This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3234203d3e20323633363334.roa
File:                     3137302e38312e34382e302f32322d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          e4pWQ6GVncc1DmXu899ixtOLwjdwPDEH75sHMC7H2MQ=
Subject key identifier:   84:A3:2A:5D:07:A9:2B:22:14:F1:99:08:18:2D:13:3E:B4:EB:62:A6
Certificate issuer:       /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Certificate serial:       5F3644F90A883900726D9F8BA7FDD716024E874A
Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3234203d3e20323633363334.roa
Signing time:             Tue 23 Dec 2025 13:18:51 +0000
ROA not before:           Tue 23 Dec 2025 13:13:51 +0000
ROA not after:            Tue 22 Dec 2026 13:18:51 +0000
asID:                     263634
IP address blocks:        170.81.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl
                          rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 14:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:36:44:f9:0a:88:39:00:72:6d:9f:8b:a7:fd:d7:16:02:4e:87:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
        Validity
            Not Before: Dec 23 13:13:51 2025 GMT
            Not After : Dec 22 13:18:51 2026 GMT
        Subject: CN=84A32A5D07A92B2214F19908182D133EB4EB62A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:85:0c:26:2b:30:c1:3b:9a:c2:73:52:b6:
                    de:33:f7:a1:d5:ac:95:7c:a1:85:25:81:f3:1d:99:
                    5b:27:be:89:8f:0e:7d:04:b3:e1:79:65:f2:17:73:
                    c7:04:f4:17:8d:a9:06:3c:ae:89:48:f0:27:d2:3b:
                    6a:e0:aa:3f:d6:d9:b0:3f:cf:37:44:1f:4d:b7:81:
                    00:fb:dd:ef:29:76:f1:34:21:12:81:0e:60:bc:5c:
                    b7:9e:7c:49:03:93:45:c6:9f:06:61:4a:f5:32:ae:
                    db:a9:3d:c8:83:48:f6:da:d0:2c:ec:5b:e5:9f:40:
                    6c:63:7e:8d:6b:91:47:ef:c1:b0:3a:0c:31:1e:b7:
                    47:d6:6d:04:a1:53:26:fc:ff:f0:d1:82:9e:60:1e:
                    72:d5:84:92:96:2f:b3:e3:11:51:b2:bf:fe:fd:b3:
                    74:08:e5:ff:5a:a8:c9:6f:70:2e:bb:a2:5f:31:fb:
                    11:62:0a:65:91:c3:7c:b9:87:c0:b6:56:90:44:02:
                    d1:e5:84:df:ea:79:f7:78:91:f7:06:0c:f0:a2:96:
                    15:66:7f:d1:07:11:3c:0c:d2:ef:e6:be:3e:a8:5d:
                    66:69:d3:0e:2a:32:dd:e4:ca:d7:64:e6:92:60:3e:
                    24:e9:d2:74:fe:4d:08:3f:31:43:21:36:18:a6:4a:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A3:2A:5D:07:A9:2B:22:14:F1:99:08:18:2D:13:3E:B4:EB:62:A6
            X509v3 Authority Key Identifier:
                keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:83:81:39:97:7d:76:bf:e2:45:31:d4:40:13:e3:07:1c:e9:
         11:e1:a5:0b:fb:e9:4f:43:7d:73:4c:54:af:ac:9f:60:8e:85:
         0b:bc:b4:25:5e:bc:04:52:c9:bf:60:fe:01:db:3c:c2:0f:83:
         68:f1:4d:28:c2:6b:a3:fe:1a:14:0a:3c:31:ad:48:c7:26:4d:
         f1:21:2e:d9:70:8a:16:2b:79:63:4a:f8:c2:6c:c3:1b:85:be:
         38:66:84:53:e6:89:51:25:79:d3:0c:31:46:44:ed:df:51:14:
         83:61:18:50:36:e7:f9:22:6e:fa:76:49:35:17:72:ca:4f:5d:
         99:1c:c0:34:05:70:c9:15:b4:4c:c8:ac:3f:90:2a:23:8a:9d:
         da:56:96:ac:c6:04:b7:18:16:99:f4:5d:58:8a:6b:81:62:d7:
         9c:f2:8e:4b:db:aa:ca:17:00:36:7c:2a:86:6a:fc:77:e7:c4:
         eb:aa:28:43:0a:39:6f:b1:5b:a9:92:c6:cc:56:a0:63:ac:12:
         21:1c:dd:cf:24:03:d0:eb:d2:19:2b:72:53:4e:04:ec:49:2c:
         40:1e:81:ab:86:89:80:ea:39:34:97:24:08:3d:11:28:d3:f3:
         c7:b3:9a:29:5c:a4:c5:5c:96:3e:8d:63:b6:b3:55:e3:2d:c1:
         57:0b:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:54:51 2025 by rpki-client