This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130322e302f32332d3233203d3e20323731333938.roa
File:                     3138312e3138392e3130322e302f32332d3233203d3e20323731333938.roa (raw, json)
Hash identifier:          0+l6Cqh5eofaGc93uOFKCCAGFrzwf/eGRm6wbIu1TlU=
Subject key identifier:   64:DC:FC:85:78:5E:01:DF:8E:EB:D6:54:29:3C:C4:3A:51:70:2A:30
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       6A0B8F7199FF5346E748C2E21FB1C7099C46E6E9
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130322e302f32332d3233203d3e20323731333938.roa
Signing time:             Tue 20 Jan 2026 19:12:58 +0000
ROA not before:           Tue 20 Jan 2026 19:07:58 +0000
ROA not after:            Tue 19 Jan 2027 19:12:58 +0000
asID:                     271398
IP address blocks:        181.189.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl
                          rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 05:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:8f:71:99:ff:53:46:e7:48:c2:e2:1f:b1:c7:09:9c:46:e6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Jan 20 19:07:58 2026 GMT
            Not After : Jan 19 19:12:58 2027 GMT
        Subject: CN=64DCFC85785E01DF8EEBD654293CC43A51702A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:61:0f:36:c8:94:d1:b8:21:56:3c:a1:c2:
                    10:3c:fe:9e:e2:c1:d8:f2:e4:31:68:ff:9e:57:06:
                    64:12:59:1b:01:14:9e:64:fc:27:0d:fd:4d:f2:32:
                    0e:8a:cc:64:7e:b8:8a:f3:4a:03:91:89:4f:85:9c:
                    ac:c3:90:63:81:1e:07:30:82:cd:f9:ee:6b:c1:70:
                    f1:ba:3b:99:a7:e1:b9:2c:e6:34:52:53:2d:50:cf:
                    e2:c3:ed:f4:dc:96:9a:6c:c8:15:61:f0:7b:7f:f4:
                    78:7f:84:08:79:93:b1:50:88:36:54:01:1a:8e:05:
                    b2:ac:63:a5:b9:cf:61:42:15:dc:2e:c2:ed:4f:c8:
                    75:39:7d:a1:ce:da:26:1e:c8:c2:97:52:26:bf:82:
                    55:14:ad:23:a3:61:dd:44:fc:6a:fc:89:2a:8a:76:
                    47:d3:46:ba:80:af:77:d3:1b:55:26:72:54:8f:70:
                    65:5c:79:b9:fb:bf:04:e1:4c:d0:87:c0:f7:00:2c:
                    4e:e8:7e:58:d5:76:d7:49:04:cd:b8:3d:d5:87:da:
                    60:e3:6f:a8:8e:45:79:35:7a:85:f4:9c:ab:09:14:
                    16:a5:eb:4f:83:fd:e7:c4:10:85:db:6b:1c:5a:2d:
                    87:bb:75:0c:85:d5:fa:1e:35:88:2f:67:b6:fa:a9:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DC:FC:85:78:5E:01:DF:8E:EB:D6:54:29:3C:C4:3A:51:70:2A:30
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130322e302f32332d3233203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:89:a5:f5:fe:b2:a6:f1:9c:3c:6c:39:e0:3a:24:07:ad:
         ff:86:52:14:58:6c:4c:d1:c0:d1:67:25:c6:f4:eb:8e:f0:d2:
         3d:79:9b:63:ed:19:de:87:eb:3b:65:8b:67:95:c9:be:13:34:
         38:3d:5f:4d:37:a5:10:54:b1:aa:82:3a:e1:c8:d6:f1:54:a5:
         2e:ed:47:5b:90:e7:d7:3b:78:b4:36:2a:20:19:4b:bd:a9:e7:
         8c:a9:76:50:0b:f8:8e:41:68:f8:fa:8e:3a:e2:c4:c6:3b:c0:
         c4:e4:ce:33:d0:99:3f:1e:ce:03:fe:7c:0f:02:4f:cb:28:87:
         a3:e3:8d:f4:55:6a:db:dc:25:ea:38:3f:cb:27:fe:e4:ce:46:
         10:b8:60:a1:bc:d1:ee:1f:de:36:8d:e0:50:4a:04:21:ad:c7:
         10:b5:f4:b7:9d:f9:d3:f2:dc:2e:c0:36:62:f3:9a:3f:70:c5:
         15:a2:ba:b3:66:1a:b0:67:93:11:f2:b7:90:b0:df:59:3f:92:
         35:70:35:dd:eb:3d:bb:40:d4:2c:74:55:33:f4:be:b3:6d:2b:
         45:05:3d:c7:af:4d:07:be:1f:ee:0b:5a:96:41:35:3e:2d:6f:
         56:c2:f1:e7:fa:5d:0b:16:63:86:46:f3:59:1c:8f:6b:93:81:
         68:85:73:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:21 2026 by rpki-client