This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3137372e382e3133362e302f32322d3234203d3e20323730353832.roa
File:                     3137372e382e3133362e302f32322d3234203d3e20323730353832.roa (raw, json)
Hash identifier:          zlrjNgP848WaBmGFYKlntqV0G/L0RJ5UKJrEyCjjfeE=
Subject key identifier:   DC:44:5E:01:44:B4:25:64:CB:C3:E2:52:FD:28:0B:C6:94:EB:48:7A
Certificate issuer:       /CN=1143EA5CEE3BF26ED92983CA585F188D893EA4CB
Certificate serial:       506C0B2EEC54327FE6923E8FE09BA5B82E4FB490
Authority key identifier: 11:43:EA:5C:EE:3B:F2:6E:D9:29:83:CA:58:5F:18:8D:89:3E:A4:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3137372e382e3133362e302f32322d3234203d3e20323730353832.roa
Signing time:             Mon 05 Jan 2026 20:17:59 +0000
ROA not before:           Mon 05 Jan 2026 20:12:59 +0000
ROA not after:            Mon 04 Jan 2027 20:17:59 +0000
asID:                     270582
IP address blocks:        177.8.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.crl
                          rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 00:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6c:0b:2e:ec:54:32:7f:e6:92:3e:8f:e0:9b:a5:b8:2e:4f:b4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1143EA5CEE3BF26ED92983CA585F188D893EA4CB
        Validity
            Not Before: Jan  5 20:12:59 2026 GMT
            Not After : Jan  4 20:17:59 2027 GMT
        Subject: CN=DC445E0144B42564CBC3E252FD280BC694EB487A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:6d:62:fc:9b:3d:f9:62:ae:1d:66:99:08:
                    d7:be:6a:21:fe:9b:e4:ee:fb:19:1e:75:be:3f:93:
                    52:6b:fe:b1:4e:69:02:9f:c1:46:78:3b:ab:fe:bb:
                    25:b7:6a:d0:ab:3f:4e:2a:8f:7a:2c:8d:89:4a:07:
                    9d:c7:b2:1c:64:fe:dc:1c:9d:3e:a4:5c:0b:8c:fc:
                    1b:53:49:7c:49:b9:7c:b5:33:97:06:95:78:88:80:
                    1b:05:b7:e2:5f:77:7c:31:de:7d:8a:e6:ab:ad:56:
                    b6:da:65:0e:a2:40:ca:a9:70:aa:bb:00:3d:bf:5d:
                    bf:88:d2:0b:56:8f:e6:0f:aa:87:aa:79:f2:f4:2a:
                    8e:30:71:78:20:57:87:5d:7b:4f:36:51:00:fe:b3:
                    e1:80:68:a9:74:48:dc:fa:b8:fc:90:6f:ea:4e:f5:
                    f6:58:14:c0:b0:52:c9:b6:12:3a:fd:b5:db:4f:0e:
                    34:52:e8:e8:b0:a0:13:f2:c5:cc:c8:89:cb:71:9f:
                    bf:92:86:6c:2c:dc:89:f2:d1:a7:6c:7b:40:85:a7:
                    15:55:27:93:00:61:45:f5:d7:57:e0:cd:54:3d:fc:
                    9e:a0:6f:a8:3c:c1:6d:3e:12:4a:f0:71:12:c7:c9:
                    9f:67:a0:de:94:3f:d0:10:6b:88:bb:75:7b:b0:a5:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:44:5E:01:44:B4:25:64:CB:C3:E2:52:FD:28:0B:C6:94:EB:48:7A
            X509v3 Authority Key Identifier:
                keyid:11:43:EA:5C:EE:3B:F2:6E:D9:29:83:CA:58:5F:18:8D:89:3E:A4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3137372e382e3133362e302f32322d3234203d3e20323730353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:f1:fa:0a:34:e5:ec:b9:87:e7:2b:51:81:2c:bf:45:c5:f7:
         3d:9a:da:57:e6:ad:c9:6f:98:77:86:ab:f5:8e:59:85:72:49:
         ec:55:5d:82:31:e9:94:fc:38:13:bd:a7:49:26:5a:67:b1:af:
         07:88:82:57:1c:f3:dc:25:85:10:6f:e1:2f:84:8a:23:14:82:
         86:f4:83:44:af:36:44:32:bf:aa:b1:ad:33:3e:db:ec:ff:4a:
         0e:38:9e:d2:3c:01:7d:74:46:f5:3c:10:44:d5:0b:ed:bd:c9:
         a3:f5:0b:6b:46:33:b0:ee:ee:f1:20:ab:46:3d:a0:cb:5f:ab:
         76:2e:22:d7:79:b0:9d:d3:69:a8:9a:72:f6:cd:86:5e:50:93:
         4f:49:3a:d1:fe:46:3d:ca:4d:23:36:13:63:08:b3:6f:8a:d9:
         28:e0:d8:bc:f1:b3:fe:bb:7a:0b:c2:17:28:12:b9:66:f8:34:
         e3:93:36:f0:ee:26:f7:96:93:d9:9b:53:44:ad:1d:2a:2e:a2:
         c9:9a:7a:59:f2:74:61:a7:40:e1:d6:d1:3b:b9:09:58:b0:4d:
         df:76:2f:5f:be:a3:45:99:81:f6:39:58:87:de:62:bf:48:bb:
         50:0b:c5:e3:8a:f2:a1:e6:c2:ec:ea:c0:09:6a:40:76:a6:02:
         54:c3:6e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:27:15 2026 by rpki-client