This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136342e302f32322d3234203d3e20323637303033.roa
File:                     3137302e38322e3136342e302f32322d3234203d3e20323637303033.roa (raw, json)
Hash identifier:          QKqhV0yIbppW8U3cN57m5RNBmshAIOrkqBS64yQtQ+w=
Subject key identifier:   7E:C3:9C:BA:05:31:4F:E9:83:EF:29:F8:8C:07:70:CA:0F:4B:7E:0B
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       3DCF3D0B7E8F0601CEA0FBB40F9B87BD845F9D89
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136342e302f32322d3234203d3e20323637303033.roa
Signing time:             Tue 20 Jan 2026 13:46:07 +0000
ROA not before:           Tue 20 Jan 2026 13:41:07 +0000
ROA not after:            Tue 19 Jan 2027 13:46:07 +0000
asID:                     267003
IP address blocks:        170.82.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cf:3d:0b:7e:8f:06:01:ce:a0:fb:b4:0f:9b:87:bd:84:5f:9d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Jan 20 13:41:07 2026 GMT
            Not After : Jan 19 13:46:07 2027 GMT
        Subject: CN=7EC39CBA05314FE983EF29F88C0770CA0F4B7E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:c7:5a:5b:65:f2:d1:39:6f:b4:87:d9:85:
                    58:a4:cc:6c:87:6e:8f:79:34:82:cb:59:37:e5:ed:
                    dc:fd:28:b4:e4:50:c7:b0:d3:74:95:6d:a4:e8:16:
                    5c:d3:3a:ac:42:a9:88:d9:23:b5:5b:f7:75:33:c2:
                    a6:ec:28:61:57:12:14:f6:37:24:a7:52:8a:b9:61:
                    30:fe:90:b2:f5:a6:3d:f0:11:8e:f4:3e:95:96:67:
                    b0:66:91:f4:ad:92:c3:56:14:e5:18:da:ea:13:79:
                    38:c4:0a:8d:67:6a:8a:17:78:89:e5:7f:89:9b:99:
                    22:04:0c:e6:25:99:e8:92:05:cb:7f:8b:46:f0:2d:
                    2f:3a:9f:a5:f8:46:0b:ec:57:e6:48:b0:56:6c:09:
                    af:42:6c:2d:ba:d5:d5:d1:fc:21:cf:da:de:95:c8:
                    b9:e0:9d:51:4b:ea:6f:4f:b2:0e:08:e8:9c:a9:b7:
                    41:7e:ee:20:e1:9b:a5:da:6a:bc:9f:8b:3c:18:fd:
                    c3:92:bd:cb:55:c8:ad:b9:19:44:8b:f2:9b:29:6a:
                    c4:20:d2:ab:cc:00:3f:b9:22:df:b1:61:05:c0:5e:
                    ae:aa:19:c9:17:8d:5e:1b:ab:8f:74:b6:62:c9:de:
                    78:0b:54:ec:7d:90:4b:ae:a5:61:72:56:38:42:b1:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C3:9C:BA:05:31:4F:E9:83:EF:29:F8:8C:07:70:CA:0F:4B:7E:0B
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136342e302f32322d3234203d3e20323637303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:f9:1e:e7:6d:c0:6b:95:d2:5d:b4:10:45:31:cd:d2:57:
         c1:c2:f5:01:db:18:0a:3b:42:86:19:d4:18:43:0b:66:ed:f6:
         3f:91:39:7d:2c:b9:16:41:0b:3e:b0:f7:f7:a0:3a:d9:8f:62:
         f8:ca:fb:0d:08:2b:64:87:af:8a:67:83:fd:e1:10:17:d9:b0:
         00:58:9d:a9:db:9b:b4:e4:71:07:cb:ea:b3:f9:de:21:6b:5c:
         ee:d7:df:59:50:fd:dd:33:79:c3:b5:60:5c:e6:35:b4:79:04:
         d7:5d:39:ed:c9:d6:e2:c7:8a:15:82:8d:fe:10:7b:0d:e7:af:
         1d:b2:54:69:d2:42:d5:55:61:25:90:56:11:ba:39:7a:1b:93:
         26:cc:4c:cb:9c:b3:42:1c:d7:6e:dc:1d:ee:07:1d:01:6b:7d:
         55:34:be:b2:c1:e5:3e:2e:ac:d4:a7:44:13:2d:a3:7a:ff:4e:
         7a:dc:0e:32:fc:64:af:0c:61:1b:9a:e6:32:7b:51:71:cc:d2:
         1f:32:59:a5:a7:a1:20:a8:ad:ec:c2:76:d6:ca:e1:54:24:17:
         40:ff:dc:49:28:f4:f8:b7:c1:bd:06:2f:bb:a2:46:a0:8c:0d:
         fa:82:a1:bf:7d:bc:aa:60:d2:bf:36:1f:1f:31:24:17:ad:43:
         b5:f5:24:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:06 2026 by rpki-client