This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa
File:                     3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier:          tDxJodocBVe0JiZLrcLycdHpWWqEbldskWduEaL6rkY=
Subject key identifier:   07:1E:A9:BB:14:45:DD:0D:3B:5A:7E:D1:01:0D:C9:00:36:10:3E:F0
Certificate issuer:       /CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
Certificate serial:       0B64E185BED3D0A9FE1BF2FAC5120DCFAB278B0B
Authority key identifier: E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa
Signing time:             Mon 29 Dec 2025 17:40:42 +0000
ROA not before:           Mon 29 Dec 2025 17:35:42 +0000
ROA not after:            Mon 28 Dec 2026 17:40:42 +0000
asID:                     28202
IP address blocks:        177.130.128.0/19 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:64:e1:85:be:d3:d0:a9:fe:1b:f2:fa:c5:12:0d:cf:ab:27:8b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
        Validity
            Not Before: Dec 29 17:35:42 2025 GMT
            Not After : Dec 28 17:40:42 2026 GMT
        Subject: CN=071EA9BB1445DD0D3B5A7ED1010DC90036103EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:a3:7d:e6:97:b6:e1:fd:38:79:91:3d:fd:
                    68:33:27:0d:ef:6d:a9:2a:09:53:08:45:f4:c5:e3:
                    2b:43:74:36:61:75:7f:df:a5:f9:f1:c9:4e:13:44:
                    77:eb:c6:01:19:a0:6b:c4:93:dc:e1:4d:47:60:d6:
                    02:d2:72:1d:1f:8b:58:0f:8e:4f:eb:1a:ca:f5:02:
                    69:a8:5e:d9:79:e4:fb:66:96:bf:ce:18:b0:8a:09:
                    3b:03:39:c9:e2:86:45:61:e7:6c:ef:c3:77:29:90:
                    ae:d5:0e:83:d5:94:cf:2f:99:6e:c7:12:84:0e:98:
                    a7:04:03:67:85:1f:1e:61:82:a7:8d:29:6a:07:3a:
                    1a:d5:ba:8a:c0:3f:1e:bb:ee:82:f9:50:30:f9:04:
                    ae:92:8a:d5:b6:fd:81:33:f3:34:be:69:c1:48:ea:
                    1f:c9:e5:08:b4:61:ad:f4:20:07:10:72:ee:bd:a8:
                    86:24:71:d9:05:87:a7:02:68:8c:40:76:3b:6b:1c:
                    89:e5:7a:75:8a:46:ab:4d:a7:8a:ee:a0:92:5c:73:
                    22:e0:46:23:4b:62:42:75:55:f9:a4:83:ff:fc:2c:
                    e6:bc:f9:50:af:b0:1e:f3:37:63:68:4c:3a:72:10:
                    bd:81:46:42:4c:53:7f:db:97:01:2d:da:49:b0:32:
                    cd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1E:A9:BB:14:45:DD:0D:3B:5A:7E:D1:01:0D:C9:00:36:10:3E:F0
            X509v3 Authority Key Identifier:
                keyid:E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:49:31:ed:6b:e8:b4:76:b9:d5:6c:d3:de:90:f8:af:16:
         7e:1b:90:fc:d6:2e:ff:08:1f:fa:06:7c:33:20:f2:88:f4:7d:
         25:5e:16:3c:b6:84:a3:55:f7:1e:34:3e:31:19:94:8b:e1:56:
         99:cd:60:40:5b:e0:f5:1e:e1:b2:04:87:f0:9d:79:7b:14:7a:
         0c:7f:a7:4f:58:b3:52:e3:04:90:13:73:24:43:63:24:b9:e5:
         ff:d0:fc:31:e0:c1:ca:aa:5a:47:21:e5:fe:d9:e2:b1:a9:ee:
         59:32:34:b5:40:10:a4:dd:25:70:8d:a5:8d:ab:05:9d:44:c0:
         29:67:cc:43:73:b2:47:76:8d:f3:7a:0b:a7:7a:37:dd:17:4e:
         7c:8d:2b:1a:24:47:c7:29:a5:96:0c:38:51:5e:21:30:d8:49:
         7a:ee:e7:dd:9b:a8:f0:ef:7e:65:5e:91:8d:cc:8e:c9:df:09:
         d4:e8:5a:b7:13:7c:89:41:98:85:1d:6f:c4:32:e5:9e:f6:d1:
         31:ff:3c:f0:7c:9b:75:ab:8d:05:79:7a:0c:06:bf:3a:63:a1:
         f6:3f:b4:70:82:01:93:73:c3:3c:f4:21:3b:06:40:3b:fa:38:
         8e:2f:ae:7d:22:3d:d0:e2:42:60:98:30:23:38:4b:6e:15:1b:
         4e:2e:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:22:33 2026 by rpki-client