This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e38372e34302e302f32322d3234203d3e203532353733.roa
File:                     3137372e38372e34302e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          rYXnhykz4zFhBfc2cFPzzG++mKFT+S5ia4XbQ62RY48=
Subject key identifier:   7C:E6:6F:35:28:0B:AB:2C:D1:C7:E3:5A:A1:34:15:86:BA:92:CF:E7
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       32BC7550229AB8237608278BB7E4BB2C90C76333
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e38372e34302e302f32322d3234203d3e203532353733.roa
Signing time:             Wed 21 Jan 2026 13:22:54 +0000
ROA not before:           Wed 21 Jan 2026 13:17:54 +0000
ROA not after:            Wed 20 Jan 2027 13:22:54 +0000
asID:                     52573
IP address blocks:        177.87.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bc:75:50:22:9a:b8:23:76:08:27:8b:b7:e4:bb:2c:90:c7:63:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Jan 21 13:17:54 2026 GMT
            Not After : Jan 20 13:22:54 2027 GMT
        Subject: CN=7CE66F35280BAB2CD1C7E35AA1341586BA92CFE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:b9:0a:1f:ab:3e:92:12:9c:e4:ac:f3:ad:
                    7e:86:12:17:35:61:e5:57:77:29:b7:cc:5c:51:fd:
                    f3:52:b0:f5:c9:ac:15:27:93:5d:a7:99:6e:81:fe:
                    4c:e1:a1:6e:37:4e:43:40:00:36:14:66:01:66:4a:
                    68:c6:d4:00:1d:e4:0e:60:56:df:36:dd:94:7a:09:
                    65:30:29:62:63:cd:c1:ff:c0:81:8a:c0:25:50:67:
                    54:a8:c8:0e:2d:8a:31:ef:96:9a:3b:c1:58:6b:99:
                    96:7e:a1:6b:5e:bd:b8:58:d8:af:ca:7c:62:f0:77:
                    21:5f:75:92:19:d7:74:87:f2:90:ab:e7:05:8d:d8:
                    99:dc:c9:aa:73:15:f0:fa:5c:15:58:39:54:df:13:
                    26:05:62:f7:d9:46:bb:90:1e:23:21:f4:70:3b:0a:
                    a9:a7:24:71:c5:d0:ac:63:81:e3:d0:f7:77:51:f8:
                    16:94:c9:58:f0:a8:16:7a:7a:10:d0:b0:2a:86:f9:
                    3e:e3:56:3e:e4:02:b6:a5:3a:98:96:38:22:8d:fa:
                    9d:da:33:4a:7f:7f:ee:4f:b4:58:b8:17:07:40:d9:
                    03:8b:a3:7d:79:1f:a4:e3:4e:29:7f:4d:c8:44:00:
                    20:c6:cc:b5:51:08:73:76:50:41:55:3f:38:67:09:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E6:6F:35:28:0B:AB:2C:D1:C7:E3:5A:A1:34:15:86:BA:92:CF:E7
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137372e38372e34302e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:27:90:7d:42:a3:5f:ff:6c:46:3e:d8:ee:4b:41:f0:f2:63:
         4d:87:bc:6b:b5:af:ce:0f:ae:62:65:74:f6:c7:f7:55:31:ac:
         9b:76:1f:a7:a9:56:d3:e3:46:aa:49:31:02:91:ea:a3:d9:fb:
         70:ea:cf:53:cb:4d:95:a0:8c:fe:3b:45:dd:15:53:99:f9:51:
         ea:89:b5:82:ef:c5:25:f6:0c:50:c4:7e:e2:1a:0a:19:b3:c8:
         33:2b:c3:27:89:ee:a2:0b:7f:7b:4e:99:13:ad:60:04:43:2d:
         98:f2:da:b8:9a:11:f1:26:f9:97:d8:e6:a4:10:e4:93:9c:16:
         79:c3:69:d0:75:e6:a9:26:4a:ee:a4:ea:7a:06:06:db:b4:3a:
         81:48:51:80:47:a6:a0:89:33:33:1a:cb:b4:07:46:8f:7a:e0:
         46:01:14:66:d1:ad:6d:34:5d:74:5a:89:77:62:1a:9b:0c:b4:
         a1:69:a1:8f:b9:16:a1:7d:69:c0:76:f7:9b:f3:b2:43:af:20:
         20:29:5e:ca:97:62:1c:17:8b:2f:56:6f:28:67:4b:9d:d7:e7:
         a7:9e:9d:9b:66:7c:26:af:65:3e:8d:bd:8c:89:ca:56:89:46:
         4f:22:58:1b:f4:d3:b6:f7:c8:5d:e2:4e:8c:05:d6:ea:f2:9e:
         20:85:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:45:44 2026 by rpki-client