This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e31362e302f32312d3332203d3e20323634323934.roa
File:                     3137372e3130372e31362e302f32312d3332203d3e20323634323934.roa (raw, json)
Hash identifier:          n1OsIO/KSgXnKIaCtY2Ihu+JDfNplDnwS145uIS47+A=
Subject key identifier:   8D:D1:BA:9C:F9:54:C6:44:84:1B:53:F7:DC:7C:95:43:FC:C5:17:2D
Certificate issuer:       /CN=134F37BD7F0154E037FB50124BEEA50F6B2BFC37
Certificate serial:       5335FCE6627F06063A162F59D977178460CC117C
Authority key identifier: 13:4F:37:BD:7F:01:54:E0:37:FB:50:12:4B:EE:A5:0F:6B:2B:FC:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e31362e302f32312d3332203d3e20323634323934.roa
Signing time:             Thu 15 Jan 2026 13:35:37 +0000
ROA not before:           Thu 15 Jan 2026 13:30:37 +0000
ROA not after:            Thu 14 Jan 2027 13:35:37 +0000
asID:                     264294
IP address blocks:        177.107.16.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.crl
                          rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:35:fc:e6:62:7f:06:06:3a:16:2f:59:d9:77:17:84:60:cc:11:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134F37BD7F0154E037FB50124BEEA50F6B2BFC37
        Validity
            Not Before: Jan 15 13:30:37 2026 GMT
            Not After : Jan 14 13:35:37 2027 GMT
        Subject: CN=8DD1BA9CF954C644841B53F7DC7C9543FCC5172D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:a1:65:de:b0:24:4b:74:34:53:bc:aa:58:
                    80:2a:02:85:e6:ae:7d:11:f6:0d:43:3d:fd:83:39:
                    2b:57:85:67:cb:64:45:00:08:1d:3f:be:e8:18:c9:
                    85:93:96:27:42:21:29:c8:46:2d:86:ef:34:39:2c:
                    a8:72:18:bc:04:54:5b:85:92:36:4a:2f:df:b9:b1:
                    16:91:f2:df:24:b2:7b:31:f5:de:a4:d4:a4:1d:b6:
                    63:09:8d:69:85:3b:16:3d:d3:3d:25:72:8c:18:09:
                    d3:83:0a:65:f5:8f:f0:e0:fe:84:0f:d5:95:6d:a5:
                    fd:fc:0d:26:c8:bc:89:1c:4a:a9:23:4d:a2:ee:68:
                    8d:45:86:32:bc:f6:0d:26:40:93:bf:86:59:60:0b:
                    1c:d2:fa:ff:26:d2:2c:3c:ff:a9:68:bc:9b:95:e1:
                    6d:ab:7e:8c:28:32:a9:87:e1:0d:49:8a:d6:83:e0:
                    80:32:ba:bf:59:7b:f3:89:88:94:7f:38:ae:d2:e4:
                    ad:3f:29:59:06:75:11:75:82:fa:97:72:6d:21:25:
                    18:c5:3d:4e:96:b3:f9:53:ea:58:1c:de:ab:29:fb:
                    8e:5b:41:b2:bd:5c:c0:72:42:8f:a0:a2:21:ec:f8:
                    a2:5d:8e:5e:6a:77:63:f2:40:97:9b:1d:f9:51:7c:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D1:BA:9C:F9:54:C6:44:84:1B:53:F7:DC:7C:95:43:FC:C5:17:2D
            X509v3 Authority Key Identifier:
                keyid:13:4F:37:BD:7F:01:54:E0:37:FB:50:12:4B:EE:A5:0F:6B:2B:FC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e31362e302f32312d3332203d3e20323634323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:3f:48:e1:72:08:b8:77:d6:2d:28:d7:53:2c:66:c0:22:ea:
         1a:76:8b:7f:2d:a5:d1:86:8e:47:f4:8f:ea:33:08:5d:ef:29:
         3f:42:b0:b1:d7:7a:74:d9:4b:fa:c5:cf:14:4b:28:de:30:af:
         f0:ee:7e:ce:bc:ef:9a:26:30:05:a2:cd:3f:a3:33:e4:28:86:
         32:a0:8a:3d:26:e6:9a:fc:7a:58:b8:1e:b0:10:61:61:a9:30:
         1a:a0:95:c0:2b:1a:bd:20:2d:4b:52:c6:01:eb:39:26:66:66:
         22:7f:0c:8b:89:d3:98:93:2b:87:ae:97:fe:52:a1:c3:54:53:
         fb:cc:33:86:01:c5:38:79:c2:c3:e4:f3:e3:55:e0:40:29:09:
         81:47:cd:3a:92:e1:ff:d9:bf:b9:ed:6d:bf:88:e3:6d:a6:d1:
         fd:1d:39:12:ac:78:3c:35:35:75:5a:b7:6b:f7:b0:1d:3e:e2:
         09:a8:4f:c8:d2:e8:68:7e:d0:81:3f:33:7b:2e:a4:e4:33:cb:
         b5:dd:86:50:2b:99:2b:1d:16:97:e9:ea:be:af:0b:02:7c:e6:
         8c:ea:9f:7e:ec:aa:c2:f3:ea:a7:9e:7b:21:a4:3a:a8:0c:50:
         96:5f:69:07:7d:6a:6b:04:c0:ff:fb:51:f8:a4:ba:91:7b:d9:
         34:26:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:51:50 2026 by rpki-client