This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/3137302e3234362e38302e302f32322d3332203d3e203532363836.roa
File:                     3137302e3234362e38302e302f32322d3332203d3e203532363836.roa (raw, json)
Hash identifier:          J0wP6PvtYlivagzLfBlUWzN0PAdsANRepCTnT/0fkuk=
Subject key identifier:   0B:F7:3A:D7:E7:7D:45:FD:7D:39:71:91:4A:B9:61:BF:C6:D1:DC:F0
Certificate issuer:       /CN=58C5F53743423A04F872235EDB5D2DA1789CC7AA
Certificate serial:       4A6EC34E7B354AEF50C8B6D5C48F21694BC4161F
Authority key identifier: 58:C5:F5:37:43:42:3A:04:F8:72:23:5E:DB:5D:2D:A1:78:9C:C7:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C5F53743423A04F872235EDB5D2DA1789CC7AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/3137302e3234362e38302e302f32322d3332203d3e203532363836.roa
Signing time:             Fri 28 Nov 2025 14:30:34 +0000
ROA not before:           Fri 28 Nov 2025 14:25:34 +0000
ROA not after:            Fri 27 Nov 2026 14:30:34 +0000
asID:                     52686
IP address blocks:        170.246.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/58C5F53743423A04F872235EDB5D2DA1789CC7AA.crl
                          rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/58C5F53743423A04F872235EDB5D2DA1789CC7AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C5F53743423A04F872235EDB5D2DA1789CC7AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 21:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6e:c3:4e:7b:35:4a:ef:50:c8:b6:d5:c4:8f:21:69:4b:c4:16:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C5F53743423A04F872235EDB5D2DA1789CC7AA
        Validity
            Not Before: Nov 28 14:25:34 2025 GMT
            Not After : Nov 27 14:30:34 2026 GMT
        Subject: CN=0BF73AD7E77D45FD7D3971914AB961BFC6D1DCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:d0:e4:7b:e0:e9:4c:60:1a:5e:0e:ef:9a:
                    f2:fd:90:a1:91:41:5f:cd:03:ea:43:64:92:56:dd:
                    13:c2:04:7b:9b:24:09:90:1a:0d:0e:a8:94:89:61:
                    df:0a:80:ae:62:b0:0e:6e:68:88:1f:c3:fc:8f:69:
                    87:28:0c:81:bf:3b:26:48:0d:04:e7:ba:9b:e4:27:
                    33:f2:23:69:71:1c:55:2d:f2:24:bf:f9:00:71:7e:
                    ad:44:4f:09:b5:93:58:71:04:c3:e6:3d:c1:a7:0c:
                    45:cf:16:59:aa:54:23:ba:76:c5:9f:2c:4e:2a:57:
                    a7:5d:60:90:86:74:cf:2e:30:38:92:76:ee:dd:5e:
                    2a:c3:50:0a:7c:26:11:69:21:2a:42:d6:89:3b:a4:
                    e5:a4:54:cd:ff:83:9e:72:2d:34:23:91:9a:59:b2:
                    2b:c6:b0:8c:a1:a4:b5:d1:8e:84:66:cf:98:ab:c2:
                    33:86:3b:aa:83:14:99:92:3f:30:a3:fe:a0:f5:ea:
                    a5:ce:7b:b3:df:60:9c:f8:4f:0b:b9:ac:85:c3:7e:
                    fc:dc:b4:b7:f4:d9:1c:3d:d4:92:3e:c2:ff:ab:f2:
                    b2:ba:51:34:6a:60:50:2a:30:6a:03:45:22:18:2d:
                    66:b7:bf:f6:d0:41:6e:cc:cc:cf:f2:f6:20:f9:91:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F7:3A:D7:E7:7D:45:FD:7D:39:71:91:4A:B9:61:BF:C6:D1:DC:F0
            X509v3 Authority Key Identifier:
                keyid:58:C5:F5:37:43:42:3A:04:F8:72:23:5E:DB:5D:2D:A1:78:9C:C7:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/58C5F53743423A04F872235EDB5D2DA1789CC7AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C5F53743423A04F872235EDB5D2DA1789CC7AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/3137302e3234362e38302e302f32322d3332203d3e203532363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:5c:c8:b6:6c:ee:bb:6c:a6:66:52:85:6f:85:40:be:f5:cf:
         fb:6a:43:b3:3c:14:6e:5e:a0:80:dd:62:ac:72:14:1f:8d:13:
         84:3a:ea:15:53:55:53:b6:4b:fa:80:8f:6e:0c:53:0c:68:82:
         35:12:63:57:d7:f6:79:d3:cd:c3:24:d4:eb:ae:d5:2e:e3:55:
         31:9d:71:eb:7b:a4:df:45:6b:c0:1d:c9:ab:f0:71:95:5e:92:
         12:c2:9c:f6:9e:58:93:79:8f:c7:31:55:f9:1c:0c:ab:83:9e:
         91:3d:18:5a:ef:ba:c6:68:b9:c9:ac:10:5b:a0:05:64:44:eb:
         16:0d:21:cf:fd:c0:93:83:43:13:3c:ac:76:f4:da:77:a2:be:
         eb:b2:9d:10:ae:fd:9d:78:6d:8e:61:c7:c8:10:bc:fa:db:18:
         89:61:08:d5:00:74:e1:54:5e:9b:98:8e:0c:9d:cf:58:85:07:
         29:66:5c:36:57:4d:dd:bf:46:bb:08:cf:e5:82:ab:8c:5d:69:
         93:6b:73:4d:a5:8a:42:8a:36:9a:ac:29:e5:fa:4c:75:a6:f8:
         f8:f0:09:52:2d:6c:8a:b5:2c:9c:29:67:ef:c3:79:45:23:28:
         3e:35:90:36:dd:48:4a:21:09:18:03:10:41:77:30:92:14:38:
         46:e9:f3:3b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUSm7DTns1Su9QyLbVxI8haUvEFh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThDNUY1Mzc0MzQyM0EwNEY4NzIyMzVFREI1RDJEQTE3
ODlDQzdBQTAeFw0yNTExMjgxNDI1MzRaFw0yNjExMjcxNDMwMzRaMDMxMTAvBgNV
BAMTKDBCRjczQUQ3RTc3RDQ1RkQ3RDM5NzE5MTRBQjk2MUJGQzZEMURDRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRtDke+DpTGAaXg7vmvL9kKGR
QV/NA+pDZJJW3RPCBHubJAmQGg0OqJSJYd8KgK5isA5uaIgfw/yPaYcoDIG/OyZI
DQTnupvkJzPyI2lxHFUt8iS/+QBxfq1ETwm1k1hxBMPmPcGnDEXPFlmqVCO6dsWf
LE4qV6ddYJCGdM8uMDiSdu7dXirDUAp8JhFpISpC1ok7pOWkVM3/g55yLTQjkZpZ
sivGsIyhpLXRjoRmz5irwjOGO6qDFJmSPzCj/qD16qXOe7PfYJz4Twu5rIXDfvzc
tLf02Rw91JI+wv+r8rK6UTRqYFAqMGoDRSIYLWa3v/bQQW7MzM/y9iD5ke9fAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUC/c61+d9Rf19OXGRSrlhv8bR3PAwHwYDVR0j
BBgwFoAUWMX1N0NCOgT4ciNe210toXicx6owDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Wbzl4OFZlR2RuUXZ3VXRSdm12V1Vkc0trOFZaYXFBY2pRQk04UFZNSFA3
LzAvNThDNUY1Mzc0MzQyM0EwNEY4NzIyMzVFREI1RDJEQTE3ODlDQzdBQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81OEM1RjUzNzQzNDIzQTA0Rjg3
MjIzNUVEQjVEMkRBMTc4OUNDN0FBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9W
bzl4OFZlR2RuUXZ3VXRSdm12V1Vkc0trOFZaYXFBY2pRQk04UFZNSFA3LzAvMzEz
NzMwMmUzMjM0MzYyZTM4MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMyMzYz
ODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCqvZQMA0GCSqGSIb3DQEBCwUAA4IBAQBiXMi2bO67bKZm
UoVvhUC+9c/7akOzPBRuXqCA3WKschQfjROEOuoVU1VTtkv6gI9uDFMMaII1EmNX
1/Z5083DJNTrrtUu41UxnXHre6TfRWvAHcmr8HGVXpISwpz2nliTeY/HMVX5HAyr
g56RPRha77rGaLnJrBBboAVkROsWDSHP/cCTg0MTPKx29Np3or7rsp0Qrv2deG2O
YcfIELz62xiJYQjVAHThVF6bmI4Mnc9YhQcpZlw2V03dv0a7CM/lgquMXWmTa3NN
pYpCijaarCnl+kx1pvj48AlSLWyKtSycKWfvw3lFIyg+NZA23UhKIQkYAxBBdzCS
FDhG6fM7
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:21:09 2025 by rpki-client