This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa
File:                     3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (raw, json)
Hash identifier:          Ew0VNMo4xdPi3gN9F6m+wkvVTfV4Mcup88zNsvWaPXo=
Subject key identifier:   9C:23:9E:AE:1A:6D:18:CA:B6:07:B2:AE:F2:49:B5:62:49:76:3F:74
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       466289B6717B716613C07B265B9F04ACBFED721A
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa
Signing time:             Thu 22 Jan 2026 12:01:04 +0000
ROA not before:           Thu 22 Jan 2026 11:56:04 +0000
ROA not after:            Thu 21 Jan 2027 12:01:04 +0000
asID:                     263891
IP address blocks:        170.78.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:62:89:b6:71:7b:71:66:13:c0:7b:26:5b:9f:04:ac:bf:ed:72:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Jan 22 11:56:04 2026 GMT
            Not After : Jan 21 12:01:04 2027 GMT
        Subject: CN=9C239EAE1A6D18CAB607B2AEF249B56249763F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:83:e8:09:c9:9a:0f:39:21:c0:c7:3b:e0:
                    14:36:c4:26:e2:70:59:cd:dc:18:44:c5:3f:52:60:
                    13:3f:26:5b:b5:f6:d0:47:da:66:f8:97:7b:07:9d:
                    52:5b:7c:55:6a:f2:28:60:2a:16:73:e7:ee:8e:90:
                    85:73:12:39:95:6c:ed:99:ad:e3:5f:4f:02:94:91:
                    db:25:28:35:0a:c8:de:4e:6e:0f:33:49:3d:f5:4c:
                    80:67:80:7c:c0:ee:6b:83:d0:c5:3f:e1:16:fb:84:
                    50:11:08:d5:e5:a0:bf:92:22:e5:6b:32:af:f9:e6:
                    69:27:6b:d1:ed:bf:d2:10:a5:90:be:57:f9:d9:94:
                    38:cc:88:40:6d:72:74:b0:61:e2:bd:77:f9:67:7e:
                    21:4f:cc:f5:2a:46:af:40:07:bf:9e:2c:a6:8a:24:
                    e1:6c:21:4e:11:95:27:79:8e:99:74:43:76:db:d8:
                    88:c9:59:cf:10:7d:12:20:c4:2d:30:83:59:0a:1b:
                    f2:b5:b0:af:e5:08:4e:1e:68:ac:d2:93:a1:5d:dc:
                    0d:44:81:5f:f2:f2:fd:0a:84:1d:04:75:25:7e:9d:
                    02:28:c5:1a:d2:e8:e8:de:eb:4f:00:7f:5b:5e:63:
                    89:a0:d6:04:29:3e:03:50:f4:6e:ae:fd:8f:a2:4c:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:23:9E:AE:1A:6D:18:CA:B6:07:B2:AE:F2:49:B5:62:49:76:3F:74
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:4c:09:26:2e:a4:08:9f:3e:53:06:f7:2e:3a:94:a1:f8:41:
         e5:9a:76:0c:14:7d:9f:a5:30:56:ac:38:7e:44:a7:68:17:13:
         32:f7:0d:03:aa:9f:9c:aa:43:bd:f7:31:92:dd:f4:93:dc:4b:
         03:5b:3d:f3:80:47:c8:01:1e:81:20:c1:7f:64:06:72:41:ce:
         74:0f:83:d7:a3:57:4d:8f:cb:97:74:e3:20:03:a8:15:f8:82:
         13:3a:81:89:96:0c:a2:70:d1:91:8d:1e:6b:f6:89:a4:c2:9d:
         69:f5:a2:90:6b:a3:8c:20:0b:0b:d8:df:b2:ed:b6:17:83:a3:
         46:04:08:a2:9f:7a:fa:1e:2a:26:ce:d5:81:f9:06:03:ed:0a:
         8d:2c:1e:f9:ba:98:75:91:c6:85:f0:47:8f:20:de:6b:da:59:
         82:c3:b9:5d:58:70:84:a3:75:da:f0:d5:08:78:f0:b5:e5:2d:
         dc:a9:57:61:5a:4f:6d:4b:09:61:53:53:d9:10:b2:5c:ef:72:
         c0:8a:e5:ff:39:e8:47:c4:2a:fe:13:28:c2:21:7f:36:09:56:
         c3:7f:ea:f7:e9:16:3a:9a:53:cf:6c:17:92:8f:8b:7a:ed:93:
         9c:12:25:29:f0:8c:9e:f5:6c:5b:0d:1e:26:79:d4:e9:65:4a:
         a2:27:f8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:39:43 2026 by rpki-client