This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38342e302f32332d3233203d3e203532373030.roa
File:                     3137372e37332e38342e302f32332d3233203d3e203532373030.roa (raw, json)
Hash identifier:          E4/QK+2H1YMU/LCgZhoL/JmswyiykCSV9Ksc4wFRdg4=
Subject key identifier:   60:E4:16:B7:C7:BE:F4:06:3A:D5:91:8F:B3:82:BE:B3:D6:1C:AF:DD
Certificate issuer:       /CN=9BFF670A0A74B3B2422C208B200EB041C1A3479B
Certificate serial:       5DFBCF520D4FE8232A6EFFF1C4BBF0518E2EEC3A
Authority key identifier: 9B:FF:67:0A:0A:74:B3:B2:42:2C:20:8B:20:0E:B0:41:C1:A3:47:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BFF670A0A74B3B2422C208B200EB041C1A3479B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38342e302f32332d3233203d3e203532373030.roa
Signing time:             Wed 21 Jan 2026 22:44:22 +0000
ROA not before:           Wed 21 Jan 2026 22:39:22 +0000
ROA not after:            Wed 20 Jan 2027 22:44:22 +0000
asID:                     52700
IP address blocks:        177.73.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/9BFF670A0A74B3B2422C208B200EB041C1A3479B.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/9BFF670A0A74B3B2422C208B200EB041C1A3479B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BFF670A0A74B3B2422C208B200EB041C1A3479B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 22:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fb:cf:52:0d:4f:e8:23:2a:6e:ff:f1:c4:bb:f0:51:8e:2e:ec:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFF670A0A74B3B2422C208B200EB041C1A3479B
        Validity
            Not Before: Jan 21 22:39:22 2026 GMT
            Not After : Jan 20 22:44:22 2027 GMT
        Subject: CN=60E416B7C7BEF4063AD5918FB382BEB3D61CAFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:d5:9c:93:bd:49:8d:3a:d1:ff:d4:58:95:
                    76:ca:7c:36:36:9d:8f:58:19:94:bf:89:56:f7:2c:
                    b9:16:c2:d6:a6:67:78:8f:cf:46:23:92:7e:b2:58:
                    5f:1f:08:76:11:07:c5:39:1b:fd:80:ab:e3:cd:e0:
                    5a:62:f3:c4:3b:80:24:a0:00:ef:42:79:a1:da:8f:
                    db:dc:ab:7f:33:4e:3b:6f:50:3a:f1:69:1f:02:18:
                    66:92:18:fe:0b:46:85:5f:2b:91:f8:88:26:72:e0:
                    23:c9:a0:45:18:5e:50:1d:ee:7a:32:e5:5a:ce:ef:
                    6b:81:fd:26:d6:08:68:63:e4:f3:ec:80:b0:18:b2:
                    f2:ea:dc:39:ea:d4:f9:ed:33:1f:d4:08:92:7a:99:
                    d5:6e:d8:bb:e5:b8:0d:35:25:90:f3:09:e8:38:42:
                    29:e3:e7:98:f7:c6:b0:ce:97:d9:1e:62:17:f6:93:
                    84:49:28:c8:25:fb:95:cb:d6:3e:8b:c9:c3:7e:08:
                    79:ad:d2:12:8e:eb:b9:d5:4a:96:0d:38:62:59:80:
                    d2:c9:0a:71:89:e8:b1:72:c2:52:70:56:b2:24:67:
                    88:f9:c5:e4:8c:34:ba:78:ca:0b:2e:cc:0b:68:1b:
                    77:21:3e:f2:be:7d:ee:c5:e7:c0:de:a1:e0:51:31:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E4:16:B7:C7:BE:F4:06:3A:D5:91:8F:B3:82:BE:B3:D6:1C:AF:DD
            X509v3 Authority Key Identifier:
                keyid:9B:FF:67:0A:0A:74:B3:B2:42:2C:20:8B:20:0E:B0:41:C1:A3:47:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/9BFF670A0A74B3B2422C208B200EB041C1A3479B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BFF670A0A74B3B2422C208B200EB041C1A3479B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38342e302f32332d3233203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:03:5f:0e:fc:17:39:f4:63:55:76:87:73:b6:80:fb:18:
         ae:c6:a9:d4:80:ba:3c:b6:52:76:94:2b:17:32:c8:2e:00:85:
         5d:8c:4a:d5:38:a4:64:c7:11:d0:7c:ac:95:19:67:56:55:30:
         61:8f:cb:ac:ee:c9:18:78:a1:31:60:78:10:70:8a:ed:5e:35:
         e6:25:91:87:28:e4:c1:05:45:71:46:16:e7:a6:8b:bd:36:bb:
         a3:5a:eb:04:a0:b4:ae:08:98:c7:79:9c:d0:0a:fb:2f:a8:f3:
         85:51:d2:ec:ec:90:01:67:92:6d:75:ff:cd:06:c3:7d:c8:7f:
         90:92:cd:6e:89:7e:7a:00:55:78:a8:6c:a5:06:52:84:c4:af:
         fb:97:44:bb:24:cd:cf:49:bd:96:c3:7f:5b:bc:45:69:37:de:
         69:d7:70:1e:51:e9:72:99:42:c9:65:33:f0:bb:aa:07:da:46:
         9c:89:23:dc:76:8d:6e:a4:a0:a8:9a:ac:f9:b2:71:ee:b1:4d:
         fb:e2:7c:06:b0:d3:06:91:3a:cc:1d:ef:cb:5f:29:84:c4:7e:
         51:85:82:e4:0a:9d:f4:c4:bf:59:54:38:c5:41:04:60:60:90:
         db:9b:22:43:5d:8f:a6:7c:84:d5:40:da:7f:db:cd:2b:32:e9:
         9d:58:ec:29
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXfvPUg1P6CMqbv/xxLvwUY4u7DowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGRjY3MEEwQTc0QjNCMjQyMkMyMDhCMjAwRUIwNDFD
MUEzNDc5QjAeFw0yNjAxMjEyMjM5MjJaFw0yNzAxMjAyMjQ0MjJaMDMxMTAvBgNV
BAMTKDYwRTQxNkI3QzdCRUY0MDYzQUQ1OTE4RkIzODJCRUIzRDYxQ0FGREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubtWck71JjTrR/9RYlXbKfDY2
nY9YGZS/iVb3LLkWwtamZ3iPz0Yjkn6yWF8fCHYRB8U5G/2Aq+PN4Fpi88Q7gCSg
AO9CeaHaj9vcq38zTjtvUDrxaR8CGGaSGP4LRoVfK5H4iCZy4CPJoEUYXlAd7noy
5VrO72uB/SbWCGhj5PPsgLAYsvLq3Dnq1PntMx/UCJJ6mdVu2LvluA01JZDzCeg4
Qinj55j3xrDOl9keYhf2k4RJKMgl+5XL1j6LycN+CHmt0hKO67nVSpYNOGJZgNLJ
CnGJ6LFywlJwVrIkZ4j5xeSMNLp4ygsuzAtoG3chPvK+fe7F58DeoeBRMR5/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUYOQWt8e+9AY61ZGPs4K+s9Ycr90wHwYDVR0j
BBgwFoAUm/9nCgp0s7JCLCCLIA6wQcGjR5swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlVekM5bWV1aFNnd1JoUGd5R1k0dkJKN0tZUGVValZ4VnVWdm9QSkRI
b1ovMC85QkZGNjcwQTBBNzRCM0IyNDIyQzIwOEIyMDBFQjA0MUMxQTM0NzlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCRkY2NzBBMEE3NEIzQjI0
MjJDMjA4QjIwMEVCMDQxQzFBMzQ3OUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5VXpDOW1ldWhTZ3dSaFBneUdZNHZCSjdLWVBlVWpWeFZ1VnZvUEpESG9aLzAv
MzEzNzM3MmUzNzMzMmUzODM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM3
MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbFJVDANBgkqhkiG9w0BAQsFAAOCAQEATrMDXw78Fzn0
Y1V2h3O2gPsYrsap1IC6PLZSdpQrFzLILgCFXYxK1TikZMcR0HyslRlnVlUwYY/L
rO7JGHihMWB4EHCK7V415iWRhyjkwQVFcUYW56aLvTa7o1rrBKC0rgiYx3mc0Ar7
L6jzhVHS7OyQAWeSbXX/zQbDfch/kJLNbol+egBVeKhspQZShMSv+5dEuyTNz0m9
lsN/W7xFaTfeaddwHlHpcplCyWUz8LuqB9pGnIkj3HaNbqSgqJqs+bJx7rFN++J8
BrDTBpE6zB3vy18phMR+UYWC5Aqd9MS/WVQ4xUEEYGCQ25siQ12PpnyE1UDaf9vN
KzLpnVjsKQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:05 2026 by rpki-client