This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3233203d3e203631363138.roa
File:                     3137302e38312e3130302e302f32322d3233203d3e203631363138.roa (raw, json)
Hash identifier:          EUmHOSvpo1YInT+KbsXa6AeaV5xfBewjy2x1dVcJ/OU=
Subject key identifier:   03:2C:E8:E4:27:50:4B:E4:B7:F1:9F:FD:83:F7:2D:AE:1F:20:0A:EB
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       1C922C9EF3EF1D362047D64DC8496166EAA181B2
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3233203d3e203631363138.roa
Signing time:             Sun 18 Jan 2026 14:42:59 +0000
ROA not before:           Sun 18 Jan 2026 14:37:59 +0000
ROA not after:            Sun 17 Jan 2027 14:42:59 +0000
asID:                     61618
IP address blocks:        170.81.100.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl
                          rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 07:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:92:2c:9e:f3:ef:1d:36:20:47:d6:4d:c8:49:61:66:ea:a1:81:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: Jan 18 14:37:59 2026 GMT
            Not After : Jan 17 14:42:59 2027 GMT
        Subject: CN=032CE8E427504BE4B7F19FFD83F72DAE1F200AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:c8:11:50:c0:43:1b:7f:9d:09:4d:8f:c0:
                    19:0b:51:52:8c:03:df:67:08:a2:6f:be:74:8c:ca:
                    a7:eb:05:ac:21:9f:a0:02:b7:74:a3:8e:91:b2:c3:
                    43:6b:e5:70:2a:36:5a:5a:e6:1c:74:e4:96:52:b3:
                    1e:e2:79:be:92:76:71:fc:b1:11:09:07:ba:c5:fe:
                    71:61:f3:a7:01:09:c1:b6:5e:7d:c1:f3:82:ac:cf:
                    13:2c:c0:f4:af:34:a7:b7:a8:a4:27:9e:f8:57:40:
                    e8:2d:62:f0:58:ba:23:2c:fe:75:06:b0:6c:b9:6b:
                    7a:0d:e9:b9:e7:ff:77:d7:68:03:4b:a1:ce:c3:71:
                    13:54:a4:a8:07:36:74:d9:1f:6b:03:bb:d0:e0:1e:
                    2a:22:cd:4b:c2:f7:29:82:ef:20:9a:22:03:b2:5e:
                    f8:ea:0d:bf:b2:29:94:0a:a5:fa:cb:d6:07:56:7e:
                    96:1d:b9:94:d1:15:27:85:9b:d2:49:9d:bc:c4:36:
                    6d:63:f8:d8:db:48:2e:00:37:87:5f:95:e0:e1:a7:
                    50:37:79:2c:bc:72:f6:ab:76:cd:5c:1a:4e:2d:3d:
                    47:80:9d:d8:ad:19:42:55:01:2c:3a:ad:f1:75:ca:
                    1c:a7:b1:52:e0:77:8d:66:a4:52:b3:fb:e4:47:0c:
                    53:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2C:E8:E4:27:50:4B:E4:B7:F1:9F:FD:83:F7:2D:AE:1F:20:0A:EB
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3233203d3e203631363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:d8:3c:1d:c5:bf:57:bb:49:a5:e6:02:e2:2f:24:40:ed:9f:
         63:82:05:00:cc:26:06:d2:78:db:de:c5:15:e3:01:44:d5:b9:
         3d:ce:35:04:26:2d:82:95:8f:07:d0:85:8e:90:cb:d9:5d:d5:
         93:8a:ff:5e:e9:bb:92:57:c2:a9:31:6e:38:c9:43:43:c7:96:
         a6:7f:52:77:6c:35:14:1f:9d:9d:46:7f:a5:03:18:80:f9:32:
         07:0d:18:49:30:c1:69:36:d0:33:3c:f8:73:d0:47:99:cb:04:
         f2:06:b8:4a:7b:b9:0a:43:64:8c:77:59:a4:0f:75:e7:8b:7e:
         ad:ae:33:97:a0:f1:54:a0:37:fa:48:cb:b3:1f:25:b2:02:fd:
         6c:51:a5:b7:a7:9a:31:0b:e3:25:61:09:a5:f7:22:13:ed:ef:
         50:26:59:95:45:51:1a:56:12:cd:77:d8:6a:4a:33:9f:30:5e:
         e8:96:7b:bd:4e:33:55:9c:8f:98:86:34:be:15:d6:df:14:69:
         99:bc:62:71:00:f4:fd:6e:04:fc:a5:0f:e2:73:07:6d:0d:18:
         b3:71:bb:81:15:59:1b:81:4b:ae:49:c6:f3:fa:fa:d9:76:1d:
         88:8c:92:15:52:76:e0:11:18:4b:55:c9:4d:6a:7d:9f:b1:26:
         9e:86:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:22:02 2026 by rpki-client