This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130312e302f32342d3234203d3e20323731333938.roa
File:                     3138312e3138392e3130312e302f32342d3234203d3e20323731333938.roa (raw, json)
Hash identifier:          3CwFi2vZodWJmVrKwTREARXIaCdBEfqWO64wUAFaojY=
Subject key identifier:   31:A2:14:EC:C7:47:10:AA:E6:82:D3:6E:CD:F4:7C:7E:AA:73:6E:20
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       334CE8C3DA6E0EAAAAF879094AAB608174CF2C7B
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130312e302f32342d3234203d3e20323731333938.roa
Signing time:             Tue 20 Jan 2026 19:12:58 +0000
ROA not before:           Tue 20 Jan 2026 19:07:58 +0000
ROA not after:            Tue 19 Jan 2027 19:12:58 +0000
asID:                     271398
IP address blocks:        181.189.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl
                          rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 05:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4c:e8:c3:da:6e:0e:aa:aa:f8:79:09:4a:ab:60:81:74:cf:2c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Jan 20 19:07:58 2026 GMT
            Not After : Jan 19 19:12:58 2027 GMT
        Subject: CN=31A214ECC74710AAE682D36ECDF47C7EAA736E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:55:33:04:a8:ee:6a:97:fb:a3:01:7e:d5:
                    9c:2b:20:b7:c6:81:44:fa:bd:d1:81:19:73:b1:ff:
                    42:85:a3:2b:a8:3c:c0:16:c8:bd:f7:c7:b6:68:68:
                    e9:ad:f6:1e:96:ff:38:6e:d5:cf:1c:06:35:e3:1f:
                    63:b4:76:10:31:38:93:b4:b3:4e:28:02:3c:e2:cb:
                    ce:5d:e5:00:e8:e7:f6:01:35:6a:9d:eb:0b:2b:c9:
                    8d:1b:0f:bd:93:55:ef:9f:70:e2:a6:b6:54:dc:bd:
                    db:05:52:a7:d2:1c:c4:cb:90:e5:e9:53:04:e9:56:
                    49:e3:cf:55:a2:25:8b:46:4e:9e:db:25:28:cd:2c:
                    4e:e2:70:c3:2e:34:4f:fe:35:ae:95:c0:5f:b2:15:
                    53:0c:a4:9f:5e:0f:d7:c0:6d:55:61:74:1a:5b:20:
                    51:96:49:f1:b5:a7:76:7c:ce:40:91:6c:3e:9b:91:
                    37:d0:e6:f6:51:63:5a:a0:37:92:e0:0f:36:1b:1e:
                    78:ee:a4:8a:f8:07:c2:94:0f:d8:08:74:27:24:d1:
                    89:98:f8:75:3a:05:54:0a:11:28:bc:99:b7:1d:cf:
                    50:5e:63:f7:a9:be:84:75:33:89:b1:34:38:84:33:
                    e8:ac:a8:90:42:c0:f6:45:89:13:4e:5f:cc:4f:33:
                    35:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A2:14:EC:C7:47:10:AA:E6:82:D3:6E:CD:F4:7C:7E:AA:73:6E:20
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130312e302f32342d3234203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:3d:55:f8:31:fe:5a:40:93:a1:9e:50:ca:0d:8e:59:c6:
         9a:b1:6f:cb:df:2c:94:17:de:5c:30:e7:f0:68:ab:10:61:37:
         90:b0:a0:ce:ae:f7:2a:71:3e:5d:25:c2:83:4e:d4:32:b0:84:
         42:cf:bf:b0:6b:36:3d:bf:b2:2a:e7:32:2d:b6:b9:b0:f7:d8:
         32:38:df:61:9c:38:aa:36:0e:bd:c7:3f:c2:c3:49:aa:c1:47:
         91:5d:ea:1f:f7:1d:4a:68:da:cf:47:7d:f6:72:8e:b2:dd:97:
         5a:4e:26:fd:e8:6f:54:18:67:ab:70:be:20:22:e4:11:43:a4:
         f2:f8:ca:8b:09:db:ec:af:3d:6d:70:aa:ae:32:ab:4a:72:68:
         21:74:29:be:e9:0d:a4:b6:eb:6b:dd:e9:81:4c:db:ec:f0:b2:
         99:12:5e:0c:7e:b0:ad:71:cd:d0:bd:7a:93:b9:78:37:9c:73:
         2b:42:01:39:f5:3e:d3:7b:be:83:86:91:bf:07:d1:cc:ac:10:
         f3:7c:bb:e3:d2:53:d5:f6:c6:6f:99:0d:cb:11:bf:ea:d1:71:
         57:f2:6c:9a:06:8e:e8:ee:b2:51:d7:ad:e3:df:e0:41:c3:11:
         4a:ec:d9:64:2d:f4:30:e3:45:dc:f1:02:a2:75:b7:1a:e7:01:
         1c:e4:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:18 2026 by rpki-client