This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32322d3234203d3e20323730363131.roa
File:                     3138372e31372e3132382e302f32322d3234203d3e20323730363131.roa (raw, json)
Hash identifier:          VcZtae4V8vmmNeAZ9IBe8oO332eSlH4069zbiIxe6/s=
Subject key identifier:   B9:45:AE:01:7B:EB:27:2C:F6:88:91:DE:9D:E6:DC:54:66:78:D1:EB
Certificate issuer:       /CN=0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C
Certificate serial:       7CBEA1B1111316C132508E621985354680C18CE0
Authority key identifier: 0B:1E:B5:21:DE:FE:79:C4:E0:C6:AC:4E:5A:91:6A:88:09:BF:28:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32322d3234203d3e20323730363131.roa
Signing time:             Mon 22 Dec 2025 13:11:47 +0000
ROA not before:           Mon 22 Dec 2025 13:06:47 +0000
ROA not after:            Mon 21 Dec 2026 13:11:47 +0000
asID:                     270611
IP address blocks:        187.17.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.crl
                          rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:be:a1:b1:11:13:16:c1:32:50:8e:62:19:85:35:46:80:c1:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C
        Validity
            Not Before: Dec 22 13:06:47 2025 GMT
            Not After : Dec 21 13:11:47 2026 GMT
        Subject: CN=B945AE017BEB272CF68891DE9DE6DC546678D1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:a4:a7:50:71:55:34:82:1d:3b:7e:c8:3c:
                    21:fa:9e:1a:c8:f9:bd:f5:d3:9c:1c:e2:c8:7b:61:
                    56:bd:12:39:52:24:43:0e:13:dc:2b:11:b5:11:07:
                    30:f3:ee:09:89:db:7e:6b:5d:bb:12:a6:df:12:59:
                    19:0b:cf:de:a3:5a:69:8a:9a:9c:83:2c:66:2d:62:
                    a8:c3:ec:c7:93:af:f1:19:93:fd:a1:36:dc:ca:81:
                    10:03:74:c4:9a:e2:1c:36:a2:58:13:c4:7f:49:51:
                    88:f9:01:46:5c:18:53:9d:c8:de:af:06:36:76:63:
                    95:a9:a8:4a:3e:40:49:96:68:c6:fc:21:a0:0d:5a:
                    c1:30:c6:4c:ad:dc:ca:bf:0c:00:1e:34:37:33:54:
                    41:5b:0e:3a:4b:6e:7e:59:1f:ea:82:66:e3:39:fb:
                    95:e1:c1:3a:73:70:65:91:02:b9:62:59:05:c3:df:
                    46:70:6f:7c:a1:0d:51:e6:91:de:47:17:cf:4d:4d:
                    00:35:cf:6f:3d:90:1e:8b:be:8b:3a:ac:fe:a1:e7:
                    ad:34:94:cc:96:b4:10:94:99:8e:cd:18:13:40:c9:
                    0c:70:89:07:ef:96:3d:51:a4:e2:73:61:0e:0d:24:
                    3c:ae:38:e4:da:22:b1:e7:61:6d:51:db:77:51:9a:
                    4e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:45:AE:01:7B:EB:27:2C:F6:88:91:DE:9D:E6:DC:54:66:78:D1:EB
            X509v3 Authority Key Identifier:
                keyid:0B:1E:B5:21:DE:FE:79:C4:E0:C6:AC:4E:5A:91:6A:88:09:BF:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32322d3234203d3e20323730363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:0c:32:71:27:d1:a2:a0:50:60:0e:ff:32:17:8a:9b:d4:64:
         18:12:5d:2f:4f:ce:bd:17:17:de:1e:60:88:fd:e1:d2:76:fa:
         ad:5c:7e:d5:56:d4:ed:5b:0b:b6:59:85:62:0b:43:fd:92:29:
         88:3e:54:2e:7f:7a:5b:cd:35:85:c9:7d:46:3b:cf:28:d2:88:
         88:80:9e:77:70:d6:96:57:60:7a:35:b5:d1:23:e9:48:bf:05:
         6c:d2:07:e3:2b:f4:88:03:30:ca:ef:7b:a1:d1:72:3d:43:9a:
         d4:9e:c6:7c:fd:d7:01:22:4f:4e:f2:a0:fb:d0:c3:87:65:19:
         75:e7:42:4a:73:72:8c:2c:39:c9:68:91:53:55:a8:b4:04:25:
         2f:3c:ec:28:18:f5:05:4c:32:67:2c:55:0d:a0:bb:64:12:1b:
         18:7b:23:75:6e:7e:9e:df:73:a8:bd:82:bf:aa:98:64:bf:de:
         7f:73:ee:91:f8:ac:bc:11:f3:00:f8:a9:4d:c9:03:a8:f5:f9:
         3f:1c:a1:6f:04:b6:d2:dc:80:aa:56:57:fb:be:a9:da:fb:20:
         f0:b9:11:b2:d2:80:a3:19:05:52:11:19:57:db:66:c2:94:e3:
         68:95:67:29:6b:86:5c:ec:e0:b7:51:5a:fc:f2:9c:bb:ea:c6:
         21:ca:5e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:42:04 2026 by rpki-client