This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32322d3234203d3e20323633303733.roa
File:                     3137302e3234342e39362e302f32322d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          5xF+OYF/f/C5o5TgWz87e8W28aZMi1gmPOyqgzD6oo0=
Subject key identifier:   7D:47:8F:DC:7A:BB:33:9E:C5:88:2D:A3:97:84:F0:60:75:F5:CC:C6
Certificate issuer:       /CN=E6A3BB875E3C099F0B7527B57175ACBC2C52C920
Certificate serial:       63FF9139AB7A9ADE09CA536CF237D7A21B5E29E3
Authority key identifier: E6:A3:BB:87:5E:3C:09:9F:0B:75:27:B5:71:75:AC:BC:2C:52:C9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32322d3234203d3e20323633303733.roa
Signing time:             Wed 31 Dec 2025 14:23:08 +0000
ROA not before:           Wed 31 Dec 2025 14:18:08 +0000
ROA not after:            Wed 30 Dec 2026 14:23:08 +0000
asID:                     263073
IP address blocks:        170.244.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 08:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ff:91:39:ab:7a:9a:de:09:ca:53:6c:f2:37:d7:a2:1b:5e:29:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A3BB875E3C099F0B7527B57175ACBC2C52C920
        Validity
            Not Before: Dec 31 14:18:08 2025 GMT
            Not After : Dec 30 14:23:08 2026 GMT
        Subject: CN=7D478FDC7ABB339EC5882DA39784F06075F5CCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5c:a1:45:9f:0d:2a:71:a3:a8:69:ef:a2:e6:
                    a3:f2:28:f8:c2:48:92:aa:f6:ca:bc:09:5d:ff:06:
                    2f:dd:08:10:02:7d:71:bf:30:19:f2:1b:fa:43:e9:
                    d1:23:cf:cf:b3:3c:75:e6:13:ee:d8:31:99:84:60:
                    e1:9d:03:db:a2:da:4f:7e:b0:c1:4a:22:73:a6:f3:
                    69:03:c4:3e:de:46:ee:07:39:5e:07:e3:d0:9c:68:
                    07:5a:45:d7:00:4c:8a:1c:18:f1:53:ad:9c:32:e4:
                    f2:ec:25:c5:93:14:c4:2d:f9:be:58:61:03:40:47:
                    e0:c4:50:68:f3:39:30:d9:da:c0:9b:60:a8:42:d8:
                    08:9d:d7:ef:1e:23:47:59:8f:a0:8e:24:80:26:44:
                    70:f0:17:34:f7:17:48:bf:12:a1:28:3d:11:5b:75:
                    d0:16:0b:02:75:2b:84:14:7b:42:23:81:1a:ca:6d:
                    7e:09:91:7b:1d:85:81:0d:1e:fb:a3:59:a4:5d:60:
                    9f:dd:d7:89:0d:02:fe:f5:e9:ca:f5:67:e9:ca:d4:
                    4e:27:5b:ff:53:78:ac:6a:69:41:78:74:7e:ca:d4:
                    d7:1e:89:14:e8:56:cc:d4:aa:d8:59:08:c5:53:32:
                    3c:6d:97:90:1d:e9:14:9f:d2:eb:2a:63:06:86:8d:
                    ed:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:47:8F:DC:7A:BB:33:9E:C5:88:2D:A3:97:84:F0:60:75:F5:CC:C6
            X509v3 Authority Key Identifier:
                keyid:E6:A3:BB:87:5E:3C:09:9F:0B:75:27:B5:71:75:AC:BC:2C:52:C9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32322d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:96:61:38:2a:08:8d:39:79:5a:3b:c0:3c:0e:ca:38:5a:ea:
         a4:cc:98:47:72:7b:83:5a:26:b7:77:76:75:ac:87:94:81:9d:
         ed:78:69:b2:02:7d:ff:7a:a5:b0:a7:6c:43:98:14:9e:1c:8e:
         c8:15:77:35:6b:bf:11:de:85:25:3c:e4:fb:e0:87:2a:82:c0:
         7f:0b:6f:4a:c5:cc:17:43:bc:48:4a:23:79:f9:48:bb:b0:f8:
         5b:38:8b:14:32:99:4b:3c:11:01:c6:79:79:6c:62:22:ea:de:
         4f:22:f6:b6:74:22:38:6a:91:dd:45:ce:46:3b:a3:41:5f:b3:
         a5:38:29:59:b0:4c:8a:c4:8d:35:98:3c:0e:3c:c3:48:01:3b:
         4e:8a:5c:f9:7f:8c:12:f0:97:57:d9:47:92:a7:50:79:0a:5e:
         8c:e3:e5:66:46:d0:38:17:1e:7a:d3:ae:8c:95:b3:d2:3d:34:
         0f:45:66:aa:27:5d:61:f1:f7:fc:26:72:de:1c:6f:4a:05:a7:
         1a:17:69:63:74:b6:ae:8d:10:aa:28:74:8a:f7:c9:bb:d9:20:
         36:cd:46:6d:7d:68:db:c3:2f:16:c3:14:51:ca:57:97:a6:d4:
         56:01:09:b8:df:07:6d:3e:c7:a4:1f:80:5a:b1:7b:8e:26:60:
         2c:fa:b8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 22:39:35 2026 by rpki-client