This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/3137302e37382e3137322e302f32322d3234203d3e20323636323938.roa
File:                     3137302e37382e3137322e302f32322d3234203d3e20323636323938.roa (raw, json)
Hash identifier:          okwdcryUzcO/1qhh0V46izFAeoY+dqkOxK9ae7wuOqg=
Subject key identifier:   B0:3E:3B:70:50:FD:E5:DF:B8:85:D8:02:CE:BA:17:54:3D:F2:7D:EF
Certificate issuer:       /CN=CDCA5D752465C82F87C02572646B39237CA981A8
Certificate serial:       48140C14AD267B29CFBB1E94A0CA68351EC18906
Authority key identifier: CD:CA:5D:75:24:65:C8:2F:87:C0:25:72:64:6B:39:23:7C:A9:81:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/3137302e37382e3137322e302f32322d3234203d3e20323636323938.roa
Signing time:             Sat 22 Nov 2025 12:49:39 +0000
ROA not before:           Sat 22 Nov 2025 12:44:39 +0000
ROA not after:            Sat 21 Nov 2026 12:49:39 +0000
asID:                     266298
IP address blocks:        170.78.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.crl
                          rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 18:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:14:0c:14:ad:26:7b:29:cf:bb:1e:94:a0:ca:68:35:1e:c1:89:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCA5D752465C82F87C02572646B39237CA981A8
        Validity
            Not Before: Nov 22 12:44:39 2025 GMT
            Not After : Nov 21 12:49:39 2026 GMT
        Subject: CN=B03E3B7050FDE5DFB885D802CEBA17543DF27DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:a2:f7:e4:ec:a0:91:07:cd:49:1a:a4:a7:
                    6a:7b:28:e6:4c:ea:bf:0a:aa:18:52:24:1f:41:a9:
                    8f:8e:c3:d7:fe:72:61:33:b7:f2:54:5e:bf:21:9e:
                    c4:bb:e2:1d:1c:e9:a1:37:9e:a2:93:a0:f3:94:02:
                    8e:68:8b:29:b4:3b:57:7f:a6:fe:df:ac:1b:cc:6e:
                    c4:4c:fc:76:04:eb:d0:8f:47:02:08:be:34:ea:5a:
                    06:7d:e8:5e:64:c9:a3:da:92:a4:c8:d8:05:8e:2d:
                    a3:32:06:d3:c0:5e:0b:56:54:5d:42:e8:15:49:dd:
                    2d:55:a1:d8:f2:67:9e:d7:dd:43:d4:12:a7:5b:56:
                    c5:b8:4f:35:06:ac:7e:5a:f0:ee:c1:2b:01:30:18:
                    3a:34:c0:e3:ad:30:24:d5:2e:69:93:09:51:da:4b:
                    41:64:b4:5d:7f:14:f0:7a:2a:41:1b:36:90:29:f2:
                    24:38:bc:ed:82:52:ca:67:ac:cf:b4:04:ca:70:84:
                    a8:b4:ba:cb:ca:55:a6:aa:97:ca:3f:b5:8a:dd:a2:
                    94:67:ce:80:e3:4c:49:f1:b7:7a:e7:1f:f1:fa:ae:
                    f9:bf:56:bb:b7:c7:85:4c:b4:34:a0:10:a0:d3:2f:
                    1c:52:a6:86:a1:38:16:36:1c:eb:2c:c5:39:17:a9:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3E:3B:70:50:FD:E5:DF:B8:85:D8:02:CE:BA:17:54:3D:F2:7D:EF
            X509v3 Authority Key Identifier:
                keyid:CD:CA:5D:75:24:65:C8:2F:87:C0:25:72:64:6B:39:23:7C:A9:81:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/3137302e37382e3137322e302f32322d3234203d3e20323636323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:ee:c3:5c:5e:4b:be:55:4f:37:35:f7:31:02:29:cd:3b:ae:
         9c:4a:86:71:ef:43:26:d2:ad:46:ed:f5:29:38:43:ee:07:b1:
         86:eb:d7:c1:02:48:db:45:b0:e0:49:df:fa:f2:5e:ca:ac:b1:
         2f:a0:6b:47:e2:2d:63:5a:92:8a:b0:0a:65:b2:cc:69:38:f4:
         02:8b:d2:f0:bd:6d:d0:72:c4:58:d0:62:24:2f:1e:6e:a3:be:
         c4:56:c1:40:75:1d:dd:df:42:de:11:00:c2:d7:aa:e9:5b:b0:
         60:40:ea:38:1b:ca:f4:01:0c:5b:df:cc:da:73:11:c8:d9:d2:
         f3:9b:d2:37:4b:d6:0a:4b:0f:86:c4:96:83:13:3e:b3:ac:d0:
         40:85:90:e1:2d:e8:72:db:79:28:ee:32:ac:36:7f:09:19:75:
         96:34:1a:b9:6d:55:a6:9a:0b:44:1a:10:56:72:90:b8:22:0a:
         5d:c5:13:eb:cc:8b:cb:0f:7b:b1:c3:33:6b:86:09:ab:c5:dd:
         a1:15:40:1f:df:96:6a:9e:14:b5:90:5a:07:0d:a7:91:87:20:
         72:e7:ec:46:8b:b4:dd:a0:c7:a2:d9:39:ab:f6:b2:7f:77:44:
         14:0e:f7:e9:4b:76:c7:6a:ec:bc:fc:5a:31:6f:04:c6:d0:a8:
         e8:41:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:36 2025 by rpki-client