This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231372e302f32342d3234203d3e20323632343532.roa
File:                     3137372e35322e3231372e302f32342d3234203d3e20323632343532.roa (raw, json)
Hash identifier:          phNhW2RD7Fnsn2Y4hZ7QopX+G16RW/74dExLOpFXKRQ=
Subject key identifier:   3A:26:BC:FE:33:95:85:27:14:92:CF:8A:D0:C1:8C:91:F5:80:8B:36
Certificate issuer:       /CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9
Certificate serial:       43F00F017B4FB716047B9E5318754D6535AE77B3
Authority key identifier: F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231372e302f32342d3234203d3e20323632343532.roa
Signing time:             Wed 14 Jan 2026 01:00:13 +0000
ROA not before:           Wed 14 Jan 2026 00:55:13 +0000
ROA not after:            Wed 13 Jan 2027 01:00:13 +0000
asID:                     262452
IP address blocks:        177.52.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl
                          rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f0:0f:01:7b:4f:b7:16:04:7b:9e:53:18:75:4d:65:35:ae:77:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9
        Validity
            Not Before: Jan 14 00:55:13 2026 GMT
            Not After : Jan 13 01:00:13 2027 GMT
        Subject: CN=3A26BCFE339585271492CF8AD0C18C91F5808B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:91:19:e1:17:29:82:ce:87:31:7e:f1:47:
                    48:fe:69:19:cc:a0:43:0f:ba:a3:b3:06:a6:c0:3d:
                    bf:4d:d8:81:d3:b4:17:85:91:15:13:39:df:3f:fc:
                    1f:c3:cd:14:3e:d6:4b:d5:3f:ea:63:b1:cf:87:49:
                    2e:a7:51:87:23:6f:b4:fc:31:a4:9b:f8:66:6f:4a:
                    cd:b2:a3:d9:39:e3:4c:6f:2a:cb:a0:50:dc:b8:9b:
                    07:8e:16:d6:e5:49:26:fd:d2:13:7e:d7:9f:b2:11:
                    91:e4:bc:33:64:14:55:57:df:c7:83:da:fe:32:29:
                    b2:31:b2:50:2e:94:23:fb:dc:42:40:bf:ba:3a:27:
                    d6:0f:b0:a3:45:d0:76:85:f8:b1:aa:ea:f3:40:60:
                    db:d1:35:9f:17:12:6f:72:b4:32:48:89:60:0b:2d:
                    0c:ec:89:87:3e:6b:f1:a7:a5:33:b5:c3:93:f1:54:
                    d1:a9:28:2a:29:8a:86:b2:92:33:b4:b1:e8:22:c3:
                    a7:7e:53:d2:0e:84:01:51:c8:22:c3:07:8b:8e:6a:
                    e7:cd:3c:8f:07:6a:7e:c5:02:9f:2f:eb:5c:1d:b0:
                    7b:57:d9:1e:9f:73:13:e0:23:69:e3:0c:2d:0a:9d:
                    1c:2d:0e:54:2c:f0:41:62:dd:2e:5d:86:05:61:c6:
                    8e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:BC:FE:33:95:85:27:14:92:CF:8A:D0:C1:8C:91:F5:80:8B:36
            X509v3 Authority Key Identifier:
                keyid:F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231372e302f32342d3234203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:07:79:bb:75:80:0c:14:45:f3:ef:3a:6a:64:68:7e:86:
         49:9d:5d:73:2d:70:15:87:84:df:76:37:44:ca:5e:bc:6e:b4:
         5e:98:d6:3a:5a:35:a4:41:9b:b1:a0:e9:6f:3b:e6:1f:d5:f6:
         88:2a:98:ac:c6:b6:d0:c9:39:e4:86:03:30:6e:86:a4:bc:4b:
         c3:65:fe:52:0a:64:75:bc:1c:bb:6b:d1:16:05:ab:dd:02:a0:
         75:98:46:ca:83:23:65:74:1e:b4:9a:8f:36:c5:20:9a:99:88:
         3b:13:d8:06:fd:f4:1e:9e:92:44:0b:1c:b3:c4:7b:89:07:c4:
         26:95:a1:2a:ac:7c:8d:14:0a:93:00:87:82:9b:a1:01:96:14:
         15:e8:20:69:61:3d:82:e1:aa:ca:af:55:1a:3c:9b:a7:3a:4e:
         a5:d3:a3:fe:ee:e4:44:0b:fa:49:7b:73:3e:55:80:b1:42:d9:
         0a:a5:16:64:5c:d3:81:1a:e8:b6:dd:54:df:b7:c6:98:18:8a:
         0a:e8:53:64:33:7a:a5:01:ae:1d:a0:f3:34:b8:a1:8a:47:a2:
         0e:c3:4b:4a:00:7b:52:b5:cf:26:e0:bc:01:e9:50:02:9c:aa:
         ef:f8:90:52:3f:39:9d:c0:02:c7:b5:c2:c1:fa:50:b3:c7:b5:
         93:4c:89:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:25:19 2026 by rpki-client