This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/3137302e38332e3135322e302f32322d3234203d3e20323636343730.roa
File:                     3137302e38332e3135322e302f32322d3234203d3e20323636343730.roa (raw, json)
Hash identifier:          i0USGkEhnteRkbYDUpPbPP625DLoWZooFxlSs/z2Hk4=
Subject key identifier:   44:3C:50:BC:55:B7:9C:4A:31:1A:C9:54:FD:3F:5D:CE:D7:7E:06:5A
Certificate issuer:       /CN=79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F
Certificate serial:       672E8CB6B0CE21C4C8B5A329BDDE0E60506DD6B0
Authority key identifier: 79:E9:5F:56:49:BE:7D:AF:A9:B1:71:D4:53:E6:D4:F7:7F:90:FC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/3137302e38332e3135322e302f32322d3234203d3e20323636343730.roa
Signing time:             Thu 06 Nov 2025 12:40:32 +0000
ROA not before:           Thu 06 Nov 2025 12:35:32 +0000
ROA not after:            Thu 05 Nov 2026 12:40:32 +0000
asID:                     266470
IP address blocks:        170.83.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.crl
                          rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 19:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2e:8c:b6:b0:ce:21:c4:c8:b5:a3:29:bd:de:0e:60:50:6d:d6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F
        Validity
            Not Before: Nov  6 12:35:32 2025 GMT
            Not After : Nov  5 12:40:32 2026 GMT
        Subject: CN=443C50BC55B79C4A311AC954FD3F5DCED77E065A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:43:49:f5:1f:f4:2d:20:10:b0:e2:b2:0a:
                    b4:35:48:b3:d2:b1:71:22:a0:5d:c9:53:44:77:4f:
                    24:bb:23:b8:ab:3f:1b:1c:6d:26:16:f1:32:ba:6a:
                    8f:74:a2:08:7f:d5:5b:3c:28:c8:54:b0:79:ca:8f:
                    19:ad:c3:a1:e1:a5:b1:07:e5:54:65:c6:95:fc:e3:
                    c5:1d:f0:49:89:5a:a9:df:a7:13:9a:c9:c8:33:aa:
                    e2:6d:20:bf:28:22:af:f1:3a:e1:99:9c:35:fe:83:
                    b4:46:ae:7e:ab:4b:bb:7b:2f:20:d1:da:a5:03:90:
                    90:5c:49:b9:8d:56:f0:62:ff:9a:b9:93:0f:59:ec:
                    00:29:91:b2:ec:65:af:d1:32:15:de:c2:54:5f:6b:
                    fc:c7:b2:97:b3:08:bc:09:d5:bf:a0:cf:f7:a5:a2:
                    47:7e:fb:7d:03:50:d3:a0:93:e5:2d:ad:27:d8:5b:
                    3a:8c:aa:c0:56:d1:9c:0d:a0:de:af:0a:90:18:55:
                    8a:b0:5f:24:d4:d0:29:2a:f7:67:84:b9:58:69:8e:
                    d1:a7:ee:94:b0:c0:bd:5a:dd:7f:e3:42:a4:cc:33:
                    98:a4:9a:fc:52:63:31:6a:99:fb:56:e5:65:0b:2a:
                    3f:28:fb:ea:05:92:d8:f8:40:e2:ad:c5:a3:c7:47:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3C:50:BC:55:B7:9C:4A:31:1A:C9:54:FD:3F:5D:CE:D7:7E:06:5A
            X509v3 Authority Key Identifier:
                keyid:79:E9:5F:56:49:BE:7D:AF:A9:B1:71:D4:53:E6:D4:F7:7F:90:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/3137302e38332e3135322e302f32322d3234203d3e20323636343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:ec:2a:79:af:72:03:60:45:6e:8f:9d:17:ae:62:5d:25:69:
         71:6a:48:cc:76:09:1f:fb:3b:c4:d0:55:e3:2e:45:30:5f:7c:
         f1:11:db:88:ad:5c:c7:de:d4:eb:43:3e:ac:ea:20:44:a8:e6:
         16:bb:ee:24:14:d8:ed:46:25:84:98:d8:1f:5e:b8:f4:2c:90:
         63:eb:e2:61:e2:36:4e:51:15:61:b1:29:b6:5b:89:26:b6:53:
         48:3e:88:7b:78:c1:3a:89:7f:51:31:8e:f9:1f:16:7d:2c:bb:
         bb:a8:a9:93:9b:ae:d2:af:ca:c7:a9:45:fa:c7:8b:24:89:53:
         a7:a0:42:e0:3f:22:4b:58:ad:d1:80:3d:40:ab:ec:ad:d9:de:
         80:44:8f:6d:6f:86:92:3e:6b:16:df:45:a5:2e:ec:59:b5:5f:
         53:5b:ef:48:ce:aa:0e:a2:ef:c4:07:d0:4e:aa:01:63:b1:71:
         63:f2:49:ab:30:93:5e:1c:6b:28:00:b5:65:f6:cb:f7:94:e9:
         d2:4a:01:24:aa:35:94:6e:37:b9:c3:ba:68:a7:1c:8e:bd:d8:
         46:51:1b:4b:b2:fa:0c:61:26:c2:f1:08:c3:13:e9:2b:a1:56:
         9d:1b:30:98:a2:a2:9a:84:60:98:f7:c2:b5:eb:12:8c:61:84:
         2b:ce:9a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:18:42 2025 by rpki-client