B3:36:84:51:4B:D2
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33372e302f32342d3234203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:66:ed:f6:81:10:c4:6b:1a:18:44:9e:af:3e:44:b0:bc:
         66:b0:b7:9b:96:5c:4f:cb:92:bd:39:1b:15:10:93:d1:02:dd:
         b1:52:b0:dd:e4:50:8f:98:77:08:f6:3e:7b:cc:f8:07:1d:fa:
         bd:bc:b3:b5:c7:bc:28:8f:6b:d3:16:6a:95:c2:b3:ef:58:6b:
         34:f2:da:bc:cd:d5:51:52:14:a6:26:9f:c4:24:9b:54:92:6d:
         a7:4f:e1:cd:b7:83:c5:5d:cc:53:f1:5b:39:1d:47:75:a5:5a:
         ce:af:9b:f3:36:5b:a8:e7:2b:42:89:f3:7d:35:ec:45:7a:b1:
         07:c1:62:4a:a5:5a:fc:b8:cf:6c:b7:34:65:a6:aa:41:ea:c6:
         49:5d:fa:17:10:98:71:c7:cb:53:04:c0:0e:40:ee:c5:90:5e:
         d4:44:3b:db:88:59:43:a3:8c:7a:0a:98:a4:92:54:58:ad:f0:
         cd:f3:03:57:0c:d4:75:47:96:c7:35:90:4e:87:9f:5e:b9:b4:
         88:86:53:e4:d8:0d:4f:73:25:a8:19:23:e5:8e:90:7d:e7:26:
         2a:43:a9:e9:c0:d9:26:19:7c:19:83:e9:a2:2f:f5:81:da:7e:
         a5:fd:84:af:50:d1:f7:c8:91:6f:f2:4d:ba:9f:42:7d:59:64:
         30:33:73:34
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXVmkhFLThZpm549KgZP/c9CoPrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZBRTkxMzcxNkExMEI4RjAxQzAyM0IzMDQzRkFERkJC
MTlFMzFCNjAeFw0yNTEyMzExMjAzNTBaFw0yNjEyMzAxMjA4NTBaMDMxMTAvBgNV
BAMTKDkxRjQyMUQ3REQyMEJDMjY0RTk3RUIwNTQxODlCMzM2ODQ1MTRCRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/arhc4DCeW0jhi133zqzelMSK
psRHIHmk/PB8sFT2N3NGJMLdveVjImhFyU7vV5EgOFr6WROMNC+OgDBRXK4nKCNs
Z32nBTiYLUIzrPn74YYzAdYbviCkU/GGmyJG9ln8s5lrgQxsAk0qZhTEDcmlIy6u
3t9WHdwMhnZC2TibI3T3NGkHpdNBUUGleRsuBcceUlnlWfUch0IDwrElFlF+YQQZ
m1te1GGqzB9RY96ey+tgjurTq1AzG1fBbzyHavoKQXjlbMJggpi18BPyAqpouokB
v0hzJcY/bYBFO3NNPlpKn4k9IKgSAt5RBYCg5sfW9kKaVrPbtNkpO5w7Z2D/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkfQh190gvCZOl+sFQYmzNoRRS9IwHwYDVR0j
BBgwFoAU766RNxahC48BwCOzBD+t+7GeMbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUQ5cmpFTDZ0bUVpRDl4RjdCSkpUVnF0R0hXbTVWV01ON1FaUm5tbXZk
VnAvMC9FRkFFOTEzNzE2QTEwQjhGMDFDMDIzQjMwNDNGQURGQkIxOUUzMUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGQUU5MTM3MTZBMTBCOEYw
MUMwMjNCMzA0M0ZBREZCQjE5RTMxQjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEOXJqRUw2dG1FaUQ5eEY3QkpKVFZxdEdIV201VldNTjdRWlJubW12ZFZwLzAv
MzEzNzMwMmUzODMxMmUzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlElMA0GCSqGSIb3DQEBCwUAA4IBAQCTtGbt9oEQ
xGsaGESerz5EsLxmsLebllxPy5K9ORsVEJPRAt2xUrDd5FCPmHcI9j57zPgHHfq9
vLO1x7woj2vTFmqVwrPvWGs08tq8zdVRUhSmJp/EJJtUkm2nT+HNt4PFXcxT8Vs5
HUd1pVrOr5vzNluo5ytCifN9NexFerEHwWJKpVr8uM9stzRlpqpB6sZJXfoXEJhx
x8tTBMAOQO7FkF7URDvbiFlDo4x6CpikklRYrfDN8wNXDNR1R5bHNZBOh59eubSI
hlPk2A1PcyWoGSPljpB95yYqQ6npwNkmGXwZg+miL/WB2n6l/YSvUNH3yJFv8k26
n0J9WWQwM3M0
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:19:02 2026 by rpki-client