This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa
File:                     3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (raw, json)
Hash identifier:          1+/pplX7T7J05KkRZmEDqLrGq6B6Swew+LIbfkXTx24=
Subject key identifier:   D7:80:82:CA:B2:26:D9:92:20:CF:E3:47:39:1C:F5:D4:70:25:B4:AB
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       620744A655AB8C7C44F1AA2A606DE2F8074746DC
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa
Signing time:             Thu 22 Jan 2026 12:01:03 +0000
ROA not before:           Thu 22 Jan 2026 11:56:03 +0000
ROA not after:            Thu 21 Jan 2027 12:01:03 +0000
asID:                     263891
IP address blocks:        170.78.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:07:44:a6:55:ab:8c:7c:44:f1:aa:2a:60:6d:e2:f8:07:47:46:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Jan 22 11:56:03 2026 GMT
            Not After : Jan 21 12:01:03 2027 GMT
        Subject: CN=D78082CAB226D99220CFE347391CF5D47025B4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:6f:42:5d:87:c2:79:c4:f8:95:e4:88:2d:
                    a1:5b:91:3d:42:71:43:06:6d:44:41:ee:ba:c9:e7:
                    f4:bc:94:f4:6c:13:03:73:fb:ab:cc:9b:75:7b:e2:
                    02:5f:27:7b:0f:b7:ac:29:c6:af:4d:56:8b:fc:d1:
                    f4:e6:d4:5a:cb:06:c3:ad:3a:41:e3:ab:30:8e:95:
                    3a:12:f6:3b:02:29:7e:49:20:23:10:9c:f5:05:c3:
                    5f:38:68:42:1b:a0:01:26:74:fb:dc:0e:22:e9:9d:
                    dc:ed:d7:a2:52:43:15:e9:67:cf:be:f0:1c:87:17:
                    d4:70:13:1f:bb:1c:a1:e5:a4:6e:b9:2d:92:34:59:
                    14:e9:fb:77:79:03:08:e7:b5:12:e6:99:8a:ef:97:
                    13:65:f7:0b:6b:cf:7e:78:e7:7d:b1:f2:97:67:09:
                    9b:21:f5:64:0d:3e:03:77:31:81:4b:e5:82:0c:2b:
                    8c:43:df:0a:e3:49:2f:78:cf:d8:46:6d:8d:c0:05:
                    a2:24:9f:b3:7b:9f:76:8a:47:78:31:07:54:62:e9:
                    f6:05:ff:9c:65:c8:b8:9c:d2:c6:e3:07:70:d6:98:
                    44:a4:04:db:e1:92:9e:df:3b:3e:bf:19:70:1c:fe:
                    b2:f5:3b:7c:f9:21:62:c8:e5:37:74:d3:dc:7e:dc:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:80:82:CA:B2:26:D9:92:20:CF:E3:47:39:1C:F5:D4:70:25:B4:AB
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c4:5e:7b:ad:91:13:46:92:93:b8:81:cb:31:98:22:57:5c:
         67:fa:a1:93:8b:de:68:e0:8a:5d:34:eb:9d:f0:8b:5c:91:f1:
         6c:33:d7:98:b1:b9:91:ab:d9:99:73:92:a6:09:33:e7:e9:6a:
         6a:55:89:af:28:4f:4b:3f:69:38:f2:b5:50:59:b2:2e:a7:4b:
         80:ea:2e:d0:c6:06:1a:ea:d5:2e:9b:a6:26:af:17:be:91:29:
         f3:04:5b:bf:1e:20:d1:35:1b:ff:2a:b3:48:85:c6:93:d4:ee:
         7d:6e:1f:cf:cd:99:32:79:77:2c:5d:b8:b7:7d:30:b0:14:5d:
         9a:75:b2:f7:61:88:f1:7f:ea:36:3f:12:21:58:c6:4b:18:7a:
         07:88:d8:12:a2:24:67:e2:c1:16:f1:e4:f3:22:51:37:05:1f:
         8b:60:b5:fc:a3:48:79:5a:52:95:c9:c1:ae:8b:5b:c9:20:4e:
         5b:f3:a1:e7:65:da:16:e2:56:62:e3:99:5a:18:0f:87:69:1b:
         2d:4f:c8:61:c4:f8:70:a7:43:a0:86:31:7e:58:15:82:33:29:
         2a:72:18:d7:f7:b1:16:01:8b:45:fd:5c:56:13:65:8d:42:26:
         3e:a4:4a:40:a7:55:84:ac:d6:55:bf:04:c8:c4:38:db:36:34:
         72:b6:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:00 2026 by rpki-client