This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37382e302f32342d3234203d3e20323634393939.roa
File:                     3137302e38342e37382e302f32342d3234203d3e20323634393939.roa (raw, json)
Hash identifier:          A4mEq01oVkS9nrDY50xWE4G5OugEEj+fqqpB2W/xMqw=
Subject key identifier:   BF:F0:EA:92:93:EE:9E:CF:FF:1A:2F:EB:03:49:9C:E5:CD:E5:76:15
Certificate issuer:       /CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
Certificate serial:       48BBF63FA42C110B91920950DA89B96581D1CD60
Authority key identifier: 80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37382e302f32342d3234203d3e20323634393939.roa
Signing time:             Tue 09 Dec 2025 16:51:09 +0000
ROA not before:           Tue 09 Dec 2025 16:46:09 +0000
ROA not after:            Tue 08 Dec 2026 16:51:09 +0000
asID:                     264999
IP address blocks:        170.84.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 15:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bb:f6:3f:a4:2c:11:0b:91:92:09:50:da:89:b9:65:81:d1:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
        Validity
            Not Before: Dec  9 16:46:09 2025 GMT
            Not After : Dec  8 16:51:09 2026 GMT
        Subject: CN=BFF0EA9293EE9ECFFF1A2FEB03499CE5CDE57615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:13:97:d6:9b:b0:53:52:9b:eb:49:3c:59:
                    25:af:32:c3:2c:e0:37:25:d5:92:e2:49:96:4e:2b:
                    b0:07:7a:ae:40:53:8b:56:8e:88:80:84:f1:95:8f:
                    6c:75:a0:8c:a4:24:47:6a:ec:7a:56:9b:3a:df:78:
                    e9:0c:8f:36:e1:e7:98:1e:8e:28:d4:2a:e8:29:9d:
                    36:37:5a:f9:8d:58:ac:74:23:e8:9b:cc:43:8a:2d:
                    70:a2:52:d0:66:a5:37:10:28:40:0e:a5:fa:ec:ec:
                    f0:ca:4d:c3:41:4c:86:9f:eb:fb:df:7b:cb:45:dc:
                    ea:9c:36:9c:39:89:96:a0:c5:cf:18:6c:52:6f:91:
                    66:58:c4:17:62:ee:d5:df:65:93:51:1f:85:b6:45:
                    f2:ec:88:7f:43:29:0a:b5:14:7b:ae:99:83:5b:81:
                    95:99:28:44:77:e9:85:39:a9:23:17:fd:07:99:cd:
                    78:38:a7:ed:50:b7:d0:aa:de:fb:eb:6d:50:f3:97:
                    18:95:98:e0:76:22:5a:bd:8f:a3:d2:a3:45:a3:bb:
                    82:4b:cc:ad:b5:08:f3:ea:68:97:57:b2:f4:1a:a7:
                    3f:53:2d:53:5c:b0:60:1b:2a:e6:53:a5:dc:bf:6f:
                    c6:89:b0:75:c9:40:58:e4:96:87:53:43:60:d8:7f:
                    9a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F0:EA:92:93:EE:9E:CF:FF:1A:2F:EB:03:49:9C:E5:CD:E5:76:15
            X509v3 Authority Key Identifier:
                keyid:80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/3137302e38342e37382e302f32342d3234203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:41:8d:38:e5:c6:c1:2d:bd:59:a4:16:f6:a5:3a:c0:d1:8b:
         3d:bf:6f:e8:55:ea:fc:f0:61:f2:42:a2:cc:12:ef:88:03:5a:
         1f:ce:6b:c9:21:58:2d:a3:63:58:77:e7:f7:48:1a:e3:47:2d:
         62:4e:47:a8:68:95:9e:41:5e:ed:24:e8:f8:c3:74:c9:41:87:
         02:5a:5d:0d:cb:73:df:f3:62:0f:03:f3:33:15:40:bc:74:13:
         8c:10:f2:c9:66:2d:de:04:15:bd:55:11:56:19:9a:78:27:6f:
         a9:8b:c5:47:73:e3:a2:51:15:e6:54:cf:b6:67:51:0e:8f:0e:
         fd:7e:c0:c2:8b:af:a5:7e:75:2d:0c:f7:61:6e:1d:03:d6:00:
         61:b2:d0:ee:86:9a:95:75:63:87:c8:ce:4f:95:de:80:55:55:
         a4:13:26:60:be:44:21:61:54:c1:0f:2b:14:68:af:85:37:81:
         47:63:ba:2d:01:cf:35:9d:54:01:1c:e6:b2:2b:63:93:33:81:
         7f:41:ce:2b:ef:e1:40:5f:fe:0b:f3:c9:f7:39:17:44:37:8b:
         f0:6f:88:f8:bd:dd:bd:e6:67:55:b2:db:57:37:eb:fe:4c:6d:
         be:e7:ec:55:c4:7a:5e:93:4b:b3:5d:1f:ba:15:19:0f:30:1d:
         86:0e:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:31:20 2025 by rpki-client