This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32342d3234203d3e20323634393939.roa
File:                     3137302e38342e37362e302f32342d3234203d3e20323634393939.roa (raw, json)
Hash identifier:          W6ZKp7YMDCy656yuN4nkuufdb0i2oSdfAyW64hx1j8I=
Subject key identifier:   1B:A7:5D:05:A4:C7:A9:29:C8:D9:2D:14:E3:70:6F:EE:89:CB:00:BA
Certificate issuer:       /CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
Certificate serial:       3C8888F341BC6B045F519022D27B4B1E42F2F231
Authority key identifier: 80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32342d3234203d3e20323634393939.roa
Signing time:             Tue 09 Dec 2025 16:51:00 +0000
ROA not before:           Tue 09 Dec 2025 16:46:00 +0000
ROA not after:            Tue 08 Dec 2026 16:51:00 +0000
asID:                     264999
IP address blocks:        170.84.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 15:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:88:88:f3:41:bc:6b:04:5f:51:90:22:d2:7b:4b:1e:42:f2:f2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
        Validity
            Not Before: Dec  9 16:46:00 2025 GMT
            Not After : Dec  8 16:51:00 2026 GMT
        Subject: CN=1BA75D05A4C7A929C8D92D14E3706FEE89CB00BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:e6:8b:f0:f5:e6:b5:d1:a5:ae:61:fb:2e:
                    b3:41:75:1f:d2:20:5d:7f:c6:4a:19:82:a8:6c:52:
                    bd:2f:c6:8f:ed:7a:f2:0d:ed:88:b9:24:93:3b:77:
                    40:b8:ef:c2:fa:a9:db:1e:9b:db:c5:16:12:e4:a6:
                    4d:6f:e6:e4:d3:58:b8:16:41:2b:74:cc:7d:af:58:
                    25:72:7e:13:7e:57:19:1d:29:6e:c4:83:d8:5d:bb:
                    8d:15:6d:f1:d9:04:5c:09:42:22:40:e4:eb:c1:3e:
                    1e:da:08:af:ef:cc:88:25:15:33:3a:13:7b:08:a6:
                    d6:59:6c:02:b6:7b:de:9a:a2:3b:a2:b8:4f:6d:63:
                    a7:61:d0:10:02:a5:33:32:2b:b3:cd:6a:6c:bf:c3:
                    0e:e0:2c:7a:84:47:25:bd:7f:d8:35:12:aa:b2:2f:
                    58:11:32:3b:2d:d4:79:0e:81:e5:57:14:2b:cc:53:
                    a6:5e:32:91:2d:84:89:d0:b6:55:34:63:f5:0d:71:
                    6c:73:a7:6a:3d:c9:77:1b:5b:67:df:76:3f:9d:25:
                    b2:58:d4:c7:17:ce:72:05:af:cd:92:b5:17:3d:24:
                    4a:bc:9f:16:68:14:3b:96:65:b6:18:d1:d1:2c:4b:
                    66:de:51:f9:3c:5a:34:eb:f1:8f:49:65:06:07:21:
                    06:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:5D:05:A4:C7:A9:29:C8:D9:2D:14:E3:70:6F:EE:89:CB:00:BA
            X509v3 Authority Key Identifier:
                keyid:80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37362e302f32342d3234203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:03:67:b2:43:07:25:8a:b2:87:70:0a:42:82:d4:a2:ae:34:
         b7:f6:c6:60:be:9d:86:ae:e6:3c:5a:fc:10:54:d7:2c:1d:95:
         ed:8b:2d:4a:cc:52:33:bf:80:d7:1b:37:2e:65:4f:36:8d:ee:
         1e:aa:d8:d1:06:52:cc:ad:49:40:dc:81:45:e3:23:4f:56:fe:
         8f:c7:67:c8:4d:bd:dc:e3:3f:6c:81:d9:a4:1e:42:38:fa:ee:
         cc:0f:21:e4:77:a9:57:93:cc:70:d1:a2:86:60:da:94:29:96:
         66:04:c5:52:8e:2e:0a:05:6c:7e:7f:a5:55:cc:76:e7:b6:a9:
         a1:87:aa:96:bf:05:b0:08:ed:ab:99:0f:48:1b:f5:b0:2b:98:
         5c:33:42:9b:bb:59:c7:82:dc:58:a5:e8:e9:32:f6:9f:f8:db:
         bb:fc:41:69:77:01:af:32:0d:bc:d9:f4:05:f7:c7:b0:3f:37:
         b2:82:ba:ce:cf:0b:e7:88:14:9d:7d:e3:78:da:a8:f7:8a:f9:
         f6:88:41:6d:31:10:66:10:44:d9:8a:f1:f6:f2:d7:fc:76:f0:
         f7:38:84:0c:ea:90:9d:d0:62:72:5f:06:b6:d4:55:df:59:d2:
         b6:ef:32:b3:8d:1a:cc:1d:3d:a7:89:2e:fd:4e:c9:67:54:62:
         db:9c:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:31:21 2025 by rpki-client