This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/3139312e3234312e38302e302f32312d3332203d3e203533303736.roa
File:                     3139312e3234312e38302e302f32312d3332203d3e203533303736.roa (raw, json)
Hash identifier:          3xTEI0RzFYHsBWMt+IcaAvP7IcW6c7LzQFCCX74ZTfk=
Subject key identifier:   7C:1A:D9:02:83:AA:87:F7:41:8D:C3:9D:96:11:6C:8F:E6:C2:F5:10
Certificate issuer:       /CN=76C4776FBE20DB3195620B86F139D481D1E270D0
Certificate serial:       11DEAEEF4FAC7F225381A5E86C0BD667D9418AAB
Authority key identifier: 76:C4:77:6F:BE:20:DB:31:95:62:0B:86:F1:39:D4:81:D1:E2:70:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76C4776FBE20DB3195620B86F139D481D1E270D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/3139312e3234312e38302e302f32312d3332203d3e203533303736.roa
Signing time:             Thu 08 Jan 2026 14:11:47 +0000
ROA not before:           Thu 08 Jan 2026 14:06:47 +0000
ROA not after:            Thu 07 Jan 2027 14:11:47 +0000
asID:                     53076
IP address blocks:        191.241.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/76C4776FBE20DB3195620B86F139D481D1E270D0.crl
                          rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/76C4776FBE20DB3195620B86F139D481D1E270D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76C4776FBE20DB3195620B86F139D481D1E270D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:de:ae:ef:4f:ac:7f:22:53:81:a5:e8:6c:0b:d6:67:d9:41:8a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76C4776FBE20DB3195620B86F139D481D1E270D0
        Validity
            Not Before: Jan  8 14:06:47 2026 GMT
            Not After : Jan  7 14:11:47 2027 GMT
        Subject: CN=7C1AD90283AA87F7418DC39D96116C8FE6C2F510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:ae:c2:5c:77:ef:5c:fc:11:6e:85:9e:33:
                    86:b4:d1:de:44:0a:bf:59:36:f0:04:4f:52:94:92:
                    b3:ce:42:45:5c:cb:b5:fc:31:78:d0:a7:29:81:eb:
                    42:21:12:34:bf:49:da:26:d5:cd:ff:54:95:e4:04:
                    42:1e:4a:da:00:b0:f5:20:a9:fb:0a:5e:15:13:80:
                    ed:c3:45:63:4d:7f:33:f4:cc:1d:a6:56:7e:da:31:
                    b7:85:0e:0d:9e:11:f3:60:eb:23:3f:95:f6:69:05:
                    1e:05:48:aa:b4:bd:d8:fa:e9:f1:0b:d3:66:90:76:
                    49:a2:42:d1:c9:4a:07:00:0e:33:02:9d:7c:a7:93:
                    42:00:1e:30:3f:bd:0a:74:2c:48:57:b1:87:db:9b:
                    41:d1:a3:57:32:56:59:7c:33:ae:e4:00:f5:ac:0b:
                    15:48:ff:da:93:ea:db:ec:77:a2:f9:5b:b6:40:cb:
                    da:5b:03:de:f6:3d:37:27:7d:3a:a5:e0:8c:69:5c:
                    b1:eb:c7:ee:92:ab:72:2e:4e:08:e9:fa:f0:cc:2d:
                    bf:f4:82:a7:be:f6:3d:e6:00:16:6c:4b:bb:03:7a:
                    2a:3d:9f:98:0b:e8:de:aa:f0:83:f8:50:85:98:48:
                    51:ba:09:f4:0d:bb:1d:39:72:20:f6:9c:5f:f9:e7:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1A:D9:02:83:AA:87:F7:41:8D:C3:9D:96:11:6C:8F:E6:C2:F5:10
            X509v3 Authority Key Identifier:
                keyid:76:C4:77:6F:BE:20:DB:31:95:62:0B:86:F1:39:D4:81:D1:E2:70:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/76C4776FBE20DB3195620B86F139D481D1E270D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76C4776FBE20DB3195620B86F139D481D1E270D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/3139312e3234312e38302e302f32312d3332203d3e203533303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:7e:9c:12:82:dd:bb:44:7f:c5:5b:20:ed:2f:9b:dc:4b:47:
         8a:c2:31:42:43:3e:e0:39:84:9b:a1:d6:78:1b:3c:e6:40:e7:
         da:1b:94:26:70:03:20:f8:3e:ca:cf:45:e8:3e:ef:b3:bb:57:
         28:19:e9:31:49:c6:e4:22:4f:cc:1d:43:4b:f8:48:6f:72:e7:
         67:22:10:70:ed:ba:7a:92:21:cf:ec:ac:09:ec:9c:0d:bb:fd:
         80:f4:09:be:1b:b9:43:a4:45:73:df:66:e4:80:84:f1:93:d3:
         cb:5d:6f:03:b7:e4:8b:b4:0c:ea:ab:9d:d4:8f:d3:22:28:92:
         9a:e1:44:e3:35:0c:c3:a8:ea:6b:76:7b:ff:36:cd:97:13:5e:
         0c:48:3e:37:ee:75:08:f6:95:58:8d:24:5c:ef:20:55:ae:5a:
         f0:4f:7e:b1:cd:e5:18:be:c1:53:07:b4:98:18:64:28:3f:09:
         6a:5a:29:5a:57:fb:b1:79:25:03:88:6b:35:cc:1f:f5:75:53:
         7d:77:65:db:18:af:55:39:5b:9a:c5:d4:1e:45:c7:64:51:26:
         7b:79:17:5d:7f:a3:20:22:cc:47:78:9d:a5:db:dd:cc:0b:b3:
         b5:68:80:15:36:9c:7d:36:0e:bc:da:02:d1:ef:1b:f0:17:89:
         a8:ab:5f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:21:33 2026 by rpki-client