This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/3137302e3233392e31362e302f32332d3234203d3e20323636333435.roa
File:                     3137302e3233392e31362e302f32332d3234203d3e20323636333435.roa (raw, json)
Hash identifier:          Wp/D3wzrDMKouKmsm9P8AKPlhFZBO7TNKzecStB3oY0=
Subject key identifier:   6E:C7:4F:B4:63:A4:C7:A5:2B:D9:F9:D1:5B:9C:2F:0E:A9:53:92:8E
Certificate issuer:       /CN=13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249
Certificate serial:       78A1A51BC1CAA12B9EDC4A7C5300FE998AA31A1C
Authority key identifier: 13:E6:CB:1B:50:CD:4A:B3:06:D8:CB:DD:C9:DE:78:0E:35:3B:52:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/3137302e3233392e31362e302f32332d3234203d3e20323636333435.roa
Signing time:             Sun 14 Dec 2025 20:56:45 +0000
ROA not before:           Sun 14 Dec 2025 20:51:45 +0000
ROA not after:            Sun 13 Dec 2026 20:56:45 +0000
asID:                     266345
IP address blocks:        170.239.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249.crl
                          rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 01:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a1:a5:1b:c1:ca:a1:2b:9e:dc:4a:7c:53:00:fe:99:8a:a3:1a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249
        Validity
            Not Before: Dec 14 20:51:45 2025 GMT
            Not After : Dec 13 20:56:45 2026 GMT
        Subject: CN=6EC74FB463A4C7A52BD9F9D15B9C2F0EA953928E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:27:26:fc:57:bc:8b:7d:97:54:16:dd:9c:
                    b7:da:c7:62:7f:83:61:37:49:60:c1:f2:7a:4a:68:
                    5c:d2:0b:d9:a4:81:ec:d0:3e:97:b3:cb:04:8f:14:
                    ae:4a:02:89:aa:18:58:10:5b:70:7c:51:3b:a4:91:
                    ff:af:cf:7c:d9:ef:fa:6a:da:da:a5:5b:8f:f6:aa:
                    80:e9:5a:77:ba:a4:76:36:f1:e7:c9:3c:dc:b0:2f:
                    73:03:b4:8c:00:05:22:26:ef:6c:01:f2:7c:4b:30:
                    8e:a4:11:e1:48:71:d1:fa:0e:1c:7e:46:01:f5:2b:
                    b5:ee:aa:c3:8d:4a:ee:d3:ac:29:84:dd:2c:1b:9b:
                    76:f7:06:e8:48:ec:c3:c9:83:33:a1:8e:0d:61:10:
                    cf:26:78:6a:5a:74:63:4a:cc:13:a0:f3:b6:81:c5:
                    85:b0:97:90:e4:9b:67:ec:06:4f:30:92:2f:c1:83:
                    fb:e4:e2:33:a7:33:db:5e:59:94:8b:84:d5:55:9e:
                    bd:ee:18:a2:4f:8b:9f:b3:29:b4:07:dd:a9:1f:86:
                    85:19:d9:09:93:5f:54:6b:0f:52:ab:64:f0:7f:b3:
                    97:d1:1c:5f:66:b5:fc:95:fa:e0:06:e1:a9:2a:eb:
                    29:85:98:77:4f:ed:06:fa:bd:d2:8d:44:40:eb:39:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C7:4F:B4:63:A4:C7:A5:2B:D9:F9:D1:5B:9C:2F:0E:A9:53:92:8E
            X509v3 Authority Key Identifier:
                keyid:13:E6:CB:1B:50:CD:4A:B3:06:D8:CB:DD:C9:DE:78:0E:35:3B:52:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/3137302e3233392e31362e302f32332d3234203d3e20323636333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:52:40:cb:cf:ef:14:2a:60:dd:51:b7:a7:c1:62:63:9a:
         43:68:47:fd:b6:7a:c7:1e:4a:40:79:fb:e9:14:89:0a:6d:8f:
         dd:69:bf:98:bf:bc:b1:fc:d1:de:13:21:65:48:fe:30:12:25:
         f5:f0:ed:07:52:49:61:73:da:d4:23:2c:24:64:2a:36:c5:24:
         05:da:20:c9:da:1e:02:41:3c:68:3b:3b:01:0a:c3:a3:90:49:
         00:4c:f4:9b:1c:e5:01:99:2a:90:2a:8d:0c:4c:ac:2f:02:74:
         d1:50:4e:8d:b0:6e:ca:45:b0:4b:d0:73:8e:ba:25:1e:30:2e:
         05:34:4a:72:1b:1a:86:10:02:d2:89:b9:92:0e:e1:0d:55:f5:
         4d:fb:d6:78:9e:82:84:7d:2e:20:1a:98:07:9a:72:87:bc:11:
         e6:29:d1:dd:6f:39:d7:67:e1:bd:67:88:78:51:7c:8e:03:17:
         41:95:ed:87:2c:d3:7c:3e:0c:a1:19:47:c7:59:70:8e:c2:dc:
         e0:c8:2f:22:b1:af:fb:e8:14:4b:49:e5:47:ca:f7:9f:d7:c9:
         7e:b3:f1:bf:4f:e2:c2:91:87:48:b7:51:bb:60:c4:6d:c8:00:
         16:1c:ae:32:69:57:ef:88:1f:50:c2:06:a1:af:17:67:0d:b3:
         61:55:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:05:24 2025 by rpki-client