This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/0/3137302e38312e3130342e302f32322d3332203d3e20323636343032.roa
File:                     3137302e38312e3130342e302f32322d3332203d3e20323636343032.roa (raw, json)
Hash identifier:          S8iWOm7l5ubge8p5W5ALhTXNyHPVNQYlxh4OtIJXEAo=
Subject key identifier:   3A:E3:92:91:8C:78:BB:9C:41:AE:B7:5A:70:55:B5:2C:0B:85:15:5A
Certificate issuer:       /CN=7996B2404A096611A44A9206544575CF822FF9D1
Certificate serial:       3288A3DA35BC3F7FC8FB43C16B4B59F67FF85680
Authority key identifier: 79:96:B2:40:4A:09:66:11:A4:4A:92:06:54:45:75:CF:82:2F:F9:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7996B2404A096611A44A9206544575CF822FF9D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/0/3137302e38312e3130342e302f32322d3332203d3e20323636343032.roa
Signing time:             Tue 16 Dec 2025 19:38:04 +0000
ROA not before:           Tue 16 Dec 2025 19:33:04 +0000
ROA not after:            Tue 15 Dec 2026 19:38:04 +0000
asID:                     266402
IP address blocks:        170.81.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/0/7996B2404A096611A44A9206544575CF822FF9D1.crl
                          rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/0/7996B2404A096611A44A9206544575CF822FF9D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7996B2404A096611A44A9206544575CF822FF9D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 08:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:88:a3:da:35:bc:3f:7f:c8:fb:43:c1:6b:4b:59:f6:7f:f8:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7996B2404A096611A44A9206544575CF822FF9D1
        Validity
            Not Before: Dec 16 19:33:04 2025 GMT
            Not After : Dec 15 19:38:04 2026 GMT
        Subject: CN=3AE392918C78BB9C41AEB75A7055B52C0B85155A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1e:dc:0b:60:ff:e2:04:2d:e6:76:73:87:e0:
                    85:af:ac:e8:a1:30:7e:2d:9d:e3:08:14:6c:41:e8:
                    4d:b6:11:59:76:bf:fb:08:b2:7f:09:b8:9e:dd:65:
                    9e:57:bf:86:c5:0b:3d:b6:dc:8a:6e:c0:0a:40:e5:
                    e2:c7:77:de:2e:b4:3f:f0:87:06:6e:f8:94:f2:2c:
                    68:7e:be:f4:1b:e1:67:66:c2:82:cf:76:41:eb:fd:
                    32:83:73:83:e9:4c:d7:b7:10:7c:f1:08:4b:73:3a:
                    34:37:0a:fd:53:76:91:96:fb:c7:28:73:69:ac:75:
                    7f:27:80:ed:00:49:f4:a4:db:cf:d3:9e:fe:c5:f0:
                    e3:f1:af:8b:c2:f6:a4:1b:b0:0b:d3:9e:76:aa:1c:
                    04:92:55:a1:91:7c:6f:44:49:8d:e5:f9:df:64:f8:
                    49:77:ee:37:0c:3b:82:e1:54:5b:04:d1:41:4b:c4:
                    e2:7a:3d:bc:db:8f:fb:ed:4a:4e:e5:b0:8d:ec:a9:
                    d9:14:32:7e:09:63:8a:ae:6b:cb:7e:07:1c:de:a9:
                    5a:29:d1:b7:42:f9:83:ba:42:d4:8f:8a:e8:d4:62:
                    4f:62:16:1e:5d:98:93:f8:d8:75:93:be:e9:60:60:
                    13:0a:8b:e2:69:b0:88:c5:a0:cf:b4:65:2a:fc:d3:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E3:92:91:8C:78:BB:9C:41:AE:B7:5A:70:55:B5:2C:0B:85:15:5A
            X509v3 Authority Key Identifier:
                keyid:79:96:B2:40:4A:09:66:11:A4:4A:92:06:54:45:75:CF:82:2F:F9:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/0/7996B2404A096611A44A9206544575CF822FF9D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7996B2404A096611A44A9206544575CF822FF9D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/0/3137302e38312e3130342e302f32322d3332203d3e20323636343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:d0:75:ec:1f:f4:50:ca:65:d3:e3:d8:c1:55:f3:ae:46:
         14:fc:b9:89:d6:fe:18:6d:7c:56:fa:4e:e1:69:eb:28:b8:f8:
         cc:c6:b2:7d:c1:8b:c4:f4:dd:93:22:28:d8:64:75:90:c7:c5:
         e8:95:85:17:b2:9e:c1:ac:85:99:c1:15:05:d8:8b:db:ed:0b:
         77:30:73:17:bc:11:9c:0e:3c:74:c1:04:69:16:2c:50:9e:3d:
         d3:71:59:7f:d8:85:f8:10:d2:f9:ed:7c:93:89:66:a7:6b:7f:
         de:4f:08:16:0e:16:22:b2:53:e0:30:b8:16:4c:b8:55:54:f8:
         f4:db:d2:78:89:4b:a1:2d:5c:89:5e:7a:51:e8:e3:40:04:c6:
         aa:b4:e2:bb:b8:f7:2a:1a:56:44:65:3b:ff:ef:cb:a4:8f:4d:
         21:80:df:ad:8c:a4:5b:a4:18:eb:49:49:84:19:3b:2f:20:70:
         d2:04:f9:ff:2c:b7:e5:af:f3:4b:63:f6:e2:56:b8:d4:fa:ac:
         42:b9:d2:58:7b:93:c9:2b:d2:a5:14:73:a7:06:5e:6e:f0:b2:
         d8:98:e7:ae:59:bd:20:c5:85:59:2a:bb:59:5c:c3:89:56:4c:
         65:d0:df:8b:7f:cd:d1:9a:1b:52:d9:5a:8b:ee:4d:32:fc:d2:
         99:a8:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:50:21 2025 by rpki-client