This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130312e302f32342d3332203d3e203631363138.roa
File:                     3137302e38312e3130312e302f32342d3332203d3e203631363138.roa (raw, json)
Hash identifier:          fwC3d3+2u/SL5ZDteTfUTiwXQcfVJM22XObMEk7f1cs=
Subject key identifier:   B3:FA:D2:2B:FC:7B:3E:89:00:BF:92:98:03:06:07:1A:89:B2:1D:19
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       0CEE52B7F2B90BA8E3A3D513FAF66B33FB92DC59
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130312e302f32342d3332203d3e203631363138.roa
Signing time:             Sun 18 Jan 2026 14:37:33 +0000
ROA not before:           Sun 18 Jan 2026 14:32:33 +0000
ROA not after:            Sun 17 Jan 2027 14:37:33 +0000
asID:                     61618
IP address blocks:        170.81.101.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl
                          rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 07:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ee:52:b7:f2:b9:0b:a8:e3:a3:d5:13:fa:f6:6b:33:fb:92:dc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: Jan 18 14:32:33 2026 GMT
            Not After : Jan 17 14:37:33 2027 GMT
        Subject: CN=B3FAD22BFC7B3E8900BF92980306071A89B21D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:27:8a:71:84:65:33:64:ba:0a:8e:cc:2b:
                    83:cd:d3:7b:d2:97:19:68:a2:2f:7a:23:fb:55:5c:
                    58:98:c2:79:3e:37:1c:9e:59:e0:9c:5b:3d:90:bc:
                    56:03:fc:01:42:90:85:73:d1:01:2d:63:88:6d:67:
                    35:16:7f:e1:39:15:da:85:cb:9c:29:aa:c5:5e:ce:
                    9b:45:72:b3:f5:2e:ab:d8:4b:ca:f3:0d:9f:12:cd:
                    86:0b:2f:31:13:fd:18:df:b1:33:d8:2d:33:4a:5c:
                    36:54:8c:f6:3c:13:45:7a:7f:81:56:30:38:9c:a4:
                    d2:63:4e:02:00:62:00:e3:2b:5b:6a:4f:3b:f2:9d:
                    18:52:81:42:86:89:36:05:48:5c:66:af:2c:45:e6:
                    98:92:ec:9a:b5:0a:aa:ad:51:c0:b9:a0:24:b4:2c:
                    f6:e8:78:7e:1f:80:97:ba:e5:d0:5e:c2:a1:1c:9b:
                    e9:8b:95:ae:72:ce:67:ad:1b:21:6e:99:91:8b:08:
                    db:da:f3:0c:71:db:4b:0a:e4:d8:d5:ad:c1:4f:d1:
                    f9:58:de:10:9c:9f:63:a4:f0:8d:89:27:0f:00:3c:
                    54:8f:19:3e:0b:73:86:a1:a8:f8:f1:c3:e9:ec:c6:
                    87:00:62:ec:ff:8a:29:b2:ca:7f:e2:e9:82:3c:6f:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FA:D2:2B:FC:7B:3E:89:00:BF:92:98:03:06:07:1A:89:B2:1D:19
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130312e302f32342d3332203d3e203631363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b2:30:ff:9f:21:00:d2:c1:5e:23:57:67:d2:6a:65:52:f6:
         d3:3e:c9:8f:94:0a:8b:62:91:ab:f8:dc:b5:04:df:bb:9f:f3:
         4f:ba:67:50:96:64:76:d0:c3:2d:7d:1d:e6:6b:32:8b:27:44:
         51:df:0d:63:79:19:86:fd:2c:39:84:6d:b3:9b:ef:2d:9c:79:
         5a:84:83:32:cd:dc:0e:47:f4:38:7a:c6:c3:14:38:22:a4:34:
         62:34:08:4d:d8:58:28:d0:e2:34:c3:0b:32:e1:90:d4:e2:0f:
         d6:7f:79:3d:15:53:e9:5a:81:e1:44:bc:26:c4:f1:e0:fb:7e:
         ce:ed:04:59:78:f9:b1:02:8d:6c:04:f5:54:a2:eb:0b:7f:35:
         10:35:d6:44:f4:7d:7a:dd:76:99:95:90:08:23:c8:71:b7:15:
         dd:53:3b:f4:de:ea:d3:d1:09:7f:fc:c1:3b:9e:7d:e5:25:cd:
         3f:91:22:5c:40:27:fd:73:83:b2:ce:68:b9:11:c7:07:a2:85:
         55:23:45:07:a5:e8:31:a5:35:22:18:8b:3f:d0:bc:b8:5a:31:
         3f:ec:99:4d:ff:76:6f:f6:ad:59:ef:ad:3c:6d:7a:4e:e7:4e:
         7a:df:31:b2:d0:7e:a8:de:d1:ae:50:2c:8e:fd:9d:62:f6:dc:
         a1:ba:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:22:03 2026 by rpki-client