This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
File:                     3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa (raw, json)
Hash identifier:          Y6wk+trztum8Qg3Zmuogjj77enSUgw7dU+kmbVbvlBY=
Subject key identifier:   95:0E:D0:3C:27:8B:0F:76:BA:7B:47:0F:0D:D0:A2:0D:64:89:7A:89
Certificate issuer:       /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial:       1DE07F7CAC99337A5D93AE2D5436B5355037E8FF
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
Signing time:             Wed 10 Dec 2025 03:07:33 +0000
ROA not before:           Wed 10 Dec 2025 03:02:33 +0000
ROA not after:            Wed 09 Dec 2026 03:07:33 +0000
asID:                     266020
IP address blocks:        170.245.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e0:7f:7c:ac:99:33:7a:5d:93:ae:2d:54:36:b5:35:50:37:e8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
        Validity
            Not Before: Dec 10 03:02:33 2025 GMT
            Not After : Dec  9 03:07:33 2026 GMT
        Subject: CN=950ED03C278B0F76BA7B470F0DD0A20D64897A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:93:e5:e5:f5:db:3a:e0:02:cc:10:77:b7:c7:
                    9a:8d:80:66:14:fe:ce:ba:27:fe:fd:52:7b:24:01:
                    00:fc:83:9e:cc:1c:6f:68:bc:68:f6:2f:87:08:9a:
                    93:b3:51:07:98:38:cd:80:5e:c5:e0:08:dd:b8:51:
                    bd:2f:4b:70:59:8f:20:2b:81:ab:7a:f5:90:d2:97:
                    19:6f:7a:58:f3:20:65:03:c8:76:f1:1c:ab:f8:b2:
                    9b:ba:09:e2:c1:21:64:67:cd:78:13:a0:5d:2e:4a:
                    d2:92:ff:e4:c0:7e:fd:7d:16:32:ae:38:7b:66:37:
                    29:c4:83:30:be:1f:ae:73:8f:33:ec:4b:43:2a:25:
                    d5:5c:49:9b:29:e6:aa:7e:c8:df:18:4d:4f:01:6e:
                    4f:a4:20:91:a0:f7:ee:98:99:e7:bd:0a:ec:d8:ee:
                    ec:52:63:1f:7c:bf:fe:55:5a:37:9c:69:10:8f:ef:
                    c8:d5:24:75:3d:bc:ae:5f:32:67:34:3a:83:47:e3:
                    2e:70:bc:2b:c0:61:b8:d5:7c:df:40:0f:f0:38:73:
                    22:dd:3d:e0:f0:a5:b8:ff:f4:44:3a:ed:39:f2:4f:
                    5c:20:ae:43:1d:39:1d:a0:1f:8f:62:59:c3:01:83:
                    51:6f:11:d7:3c:63:62:48:a9:c7:b0:d9:5e:28:f8:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0E:D0:3C:27:8B:0F:76:BA:7B:47:0F:0D:D0:A2:0D:64:89:7A:89
            X509v3 Authority Key Identifier:
                keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:2e:7d:85:16:bd:6c:66:0e:43:01:66:46:e2:33:50:a6:de:
         6a:6e:f4:b2:12:92:dc:8c:f5:6c:70:fc:18:e2:3e:0a:46:67:
         f0:b9:fd:d1:6b:cb:14:a3:46:c3:01:51:2d:46:f1:77:20:48:
         f6:f4:dc:17:9b:47:a1:98:a0:e2:35:23:8f:af:37:85:2d:11:
         55:21:1f:79:3e:b3:1e:3c:d6:a7:b8:d3:42:a9:d7:ce:bd:09:
         69:53:f7:b2:a0:22:6b:9e:e3:c4:fa:c3:ec:41:11:87:2a:a3:
         a2:bc:4c:31:82:fa:f5:fb:e8:f1:b8:ba:89:90:4f:ba:dd:fb:
         82:3a:00:04:19:47:ce:70:ea:df:1b:79:b5:57:83:92:16:92:
         cc:bd:16:5a:d9:49:35:ae:53:b5:0d:05:92:d4:cc:58:cd:f2:
         63:b1:b5:67:68:f0:a8:14:0e:62:a1:1b:96:86:a3:49:f2:43:
         1d:2b:6a:a9:fb:9a:72:d4:8d:38:08:e4:20:2e:f5:92:d0:93:
         b8:99:d0:61:cf:1f:e4:ba:54:49:c0:18:da:bc:e7:6f:79:87:
         1f:bf:e0:c0:a4:4e:84:bc:c3:a3:63:94:9a:df:b3:1b:53:46:
         c7:c3:b3:4c:c8:89:96:a3:01:79:67:ff:39:c4:8c:04:5e:96:
         d2:68:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:53:51 2025 by rpki-client