This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134312e302f32342d3234203d3e20323633323935.roa
File:                     3137372e39312e3134312e302f32342d3234203d3e20323633323935.roa (raw, json)
Hash identifier:          iBwrfBW8M8Bw+LvCi5o1yfmabImkwUpVg+iPPUIBtRQ=
Subject key identifier:   2A:B8:EA:50:72:A9:71:C3:E2:29:57:26:CB:39:C4:1C:09:15:A3:3E
Certificate issuer:       /CN=613CBF79379A94E8C375A67BDA9A9B4B955F4EAA
Certificate serial:       3FA29E3CDB231439450014543C0492494434AE7F
Authority key identifier: 61:3C:BF:79:37:9A:94:E8:C3:75:A6:7B:DA:9A:9B:4B:95:5F:4E:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134312e302f32342d3234203d3e20323633323935.roa
Signing time:             Fri 02 Jan 2026 19:42:41 +0000
ROA not before:           Fri 02 Jan 2026 19:37:41 +0000
ROA not after:            Fri 01 Jan 2027 19:42:41 +0000
asID:                     263295
IP address blocks:        177.91.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.crl
                          rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 09:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a2:9e:3c:db:23:14:39:45:00:14:54:3c:04:92:49:44:34:ae:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613CBF79379A94E8C375A67BDA9A9B4B955F4EAA
        Validity
            Not Before: Jan  2 19:37:41 2026 GMT
            Not After : Jan  1 19:42:41 2027 GMT
        Subject: CN=2AB8EA5072A971C3E2295726CB39C41C0915A33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:13:84:d3:f4:3c:44:fb:ed:1f:c2:80:dd:10:
                    40:08:74:50:1b:7c:70:8f:a6:d9:93:8f:a1:a8:7c:
                    b3:23:a6:ec:c8:92:16:d7:6d:2c:a6:11:34:8f:83:
                    f5:d5:be:b2:70:46:41:76:ad:b7:8e:b6:7b:b6:00:
                    aa:a5:3c:49:da:32:58:0e:ed:22:c8:68:02:43:d9:
                    20:16:03:41:51:e5:24:54:91:40:34:03:a9:aa:c9:
                    de:92:5b:93:e1:e9:b0:ef:85:35:e3:ef:0e:7e:71:
                    e7:60:57:43:b7:93:c9:59:a9:e3:ef:90:5c:59:f6:
                    1c:b2:75:68:67:96:86:5f:0c:94:a3:1d:40:cf:1e:
                    5a:93:82:51:3b:3e:40:19:60:a7:7d:99:cb:76:83:
                    a1:03:d5:43:27:fb:a3:4a:4d:88:09:cb:09:d7:61:
                    e1:80:53:6c:66:2b:39:c2:bf:a3:c4:15:94:39:12:
                    00:26:f2:a8:8f:0e:02:96:22:be:3c:22:41:88:ae:
                    bb:16:a3:e9:d5:1e:91:82:b1:bd:1b:b5:64:e6:8f:
                    ea:c9:45:51:f9:23:f6:0d:f6:ac:88:12:a7:e3:2c:
                    b8:f2:eb:0c:d1:3a:d9:b5:b5:a1:9c:58:37:ec:28:
                    4f:07:7a:1e:e4:cf:0f:5d:0d:1c:98:05:db:ac:a6:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B8:EA:50:72:A9:71:C3:E2:29:57:26:CB:39:C4:1C:09:15:A3:3E
            X509v3 Authority Key Identifier:
                keyid:61:3C:BF:79:37:9A:94:E8:C3:75:A6:7B:DA:9A:9B:4B:95:5F:4E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134312e302f32342d3234203d3e20323633323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:3f:f7:3e:66:97:7f:54:8b:7f:ce:36:db:2f:fc:75:57:65:
         11:00:0c:da:ac:09:1e:43:98:89:00:0d:a0:84:72:f7:f2:31:
         cf:56:99:9a:2d:bc:c4:8c:49:0d:8a:5a:34:04:b3:13:81:f4:
         50:39:43:c6:ba:86:43:24:5a:33:89:36:d3:05:32:00:9f:8d:
         ce:74:42:79:43:42:63:e6:26:1c:8b:c0:15:6e:b4:36:27:50:
         1e:a8:f9:d9:04:0c:1c:12:87:4f:67:78:5d:4e:8f:6f:f4:a2:
         8d:f4:cd:94:7a:a7:97:e3:26:58:59:cc:ed:b2:ae:e0:5a:12:
         0b:ec:bc:ca:8d:7c:58:5e:42:5f:38:22:67:a6:da:d4:a5:1b:
         5c:90:0b:ab:a7:2d:7a:7b:13:e3:e4:c2:37:43:60:71:0b:7c:
         77:d2:25:78:7b:2b:74:9b:b7:1c:bb:12:70:67:2f:7a:b7:38:
         f6:ad:df:00:cc:17:c4:80:f4:ea:6d:ff:6f:48:92:c8:38:f2:
         a3:89:73:1c:e8:03:09:ee:10:50:c3:68:ca:dc:2e:32:f6:11:
         e7:05:f5:39:09:af:30:27:b5:a1:75:ea:1e:f5:22:86:c2:cc:
         7e:86:7e:5b:cd:5d:1d:9f:32:59:1a:45:80:8f:fc:b1:94:17:
         00:00:79:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP6KePNsjFDlFABRUPASSSUQ0rn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEzQ0JGNzkzNzlBOTRFOEMzNzVBNjdCREE5QTlCNEI5
NTVGNEVBQTAeFw0yNjAxMDIxOTM3NDFaFw0yNzAxMDExOTQyNDFaMDMxMTAvBgNV
BAMTKDJBQjhFQTUwNzJBOTcxQzNFMjI5NTcyNkNCMzlDNDFDMDkxNUEzM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtE4TT9DxE++0fwoDdEEAIdFAb
fHCPptmTj6GofLMjpuzIkhbXbSymETSPg/XVvrJwRkF2rbeOtnu2AKqlPEnaMlgO
7SLIaAJD2SAWA0FR5SRUkUA0A6mqyd6SW5Ph6bDvhTXj7w5+cedgV0O3k8lZqePv
kFxZ9hyydWhnloZfDJSjHUDPHlqTglE7PkAZYKd9mct2g6ED1UMn+6NKTYgJywnX
YeGAU2xmKznCv6PEFZQ5EgAm8qiPDgKWIr48IkGIrrsWo+nVHpGCsb0btWTmj+rJ
RVH5I/YN9qyIEqfjLLjy6wzROtm1taGcWDfsKE8Heh7kzw9dDRyYBduspsqLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKrjqUHKpccPiKVcmyznEHAkVoz4wHwYDVR0j
BBgwFoAUYTy/eTealOjDdaZ72pqbS5VfTqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEIzNEZiekRjRkpXemVaOUVDWDlRSHhmNzdtTDlITU1tZDliQXBodlV0
ZE4vMC82MTNDQkY3OTM3OUE5NEU4QzM3NUE2N0JEQTlBOUI0Qjk1NUY0RUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxM0NCRjc5Mzc5QTk0RThD
Mzc1QTY3QkRBOUE5QjRCOTU1RjRFQUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCMzRGYnpEY0ZKV3plWjlFQ1g5UUh4Zjc3bUw5SE1NbWQ5YkFwaHZVdGROLzAv
MzEzNzM3MmUzOTMxMmUzMTM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxW40wDQYJKoZIhvcNAQELBQADggEBALE/9z5m
l39Ui3/ONtsv/HVXZREADNqsCR5DmIkADaCEcvfyMc9WmZotvMSMSQ2KWjQEsxOB
9FA5Q8a6hkMkWjOJNtMFMgCfjc50QnlDQmPmJhyLwBVutDYnUB6o+dkEDBwSh09n
eF1Oj2/0oo30zZR6p5fjJlhZzO2yruBaEgvsvMqNfFheQl84Imem2tSlG1yQC6un
LXp7E+PkwjdDYHELfHfSJXh7K3Sbtxy7EnBnL3q3OPat3wDMF8SA9Opt/29Iksg4
8qOJcxzoAwnuEFDDaMrcLjL2EecF9TkJrzAntaF16h71IobCzH6GflvNXR2fMlka
RYCP/LGUFwAAecY=
-----END CERTIFICATE-----
Generated at Mon Jan 26 12:58:22 2026 by rpki-client