This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/AS273490.roa
File:                     AS273490.roa (raw, json)
Hash identifier:          g2M9vWYpNxbynnWhkPSg3PAWuGNhVoWRBiqICVXIiB8=
Subject key identifier:   40:C3:A9:5F:60:2D:AC:99:6F:EB:0A:2B:FD:08:37:4F:1F:97:39:7B
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       022AD3B2875737918A8D9748B75206C5C50D6283
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/AS273490.roa
Signing time:             Sat 27 Dec 2025 04:09:46 +0000
ROA not before:           Sat 27 Dec 2025 04:04:46 +0000
ROA not after:            Sat 26 Dec 2026 04:09:46 +0000
asID:                     273490
IP address blocks:        177.184.196.0/22 maxlen: 22
                          177.184.196.0/24 maxlen: 24
                          177.184.197.0/24 maxlen: 24
                          177.184.198.0/24 maxlen: 24
                          177.184.199.0/24 maxlen: 24
                          177.184.200.0/22 maxlen: 22
                          177.184.200.0/24 maxlen: 24
                          177.184.201.0/24 maxlen: 24
                          177.184.202.0/24 maxlen: 24
                          177.184.203.0/24 maxlen: 24
                          187.62.208.0/20 maxlen: 20
                          2804:8f6c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2a:d3:b2:87:57:37:91:8a:8d:97:48:b7:52:06:c5:c5:0d:62:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Dec 27 04:04:46 2025 GMT
            Not After : Dec 26 04:09:46 2026 GMT
        Subject: CN=40C3A95F602DAC996FEB0A2BFD08374F1F97397B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:36:be:72:6c:ec:67:c4:f6:42:00:0a:14:
                    7f:10:f6:d2:03:4e:a5:b4:38:92:71:8a:c2:54:c9:
                    25:44:02:b2:a7:33:2c:d7:fa:58:01:b7:b0:a4:e0:
                    fd:f4:cd:6d:f7:9f:d8:1e:00:0c:91:59:49:22:b6:
                    c2:0b:88:a1:22:a6:0e:99:06:7d:d8:af:d3:ea:97:
                    f9:df:b6:4f:0f:27:98:be:42:ea:f3:ad:e4:fc:dc:
                    21:f3:9f:1a:e8:cf:95:73:8d:5c:5c:b8:46:8d:df:
                    50:e5:c2:5a:6e:07:a0:fd:86:48:9c:3f:52:66:13:
                    c5:20:98:92:d3:a2:cf:86:81:a6:2b:f1:0f:b2:53:
                    87:8f:3e:fd:7f:bf:dd:ac:13:35:cb:1d:bc:0e:20:
                    ca:d8:e2:eb:80:50:82:fd:67:b9:37:f5:14:1b:a5:
                    01:41:c4:b6:da:1b:4a:35:1e:b0:1e:06:1a:f2:31:
                    f3:8f:f3:30:82:02:7a:1d:f7:12:a8:05:b0:f4:1f:
                    6c:cd:81:45:cd:f7:74:46:2e:1e:bd:51:90:86:a9:
                    3d:bb:9f:c1:41:d4:8c:a2:d3:b8:dd:63:bc:a7:14:
                    34:e1:c2:de:b9:0d:5f:9e:33:14:b6:ca:ec:2f:e9:
                    d7:7d:c3:48:47:19:b8:2a:0d:0e:c8:d7:f6:13:3c:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C3:A9:5F:60:2D:AC:99:6F:EB:0A:2B:FD:08:37:4F:1F:97:39:7B
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/AS273490.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.196.0-177.184.203.255
                  187.62.208.0/20
                IPv6:
                  2804:8f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:da:95:07:7d:1d:3a:4b:92:d8:c1:f0:dd:e7:68:7a:48:cd:
         8f:da:1c:66:9d:78:54:5a:da:af:62:ff:ff:e6:7a:9d:19:03:
         83:4c:9a:26:be:c1:83:95:3d:78:34:03:44:a9:ff:48:49:98:
         26:d8:a7:51:87:99:fb:9b:c9:3f:7c:c3:cf:9c:7d:82:1f:de:
         a9:c6:89:ff:14:94:82:58:66:06:5a:b9:b6:80:58:99:79:6b:
         3e:06:71:6f:3b:8e:a5:d4:b9:6b:21:8b:d5:cd:ab:96:92:54:
         8f:a6:66:03:64:1c:05:c9:35:0b:47:d6:73:0f:96:fd:6f:3a:
         2f:65:5f:16:d3:55:e6:3a:09:72:31:e6:18:88:2e:e3:ba:db:
         e6:4b:6d:91:de:67:12:5f:7d:8c:ed:16:ec:98:56:98:a0:89:
         b2:84:7e:50:0c:1b:54:36:1a:2b:f9:ff:55:45:ec:a9:91:4a:
         dd:3b:68:3c:94:02:86:0c:2f:11:7f:f8:37:27:91:be:08:e4:
         37:c7:ab:27:9c:b6:a2:d8:b3:93:aa:eb:49:b8:b4:ec:d9:8b:
         66:c4:14:f9:4e:14:3c:f6:3c:a6:54:a3:71:72:05:20:77:f9:
         de:cd:cd:ae:4d:49:2f:63:b9:18:2b:3d:07:7f:a6:b0:af:7a:
         ea:a3:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:17:07 2026 by rpki-client