This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130322e302f32342d3332203d3e203631363138.roa
File:                     3137302e38312e3130322e302f32342d3332203d3e203631363138.roa (raw, json)
Hash identifier:          1SR8tEtOw3A0JXxcX1FZA5kI5s361S4yOSIccdtmljE=
Subject key identifier:   25:ED:BD:7A:53:88:3D:1D:EE:7D:C3:51:4A:4C:D2:5E:66:D1:D5:B2
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       6CD2EDEE233E70D6931444BC5B2E2FAF8F5F4726
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130322e302f32342d3332203d3e203631363138.roa
Signing time:             Sun 18 Jan 2026 14:42:51 +0000
ROA not before:           Sun 18 Jan 2026 14:37:51 +0000
ROA not after:            Sun 17 Jan 2027 14:42:51 +0000
asID:                     61618
IP address blocks:        170.81.102.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl
                          rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 07:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d2:ed:ee:23:3e:70:d6:93:14:44:bc:5b:2e:2f:af:8f:5f:47:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: Jan 18 14:37:51 2026 GMT
            Not After : Jan 17 14:42:51 2027 GMT
        Subject: CN=25EDBD7A53883D1DEE7DC3514A4CD25E66D1D5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:c6:8f:43:37:ca:30:a8:a9:3a:63:be:01:
                    d2:07:0c:08:8e:76:72:ab:b7:cb:7b:92:a0:2b:73:
                    76:18:19:34:03:50:da:54:61:92:1c:91:08:ae:79:
                    1e:bf:8b:c7:09:bb:60:00:97:f6:54:df:a5:06:37:
                    ab:b3:bd:56:17:eb:1e:15:f1:ef:d6:06:fc:bd:8e:
                    dc:18:2e:fb:fe:ad:d1:fc:24:c3:ac:1e:86:b3:46:
                    12:6d:70:c3:11:00:c8:ec:c2:6e:b7:68:f2:d3:a4:
                    3f:10:01:87:77:00:3b:a5:af:2a:9d:92:cd:08:fe:
                    08:f5:ea:40:e6:44:47:32:ea:e4:18:6d:c2:86:21:
                    c2:1f:da:4b:36:bb:ca:e1:0b:ca:73:5b:89:76:e1:
                    da:29:8c:bc:09:a7:57:6b:f0:c9:39:ad:25:6d:34:
                    77:ba:df:71:64:ad:f7:5c:32:c9:1c:6e:ad:27:34:
                    ff:d8:f1:17:a8:59:cf:ef:1a:50:04:cf:77:88:6b:
                    d0:2c:fd:2c:e4:91:5e:37:af:97:e4:07:67:9c:fa:
                    00:a3:24:5a:9d:07:3b:a3:f2:49:49:dc:c4:64:42:
                    91:87:81:50:74:80:e1:73:d7:77:b6:b9:a4:03:f4:
                    05:91:72:4b:bd:d8:9f:24:c3:f2:33:12:21:a5:21:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:BD:7A:53:88:3D:1D:EE:7D:C3:51:4A:4C:D2:5E:66:D1:D5:B2
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130322e302f32342d3332203d3e203631363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:32:19:42:02:c6:bc:55:cd:3d:b4:66:34:f0:6f:92:e7:
         e4:50:51:35:b6:34:d0:ea:fe:82:74:98:33:9c:86:36:9c:b5:
         c7:5d:ff:11:66:c5:67:61:c4:e4:10:11:d4:1f:fb:99:e8:bf:
         8f:36:c2:aa:30:a3:b0:89:26:45:35:52:c0:79:b2:74:da:71:
         ae:65:ca:0e:e7:40:8d:71:f6:c0:61:e7:f5:e4:7c:63:70:47:
         e6:c9:10:ac:e3:84:ee:69:f3:86:18:09:41:e3:cc:be:72:f9:
         7d:c3:91:7d:ca:cc:03:94:b5:5d:8a:8f:02:bb:a3:74:db:14:
         b0:ea:76:5c:80:46:ab:cb:80:f6:30:f5:53:84:23:61:68:ee:
         7e:b3:d1:5c:06:f6:05:49:c2:09:83:40:a4:a9:7a:0b:5b:b2:
         eb:0e:1c:59:21:af:23:09:b4:4b:c8:4e:a6:08:86:59:c1:28:
         80:5a:1d:62:3f:14:af:fe:33:4a:9d:58:4f:6a:70:78:23:11:
         04:4b:2b:39:99:35:65:17:32:ad:2b:24:74:4a:1c:8e:8c:7d:
         82:52:63:5c:0d:34:42:69:e5:cc:eb:f6:db:7b:f0:75:20:e5:
         56:59:e1:84:dd:d4:ab:b3:23:c4:fe:37:7d:70:62:bc:b8:eb:
         3d:35:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:22:03 2026 by rpki-client