This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3332203d3e203532353933.roa
File:                     3137302e38332e3230382e302f32322d3332203d3e203532353933.roa (raw, json)
Hash identifier:          F5IFHktXsZHyowP22uNs5SqGhBHF8GolFb+tNa5NUt0=
Subject key identifier:   EC:08:B8:1A:C0:94:64:35:96:0C:47:05:9B:8F:41:5B:CE:E2:7C:04
Certificate issuer:       /CN=F2F66C72DEDBE33AE6FDB7E231A07666B80E0690
Certificate serial:       6B9274878A0F46F2AF4D423F2D1FDE230159BCDD
Authority key identifier: F2:F6:6C:72:DE:DB:E3:3A:E6:FD:B7:E2:31:A0:76:66:B8:0E:06:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3332203d3e203532353933.roa
Signing time:             Mon 12 Jan 2026 18:04:38 +0000
ROA not before:           Mon 12 Jan 2026 17:59:38 +0000
ROA not after:            Mon 11 Jan 2027 18:04:38 +0000
asID:                     52593
IP address blocks:        170.83.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.crl
                          rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 05:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:92:74:87:8a:0f:46:f2:af:4d:42:3f:2d:1f:de:23:01:59:bc:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F66C72DEDBE33AE6FDB7E231A07666B80E0690
        Validity
            Not Before: Jan 12 17:59:38 2026 GMT
            Not After : Jan 11 18:04:38 2027 GMT
        Subject: CN=EC08B81AC0946435960C47059B8F415BCEE27C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:cc:7c:7d:ea:72:7a:f4:1d:a2:42:33:b8:
                    b5:96:ab:e4:1e:d4:93:b5:54:69:1c:8f:bf:96:c8:
                    9f:16:06:e8:e0:77:c2:43:fd:00:92:6e:c2:aa:32:
                    00:22:df:cb:3a:5c:9f:18:45:91:95:8b:17:39:1b:
                    84:e2:a0:2b:9e:cd:3e:74:bc:b7:50:3d:11:31:a3:
                    1f:fe:78:6c:f4:52:0d:f0:e9:10:aa:d7:61:14:29:
                    77:8a:1d:b3:39:7d:67:86:93:3d:9e:48:d8:f0:ee:
                    34:46:51:fd:0b:46:c0:84:0d:04:5a:6f:22:83:74:
                    08:16:3b:fd:2b:fe:15:cb:35:f0:8e:07:fa:b6:e6:
                    53:a0:93:29:55:b9:12:5b:e1:cf:42:27:c8:36:40:
                    e1:d3:57:f0:21:5f:1a:63:51:27:eb:a9:3a:f7:58:
                    87:d7:ef:cc:fc:b4:bf:63:08:41:f4:1d:f7:f1:20:
                    06:96:dc:30:27:69:ec:8e:28:e6:09:a3:d3:7e:9f:
                    42:a1:1f:b4:dd:e8:a7:fa:03:8b:10:3b:b7:ab:c4:
                    9c:31:ae:71:db:ac:fc:fb:e6:99:5a:f2:e4:9d:84:
                    2a:c0:75:4b:3a:13:8f:a3:1f:42:de:1f:47:47:30:
                    65:e0:71:f1:49:ff:e8:ac:59:12:73:bc:44:5b:ce:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:08:B8:1A:C0:94:64:35:96:0C:47:05:9B:8F:41:5B:CE:E2:7C:04
            X509v3 Authority Key Identifier:
                keyid:F2:F6:6C:72:DE:DB:E3:3A:E6:FD:B7:E2:31:A0:76:66:B8:0E:06:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2F66C72DEDBE33AE6FDB7E231A07666B80E0690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3230382e302f32322d3332203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:75:c1:e5:a5:42:99:a2:84:d5:13:00:a7:03:99:c1:4c:56:
         90:37:ee:6a:52:9c:44:c2:24:49:fb:00:32:f3:9b:df:25:b6:
         5d:a7:7b:e0:26:17:71:25:c5:56:14:5e:5b:86:36:a8:ed:a4:
         67:e2:78:22:18:c7:f2:43:5a:5c:55:b8:1d:5c:23:a5:00:1c:
         b4:d1:b5:50:0d:da:17:f0:b7:2f:db:02:11:bf:71:81:42:bf:
         28:99:67:df:b9:fa:8b:bb:78:99:25:64:35:d6:c0:b2:57:ad:
         97:82:c4:9b:b3:77:ab:0e:d9:78:26:f9:9e:be:db:48:3f:7b:
         f5:cd:1e:4c:03:e9:ae:02:13:90:95:1d:68:04:f3:d3:74:3d:
         13:db:9a:24:8a:da:fe:9b:b2:ed:f6:5f:cf:1e:d7:7d:5e:a7:
         a8:58:f8:b6:27:48:74:89:98:c3:66:33:ae:87:94:d5:84:83:
         80:3a:05:8f:f0:86:e5:76:6d:69:c1:7a:73:b4:a4:92:2b:fd:
         32:ec:fa:91:9c:e4:8f:72:5e:79:4e:0b:bc:a6:a8:1a:c9:41:
         18:c3:d1:cf:a9:9e:98:34:40:21:24:85:fe:33:dc:38:c1:0d:
         5d:81:1b:4e:fb:79:31:f2:2a:e8:84:f3:5b:33:44:43:1e:db:
         1e:fe:25:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:17:47 2026 by rpki-client