This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33382e302f32342d3234203d3e20323636333839.roa
File:                     3137302e38312e33382e302f32342d3234203d3e20323636333839.roa (raw, json)
Hash identifier:          YMibHk7zrLaKuM+QzGTWzJXWTq5EpuYmLSluuJMBxxA=
Subject key identifier:   E5:0E:AD:3E:FE:87:0E:1A:C5:A6:E1:D7:FE:0C:87:EA:ED:B2:89:51
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       63014078C3000B583DFF2CE4CD41AC283538709F
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33382e302f32342d3234203d3e20323636333839.roa
Signing time:             Wed 31 Dec 2025 12:08:50 +0000
ROA not before:           Wed 31 Dec 2025 12:03:50 +0000
ROA not after:            Wed 30 Dec 2026 12:08:50 +0000
asID:                     266389
IP address blocks:        170.81.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 03:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:01:40:78:c3:00:0b:58:3d:ff:2c:e4:cd:41:ac:28:35:38:70:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Dec 31 12:03:50 2025 GMT
            Not After : Dec 30 12:08:50 2026 GMT
        Subject: CN=E50EAD3EFE870E1AC5A6E1D7FE0C87EAEDB28951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:ce:58:6b:d7:d9:53:18:37:db:75:2b:b4:
                    8f:8d:99:bb:af:2b:17:c6:43:8b:38:07:09:7d:a7:
                    6c:d5:24:c0:98:43:c3:1d:42:d3:74:bf:fe:21:c5:
                    b9:df:1b:dd:a8:fd:50:a4:dd:5f:f9:02:17:71:9a:
                    d1:eb:9b:32:86:43:98:df:8c:26:14:d4:95:69:e8:
                    38:1e:ba:34:ca:70:48:ff:6e:27:2c:1e:23:a0:e0:
                    25:b2:61:9e:c8:5c:d5:15:8b:28:b5:69:86:c2:82:
                    0b:6f:5a:14:aa:88:35:d2:de:66:49:19:e6:c6:db:
                    24:b1:09:de:cc:bc:a1:a6:e1:6d:76:b9:ec:2f:29:
                    fa:76:f0:02:2e:b9:de:d6:79:b9:dd:d9:3c:8f:c8:
                    1e:14:93:b0:f6:e6:44:49:26:df:24:29:62:0a:05:
                    61:06:a0:e3:b4:e6:2f:6c:64:af:8b:37:0d:f1:1b:
                    12:e2:91:98:fc:fa:e4:2b:3c:a0:03:88:f0:21:8c:
                    f6:df:86:78:ea:1a:48:2e:e1:5d:62:bb:dc:12:33:
                    b1:15:55:9e:64:56:4a:34:1f:8f:4d:48:1f:0a:9f:
                    a7:ae:fa:61:c3:38:9b:43:e3:57:e5:73:ad:85:c5:
                    b0:dc:78:4a:0e:7d:43:c0:0d:25:15:f1:a6:21:11:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0E:AD:3E:FE:87:0E:1A:C5:A6:E1:D7:FE:0C:87:EA:ED:B2:89:51
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33382e302f32342d3234203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:11:e0:f4:4f:04:73:6c:0e:23:ec:03:90:b2:85:2e:a1:79:
         63:d6:60:e9:0b:75:34:0a:1b:bb:db:40:f4:04:64:fc:c6:6c:
         31:54:ee:2f:e1:59:3f:31:a2:c0:f2:3d:e5:67:3a:37:dd:2e:
         a1:0b:1a:3f:8e:1f:7f:4c:db:86:a6:65:44:60:eb:74:74:b4:
         6a:27:0b:b3:31:e6:3e:36:e5:63:55:d1:be:af:49:e0:70:b4:
         72:b8:a7:23:e1:e2:bc:e5:cb:29:a9:98:25:bf:2f:71:90:98:
         8b:06:3e:93:28:86:e2:7b:2a:e1:fd:ba:57:7d:b4:78:51:6f:
         0f:d1:1e:47:db:e8:b4:22:9c:c7:1b:11:aa:e5:4d:55:49:6e:
         4e:64:04:5d:91:bf:03:0d:73:93:22:cd:5f:24:66:04:7c:ed:
         9c:83:5d:16:85:3b:5f:af:7b:57:a3:c5:94:af:4c:43:42:19:
         aa:fc:61:34:da:5a:38:f5:35:64:f6:7d:0f:84:72:93:05:9b:
         3f:1d:d8:a7:fb:3f:59:af:32:8d:e4:03:b3:e8:6c:82:11:c6:
         46:8e:b0:c3:64:67:a5:fc:80:f5:4f:d9:49:1a:4e:7a:f1:94:
         a5:48:fc:28:d8:88:bc:fa:fe:80:05:b7:3f:29:88:d8:49:28:
         36:fb:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:20:19 2026 by rpki-client