This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3232203d3e20323634393939.roa
File:                     3137302e38342e37362e302f32322d3232203d3e20323634393939.roa (raw, json)
Hash identifier:          Mv/ProGKjw9d1w63xPJIsn+Giovqg3FQMRjifTN5/9M=
Subject key identifier:   B6:73:20:25:EB:3B:B0:FE:AB:3F:52:57:16:AD:F6:5E:3E:42:35:4E
Certificate issuer:       /CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
Certificate serial:       6811D47A8B053C921FF959D79A2E5FA80F3D3B79
Authority key identifier: 80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3232203d3e20323634393939.roa
Signing time:             Tue 09 Dec 2025 16:50:32 +0000
ROA not before:           Tue 09 Dec 2025 16:45:32 +0000
ROA not after:            Tue 08 Dec 2026 16:50:32 +0000
asID:                     264999
IP address blocks:        170.84.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 15:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:11:d4:7a:8b:05:3c:92:1f:f9:59:d7:9a:2e:5f:a8:0f:3d:3b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
        Validity
            Not Before: Dec  9 16:45:32 2025 GMT
            Not After : Dec  8 16:50:32 2026 GMT
        Subject: CN=B6732025EB3BB0FEAB3F525716ADF65E3E42354E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:4e:71:9b:e9:7c:13:10:f2:e2:1d:3c:ef:
                    3c:98:a3:30:09:2f:99:38:85:ea:b9:6c:92:a9:a7:
                    8e:bd:76:af:09:c0:39:4a:bb:8d:0d:d9:cd:db:c2:
                    df:de:b6:ef:ec:13:05:9f:41:e4:a0:67:0c:e3:6e:
                    19:87:1d:23:d2:96:2d:fa:79:7a:ca:91:e5:be:64:
                    47:2d:d5:91:5e:2f:dd:17:0f:40:08:2c:17:f5:9c:
                    47:c8:10:4c:3b:a3:be:33:f4:90:cb:6b:b1:5f:74:
                    78:82:9c:3c:34:50:79:e3:42:73:ce:6e:37:8b:35:
                    f8:be:a2:7d:d6:ae:94:82:17:0a:65:b1:d7:69:91:
                    4e:54:78:b4:48:fc:4f:66:82:f9:b3:ac:cb:d2:a0:
                    be:7a:4f:03:4d:07:8c:50:07:73:eb:e9:73:b7:a1:
                    a9:04:b8:a9:b9:c6:e4:f9:ad:25:62:13:70:17:96:
                    82:fb:54:dc:84:5e:4c:b1:a3:99:5a:06:e9:37:e0:
                    83:98:b8:51:0c:af:23:ea:7b:8d:49:2b:c7:a2:a8:
                    e4:9e:f3:c2:46:3e:56:e3:74:14:c5:99:64:ee:a5:
                    65:e9:fa:36:58:93:b1:99:1c:67:f0:21:ea:1c:87:
                    36:1f:86:60:56:3e:72:6c:cf:a9:de:f3:13:ca:f8:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:73:20:25:EB:3B:B0:FE:AB:3F:52:57:16:AD:F6:5E:3E:42:35:4E
            X509v3 Authority Key Identifier:
                keyid:80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32322d3232203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:e6:ea:95:37:7c:9a:84:27:99:12:7a:23:c0:91:88:f4:
         00:0f:49:eb:5f:c7:8e:d1:4b:42:f3:1d:e7:e0:9c:d6:bc:29:
         3a:47:a8:54:6a:60:ed:14:48:17:9b:2d:a4:08:bc:48:9a:48:
         59:ee:32:1c:ac:45:31:0d:c2:3e:65:1a:52:d0:2a:5a:eb:fb:
         c4:fb:86:b2:30:3c:c2:2c:f9:03:3d:9e:33:90:77:fd:25:79:
         24:62:a0:0a:32:69:bc:90:90:92:d0:aa:04:6d:8c:aa:f0:f7:
         d0:da:86:75:e4:00:8f:60:09:a4:9b:ec:3b:64:02:1f:e8:2d:
         9a:45:0e:65:72:5f:3f:a5:77:94:8b:ff:26:8c:2a:38:4b:3c:
         bd:54:94:07:ed:87:26:9e:70:49:94:88:76:3d:19:91:4d:df:
         67:19:b4:a7:39:dc:24:81:b0:bd:e4:5d:e1:27:7b:b8:86:e1:
         ff:bf:5d:20:41:30:e2:30:25:a7:f9:15:7d:2a:e2:29:32:9e:
         ec:e8:df:f5:b3:97:1a:e6:13:96:e4:a0:c6:0e:48:d8:5e:8d:
         fe:f6:ed:13:48:6e:b6:83:a3:2a:47:4d:4b:97:fe:01:8e:00:
         d1:54:0f:cc:89:1e:c3:a3:de:fe:0d:9f:70:bc:8f:75:64:61:
         ce:ae:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:31:22 2025 by rpki-client