This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3232203d3e20323633363334.roa
File:                     3137302e38312e34382e302f32322d3232203d3e20323633363334.roa (raw, json)
Hash identifier:          9/dL5TN1AIGXRtnaOZb4p3PR6fBOiVc/c+AHmG7J6Q8=
Subject key identifier:   A2:B7:B2:82:05:0C:CD:24:A4:F8:9A:D2:C5:96:BE:91:47:80:52:72
Certificate issuer:       /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Certificate serial:       4E67B22CD5C7B5ED0CFBFE2767A4C15CCC69B6A6
Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3232203d3e20323633363334.roa
Signing time:             Mon 22 Dec 2025 18:34:40 +0000
ROA not before:           Mon 22 Dec 2025 18:29:40 +0000
ROA not after:            Mon 21 Dec 2026 18:34:40 +0000
asID:                     263634
IP address blocks:        170.81.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl
                          rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 18:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:67:b2:2c:d5:c7:b5:ed:0c:fb:fe:27:67:a4:c1:5c:cc:69:b6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
        Validity
            Not Before: Dec 22 18:29:40 2025 GMT
            Not After : Dec 21 18:34:40 2026 GMT
        Subject: CN=A2B7B282050CCD24A4F89AD2C596BE9147805272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:44:29:09:c9:e9:e3:15:47:66:a0:17:46:
                    66:1c:b2:5c:0b:7b:6b:15:31:3f:b7:83:d2:d1:1a:
                    9e:87:1e:0f:8a:ef:33:c2:61:f2:11:d4:78:f7:63:
                    82:0c:20:51:d3:f1:47:ff:78:dc:8a:13:e6:27:39:
                    da:d5:9e:b6:28:3a:b4:db:d7:33:74:ba:b7:0a:ec:
                    7e:41:1f:dd:eb:d3:7f:a8:9e:35:bb:a6:6f:05:e8:
                    01:14:2f:15:f3:bf:d1:c2:87:ec:32:cb:1d:eb:1d:
                    6c:d5:12:e2:0e:92:77:43:d1:33:a2:be:bf:b3:56:
                    1e:6d:9c:25:b1:6b:a0:ea:4f:17:bc:74:32:68:0f:
                    20:25:24:41:b9:03:53:79:42:88:0b:00:97:28:91:
                    f1:0f:dc:5a:a5:d9:89:da:e2:e9:4a:89:55:f1:2e:
                    65:bc:34:df:99:1d:95:13:25:aa:67:12:6f:29:37:
                    d4:be:69:af:a7:52:2b:a0:fd:1e:89:a6:bc:f2:65:
                    b8:0e:65:ec:79:b9:5e:89:5b:34:1c:dc:96:46:f0:
                    ec:dd:de:6b:eb:db:37:44:a5:8a:06:5e:e7:8f:7f:
                    52:c0:4b:45:93:cc:62:51:12:73:2d:b4:31:5b:5a:
                    0c:c3:97:15:8b:79:19:ed:93:57:2d:01:a9:36:fb:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B7:B2:82:05:0C:CD:24:A4:F8:9A:D2:C5:96:BE:91:47:80:52:72
            X509v3 Authority Key Identifier:
                keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3232203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:9b:28:2a:25:ee:cb:07:77:57:55:05:cd:80:44:b2:6a:e3:
         c4:31:67:38:b7:b7:58:fa:35:5c:7c:3c:0a:4e:23:69:e0:eb:
         27:35:37:74:75:80:f3:d1:44:80:8b:fb:68:1b:2d:1d:67:9a:
         de:7e:5a:d3:02:9f:99:56:be:19:61:65:63:cd:1d:32:41:e0:
         bf:8d:fb:63:38:9c:12:99:be:fc:7b:8d:70:dd:63:d2:86:ef:
         05:3e:2e:77:50:56:f4:eb:23:5b:15:6e:4c:ea:80:f3:f5:f9:
         bd:39:67:ed:62:4b:d1:ae:fb:12:eb:58:f3:15:35:3e:74:17:
         c2:b9:59:88:66:58:c9:4d:c9:d0:3e:1f:80:17:71:99:b8:40:
         ee:48:82:6b:9b:fc:02:05:57:ee:f5:17:1f:0f:c7:64:97:a7:
         9f:55:30:35:45:16:c9:fc:b8:2b:81:66:bf:37:28:ec:21:b2:
         a6:fe:3d:26:23:ac:23:54:2e:fd:e4:41:02:e6:03:69:8f:f6:
         b8:6b:d8:11:92:1a:47:7d:c5:b9:3d:9d:9f:45:f4:0e:eb:cb:
         b5:61:43:17:fa:49:11:ba:3f:6b:81:91:6d:69:af:f7:32:04:
         75:58:9f:ff:2e:81:9e:5a:8d:fa:6b:19:2a:aa:03:ec:98:b2:
         dc:7e:03:46
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTmeyLNXHte0M+/4nZ6TBXMxptqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjczMDEwMERERjE1REFFMTU2MkI5NjcwMUM1RTMwQzRG
QzBBMDFEQzAeFw0yNTEyMjIxODI5NDBaFw0yNjEyMjExODM0NDBaMDMxMTAvBgNV
BAMTKEEyQjdCMjgyMDUwQ0NEMjRBNEY4OUFEMkM1OTZCRTkxNDc4MDUyNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQEQpCcnp4xVHZqAXRmYcslwL
e2sVMT+3g9LRGp6HHg+K7zPCYfIR1Hj3Y4IMIFHT8Uf/eNyKE+YnOdrVnrYoOrTb
1zN0urcK7H5BH93r03+onjW7pm8F6AEULxXzv9HCh+wyyx3rHWzVEuIOkndD0TOi
vr+zVh5tnCWxa6DqTxe8dDJoDyAlJEG5A1N5QogLAJcokfEP3Fql2Yna4ulKiVXx
LmW8NN+ZHZUTJapnEm8pN9S+aa+nUiug/R6JprzyZbgOZex5uV6JWzQc3JZG8Ozd
3mvr2zdEpYoGXuePf1LAS0WTzGJREnMttDFbWgzDlxWLeRntk1ctAak2+7/5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoreyggUMzSSk+JrSxZa+kUeAUnIwHwYDVR0j
BBgwFoAUtzAQDd8V2uFWK5ZwHF4wxPwKAdwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzNtRjd4TmM0cjI3akdoS2RMZFFzbTJ3WGhWNnJuOWRuY3g1MWpSWWFl
aWovMC9CNzMwMTAwRERGMTVEQUUxNTYyQjk2NzAxQzVFMzBDNEZDMEEwMURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3MzAxMDBEREYxNURBRTE1
NjJCOTY3MDFDNUUzMEM0RkMwQTAxREMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MzbUY3eE5jNHIyN2pHaEtkTGRRc20yd1hoVjZybjlkbmN4NTFqUllhZWlqLzAv
MzEzNzMwMmUzODMxMmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMz
MzYzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlEwMA0GCSqGSIb3DQEBCwUAA4IBAQAdmygqJe7L
B3dXVQXNgESyauPEMWc4t7dY+jVcfDwKTiNp4OsnNTd0dYDz0USAi/toGy0dZ5re
flrTAp+ZVr4ZYWVjzR0yQeC/jftjOJwSmb78e41w3WPShu8FPi53UFb06yNbFW5M
6oDz9fm9OWftYkvRrvsS61jzFTU+dBfCuVmIZljJTcnQPh+AF3GZuEDuSIJrm/wC
BVfu9RcfD8dkl6efVTA1RRbJ/LgrgWa/NyjsIbKm/j0mI6wjVC795EEC5gNpj/a4
a9gRkhpHfcW5PZ2fRfQO68u1YUMX+kkRuj9rgZFtaa/3MgR1WJ//LoGeWo36axkq
qgPsmLLcfgNG
-----END CERTIFICATE-----
Generated at Tue Dec 23 09:46:11 2025 by rpki-client