This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33382e302f32342d3234203d3e20323636333839.roa
File:                     3137302e38312e33382e302f32342d3234203d3e20323636333839.roa (raw, json)
Hash identifier:          xkbge+hFrye1QeiHxNcqz/ETRUULJI1ScbTE2yPSlnY=
Subject key identifier:   8C:B4:E5:10:AC:E9:85:EE:2B:A8:00:2E:82:A6:4D:46:56:BD:8A:AF
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       152FF8FC10751B59CA51C13E7A16C65594D30ED7
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33382e302f32342d3234203d3e20323636333839.roa
Signing time:             Wed 12 Nov 2025 01:01:57 +0000
ROA not before:           Wed 12 Nov 2025 00:56:57 +0000
ROA not after:            Wed 11 Nov 2026 01:01:57 +0000
asID:                     266389
IP address blocks:        170.81.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2f:f8:fc:10:75:1b:59:ca:51:c1:3e:7a:16:c6:55:94:d3:0e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Nov 12 00:56:57 2025 GMT
            Not After : Nov 11 01:01:57 2026 GMT
        Subject: CN=8CB4E510ACE985EE2BA8002E82A64D4656BD8AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:af:c5:89:dd:a6:e2:64:0b:c2:2e:2c:e0:
                    01:4d:39:dd:93:04:fe:ec:26:41:6e:9e:53:57:6b:
                    44:8b:20:ad:96:90:7a:4b:df:9a:86:b4:24:28:01:
                    4e:8b:81:7c:16:d2:90:a3:87:39:81:36:6d:a3:e9:
                    bc:57:bd:2f:99:31:b0:fb:66:ad:a7:7b:2b:85:45:
                    1c:25:e2:7e:d8:29:53:33:30:5a:5a:36:b2:f1:f2:
                    d6:5f:01:3b:77:b2:51:52:1b:d4:25:bb:99:a2:bd:
                    dd:9c:59:e0:7c:7a:81:c4:8e:3c:62:3d:33:a6:9a:
                    54:66:1b:3a:a8:7c:32:b5:ae:56:3e:60:15:bc:a5:
                    27:71:89:8f:d6:d2:25:c0:88:ee:0c:55:ea:0d:1b:
                    70:b6:7e:7b:17:23:5d:1e:41:84:1b:55:9f:e2:77:
                    b1:7d:7e:84:42:87:4f:3e:c4:fd:4a:60:98:09:e6:
                    2e:14:d2:54:30:80:55:28:1d:cb:03:c0:97:1d:4c:
                    47:2d:d0:1d:32:3e:65:14:06:5a:19:a0:7d:51:20:
                    b7:fc:12:36:ce:c0:05:bf:a4:51:62:11:e2:6a:ca:
                    b5:71:cc:3d:5d:0b:db:79:bd:07:d0:84:d7:b0:7c:
                    c8:58:07:e9:5f:33:29:3d:7f:24:04:80:da:7f:8b:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B4:E5:10:AC:E9:85:EE:2B:A8:00:2E:82:A6:4D:46:56:BD:8A:AF
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3137302e38312e33382e302f32342d3234203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ed:5b:62:fb:1e:15:46:16:23:25:f5:0e:60:4e:b7:22:b2:
         28:92:ae:de:01:b0:ee:28:62:f2:24:5c:9e:0d:ab:00:d5:c8:
         13:d7:fa:d2:dc:31:fb:81:0d:cb:19:4e:92:48:f7:ee:17:15:
         f8:14:8e:26:cc:bc:1d:1a:4c:1b:8e:ed:0e:0f:3f:4f:d8:5a:
         e6:00:30:76:b7:25:07:42:2e:1d:f7:a5:60:29:8d:40:2e:da:
         0b:5d:2d:96:2c:66:bf:f1:9f:4d:83:72:8f:a6:c0:2e:94:a5:
         99:e3:2f:86:59:b1:1d:cf:66:37:ec:63:2d:c2:46:76:0a:e6:
         6d:bf:05:f7:2b:4c:a8:40:2f:eb:17:d8:89:c8:69:32:bb:79:
         72:51:04:54:bd:79:99:4f:fb:fb:51:e7:c0:46:4a:92:bb:2c:
         61:14:dc:dc:5a:45:a3:bd:7c:21:f8:89:02:59:ed:4a:4e:06:
         34:92:a8:bd:7f:3b:d5:45:0c:bb:a3:b9:41:ee:a6:56:f4:70:
         bd:b2:08:86:13:5f:e2:8c:50:c6:57:b6:ec:b3:d8:72:df:95:
         74:58:05:9d:6b:11:6b:29:7c:a4:ce:f9:c4:5a:be:70:3e:47:
         7d:6f:21:be:32:98:1e:21:4c:4b:73:c7:b1:aa:d0:14:39:87:
         ec:f0:f5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:19 2025 by rpki-client