This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e34342e302e302f31372d3235203d3e203238323032.roa
File:                     3137372e34342e302e302f31372d3235203d3e203238323032.roa (raw, json)
Hash identifier:          b40YuuR92vP3Ipb7LzPZ5qBHWG0J3xGU7qzip0hoTiQ=
Subject key identifier:   93:51:5D:4C:FB:6E:7D:BD:64:04:F3:1F:AE:06:64:ED:D7:61:AD:36
Certificate issuer:       /CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
Certificate serial:       46E2E94CE31ADE265AB8A84107D1D42B58C3929A
Authority key identifier: E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e34342e302e302f31372d3235203d3e203238323032.roa
Signing time:             Mon 29 Dec 2025 17:40:43 +0000
ROA not before:           Mon 29 Dec 2025 17:35:43 +0000
ROA not after:            Mon 28 Dec 2026 17:40:43 +0000
asID:                     28202
IP address blocks:        177.44.0.0/17 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 01:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e2:e9:4c:e3:1a:de:26:5a:b8:a8:41:07:d1:d4:2b:58:c3:92:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
        Validity
            Not Before: Dec 29 17:35:43 2025 GMT
            Not After : Dec 28 17:40:43 2026 GMT
        Subject: CN=93515D4CFB6E7DBD6404F31FAE0664EDD761AD36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:f3:9b:00:f0:57:9d:31:4b:17:4b:a1:70:
                    1e:dd:17:16:10:97:2c:df:b8:65:16:83:15:26:c2:
                    53:e3:b2:93:a3:15:64:5b:a4:11:42:37:f4:8b:41:
                    c8:88:58:16:47:8e:4b:cc:e2:95:8e:84:98:f5:de:
                    02:a7:5f:91:0d:9b:21:7f:b7:7f:30:c6:ee:c2:35:
                    07:77:1b:d2:02:30:57:c9:8e:d6:38:cc:f1:7a:15:
                    56:42:bc:6d:ec:fb:f7:ca:de:51:1b:2e:7c:46:2b:
                    54:9d:3f:c9:34:9d:6b:1b:55:c8:4b:85:83:78:0e:
                    91:0a:8e:47:40:78:07:69:30:88:34:bc:1f:7e:d1:
                    7c:0a:ad:b6:39:db:06:c4:93:02:a6:41:80:bc:e0:
                    dc:8e:35:33:82:76:10:c8:a0:21:fd:dd:eb:d4:68:
                    6f:5f:b4:c6:4f:ef:7c:30:cf:31:79:17:ef:bf:cb:
                    e3:d7:dd:d1:5f:95:92:6c:e0:1d:b9:f7:dd:6d:c2:
                    98:83:96:6a:9f:21:e8:93:70:a4:e6:ee:16:58:31:
                    a9:98:d3:62:d1:a5:de:5a:63:94:92:21:01:aa:20:
                    b8:00:15:c4:65:93:d2:e2:d5:80:bd:b9:a7:25:b1:
                    0c:ef:9a:25:91:25:ae:04:e8:29:af:bc:ec:cb:d0:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:51:5D:4C:FB:6E:7D:BD:64:04:F3:1F:AE:06:64:ED:D7:61:AD:36
            X509v3 Authority Key Identifier:
                keyid:E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e34342e302e302f31372d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         98:02:05:b6:4d:71:3d:ef:f5:34:bf:f5:8a:11:d1:c3:6e:1e:
         90:ef:d7:2a:b8:3b:94:1c:80:db:1b:c4:1f:72:87:cd:ba:7d:
         77:f1:a9:49:50:99:3a:21:7f:22:59:27:ff:01:f8:d4:be:e5:
         d8:c3:41:62:74:4b:dd:ed:ad:88:99:cd:27:04:b2:93:bf:6f:
         d8:7c:64:a7:c3:d5:b8:79:56:8d:1e:e7:d6:77:78:80:de:87:
         2c:46:7c:5a:93:a3:5f:e9:41:65:f0:ef:ad:3d:1f:16:d8:8b:
         c3:e3:e7:93:da:c1:67:cc:59:45:1c:23:55:7e:f4:e6:be:2e:
         0f:eb:70:56:1e:ec:85:55:97:12:dc:91:b8:78:9a:98:be:ea:
         ac:c3:0d:46:de:2f:ce:e9:e5:f7:c9:1a:dc:ff:48:dc:7e:a2:
         db:7f:9d:7f:ed:2c:f1:2f:c6:34:dd:c7:59:40:ba:32:53:a5:
         01:62:a6:45:84:aa:5a:34:13:6b:20:eb:2a:9b:dc:06:73:d3:
         8d:ca:39:3f:36:ea:a4:4f:88:07:a4:12:35:11:9a:c8:e7:8c:
         53:05:7c:aa:22:b5:7e:58:45:80:f1:e4:48:34:20:5b:a0:9f:
         0c:c5:8b:bb:24:1f:96:26:33:bd:e5:79:1e:2a:93:78:53:d4:
         a9:bf:a6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:45 2026 by rpki-client