This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa
File:                     3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa (raw, json)
Hash identifier:          +lZYhamut7FOVpv31tnweM5LAVGXuVWSU3zyABJudVE=
Subject key identifier:   AE:00:4F:89:1E:A9:0E:A8:0C:AA:38:3B:B1:7B:D3:37:94:52:C7:DA
Certificate issuer:       /CN=6968CB73E2470E4282A375B8959AE6A2A6A53A3C
Certificate serial:       53A058AE7CFEE0C2849E2C3316BCB181CDA0D5E4
Authority key identifier: 69:68:CB:73:E2:47:0E:42:82:A3:75:B8:95:9A:E6:A2:A6:A5:3A:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6968CB73E2470E4282A375B8959AE6A2A6A53A3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa
Signing time:             Thu 08 Jan 2026 12:15:19 +0000
ROA not before:           Thu 08 Jan 2026 12:10:19 +0000
ROA not after:            Thu 07 Jan 2027 12:15:19 +0000
asID:                     262742
IP address blocks:        177.104.32.0/19 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/6968CB73E2470E4282A375B8959AE6A2A6A53A3C.crl
                          rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/6968CB73E2470E4282A375B8959AE6A2A6A53A3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6968CB73E2470E4282A375B8959AE6A2A6A53A3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 03:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a0:58:ae:7c:fe:e0:c2:84:9e:2c:33:16:bc:b1:81:cd:a0:d5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6968CB73E2470E4282A375B8959AE6A2A6A53A3C
        Validity
            Not Before: Jan  8 12:10:19 2026 GMT
            Not After : Jan  7 12:15:19 2027 GMT
        Subject: CN=AE004F891EA90EA80CAA383BB17BD3379452C7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:74:ac:cc:e1:66:5e:7b:c3:e3:2c:04:fb:
                    10:11:53:c9:89:76:41:18:03:2d:c3:a9:1c:46:dc:
                    59:10:dc:1c:1c:2d:fe:e6:ec:34:1a:8b:ee:08:db:
                    af:48:ac:3f:f6:00:e4:bd:a2:20:d6:5f:68:6b:db:
                    99:46:5f:0c:5a:1f:55:4b:73:e9:b6:59:17:bd:22:
                    f1:16:d3:2b:63:12:b4:0a:52:61:e6:1f:82:c6:f2:
                    46:73:63:46:f2:ba:e3:c7:b8:55:03:eb:ad:46:0b:
                    53:02:4f:76:8f:95:e9:91:cc:7c:28:e2:3f:41:6f:
                    c6:95:18:44:2d:0d:b8:80:90:10:15:77:d3:aa:04:
                    b9:20:32:13:1f:da:33:20:dc:c9:59:03:30:e1:9f:
                    ed:19:59:1b:fd:34:9a:61:e9:25:84:70:66:ef:38:
                    c6:9a:88:fc:5c:94:7a:6a:f0:92:23:1d:cf:8b:ba:
                    4b:fd:8b:08:4d:65:9b:0a:5e:b6:6a:66:c7:5e:23:
                    90:6c:93:92:d6:3c:f1:de:c4:84:11:bf:aa:8d:c1:
                    19:a7:c8:d4:b7:07:7f:18:0a:51:6e:44:c6:a6:7c:
                    0e:0c:30:ed:be:65:7a:fd:22:5b:9b:a4:98:c0:37:
                    79:98:0d:a4:f7:a3:26:52:37:6b:89:21:9e:09:cf:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:00:4F:89:1E:A9:0E:A8:0C:AA:38:3B:B1:7B:D3:37:94:52:C7:DA
            X509v3 Authority Key Identifier:
                keyid:69:68:CB:73:E2:47:0E:42:82:A3:75:B8:95:9A:E6:A2:A6:A5:3A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/6968CB73E2470E4282A375B8959AE6A2A6A53A3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6968CB73E2470E4282A375B8959AE6A2A6A53A3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:9f:91:81:0e:e8:36:a6:99:03:7f:e4:56:41:83:17:a1:
         20:78:45:18:0e:76:69:93:7b:ab:99:db:ce:13:0c:6f:7e:16:
         01:cd:ff:d0:54:5c:32:24:62:b5:98:5d:a2:85:8a:16:e1:77:
         d8:46:e5:44:fc:6f:e2:85:a9:c3:7c:59:f5:6d:2d:1a:5d:8a:
         f8:a6:53:47:47:42:01:23:0e:4c:28:56:35:7f:a3:7c:73:62:
         b6:3c:e0:09:e7:1b:f8:45:f1:a6:cc:fa:dd:28:88:73:88:ff:
         4b:cd:05:38:45:0b:e2:75:51:ba:5d:cb:c4:50:90:b9:64:7c:
         7a:02:d9:33:bb:74:37:41:93:6e:04:f9:22:31:ec:10:da:a2:
         01:08:c2:fc:b3:e9:9d:f7:95:12:f6:9d:7e:8f:07:65:cd:6c:
         7f:16:82:5e:4c:af:11:b3:45:db:73:b7:d2:26:81:df:a7:2f:
         fc:cd:dc:2c:c4:c1:6f:8d:80:05:b9:32:8d:83:6d:0d:e4:ae:
         6d:8c:56:0d:c2:0b:28:1b:8f:42:23:ca:21:db:05:a3:39:46:
         38:9b:45:d0:39:ec:cd:82:4b:4a:e7:0e:2d:55:8c:ad:0f:26:
         8b:85:e1:ae:41:ca:45:c1:00:31:53:85:25:df:a4:dc:bf:f9:
         68:82:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:27:29 2026 by rpki-client