This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa
File:                     3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa (raw, json)
Hash identifier:          EEsrhMfButcUQVSQ2Rjo7b3beUDDeqGrc0JR1+GbwQg=
Subject key identifier:   D7:2E:36:09:5A:39:95:4A:44:B6:CC:3D:BD:ED:FE:BA:16:9E:FF:3A
Certificate issuer:       /CN=0C7A37C7AEBC3B8315710679B54AC349A9571A31
Certificate serial:       600170FCCAE407468DDC25BA2BDFC73D9965F3E7
Authority key identifier: 0C:7A:37:C7:AE:BC:3B:83:15:71:06:79:B5:4A:C3:49:A9:57:1A:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7A37C7AEBC3B8315710679B54AC349A9571A31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa
Signing time:             Thu 08 Jan 2026 15:52:53 +0000
ROA not before:           Thu 08 Jan 2026 15:47:53 +0000
ROA not after:            Thu 07 Jan 2027 15:52:53 +0000
asID:                     270778
IP address blocks:        187.63.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/0C7A37C7AEBC3B8315710679B54AC349A9571A31.crl
                          rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/0C7A37C7AEBC3B8315710679B54AC349A9571A31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7A37C7AEBC3B8315710679B54AC349A9571A31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 00:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:01:70:fc:ca:e4:07:46:8d:dc:25:ba:2b:df:c7:3d:99:65:f3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C7A37C7AEBC3B8315710679B54AC349A9571A31
        Validity
            Not Before: Jan  8 15:47:53 2026 GMT
            Not After : Jan  7 15:52:53 2027 GMT
        Subject: CN=D72E36095A39954A44B6CC3DBDEDFEBA169EFF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:50:77:5c:48:26:28:1e:38:e8:63:71:63:
                    22:aa:a3:7a:8d:fb:d1:bf:57:f6:cc:99:f6:eb:e9:
                    0a:11:7a:1d:86:a8:2d:d5:3c:6e:b2:1d:8a:5b:3d:
                    6e:2f:e5:ac:7c:68:dd:5a:f9:58:c6:7f:56:19:c7:
                    00:c3:b8:55:97:f0:8e:61:8d:dc:05:12:83:f0:79:
                    c2:8b:4e:e7:a0:3c:97:a9:70:a1:cf:5b:1c:95:8b:
                    27:37:4a:ca:11:d9:6a:7c:48:d1:99:54:c6:64:e7:
                    29:a8:b0:bb:24:ca:06:0d:a9:d5:12:e5:b2:49:5f:
                    4c:f7:a6:57:50:66:7c:1c:1e:c7:49:69:4e:2e:5c:
                    f5:ee:cc:d1:a1:2e:ed:cc:15:09:8a:d2:e9:8e:80:
                    c1:ca:50:3b:6a:7e:ca:bd:74:bf:90:b7:06:55:b4:
                    cb:15:6b:6a:d1:fb:1b:06:15:fa:62:3f:94:ed:cb:
                    04:b5:89:0e:0c:42:7b:26:58:f2:8d:3a:59:78:1d:
                    ba:c4:4c:63:6f:4c:62:fa:a8:d2:0e:7b:41:e9:c8:
                    52:0f:c3:2e:8d:a7:b5:85:b0:77:2c:41:74:9c:5f:
                    29:43:95:3a:5c:b5:53:c8:73:db:8c:53:1c:2a:17:
                    33:57:af:72:59:f8:ab:fb:9a:bb:a9:4f:a3:cf:7e:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2E:36:09:5A:39:95:4A:44:B6:CC:3D:BD:ED:FE:BA:16:9E:FF:3A
            X509v3 Authority Key Identifier:
                keyid:0C:7A:37:C7:AE:BC:3B:83:15:71:06:79:B5:4A:C3:49:A9:57:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/0C7A37C7AEBC3B8315710679B54AC349A9571A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7A37C7AEBC3B8315710679B54AC349A9571A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:48:65:34:6c:f1:17:fd:ed:42:57:80:ae:69:10:c6:37:71:
         da:0f:39:6e:61:d1:6a:61:e2:24:67:90:af:c6:21:d0:23:e2:
         6a:db:b5:4c:91:35:9e:25:79:7f:e2:a0:cc:a3:9d:26:64:dd:
         98:8e:c1:44:ce:47:e8:ba:fa:dd:f0:7a:22:5e:1a:c2:e5:1d:
         56:af:6b:da:83:c6:79:7a:d5:a8:e9:9b:25:e4:cf:70:21:b1:
         8a:70:fe:1d:91:89:64:05:b6:27:32:40:08:3e:79:9a:00:8a:
         c4:01:51:7d:ad:31:09:1b:af:0c:82:17:2f:2b:d3:13:a1:78:
         b3:78:26:89:cf:25:64:aa:4e:c8:bd:38:6f:0e:8f:26:ee:d4:
         92:c1:88:99:4a:cf:96:41:47:2f:57:a1:a6:d9:fb:8d:be:88:
         32:a4:a3:ad:46:53:9e:ec:fa:42:eb:39:ec:75:d2:61:3c:3e:
         36:41:19:ff:63:c7:09:b2:d3:94:05:59:a9:7c:e8:2f:8f:59:
         8c:03:dc:2d:fa:df:f0:d7:73:12:76:b6:8f:de:07:23:b4:c1:
         bc:00:a2:30:59:5e:9b:5e:6d:ef:e9:00:d9:0b:48:c4:c0:40:
         9d:69:16:07:7d:83:65:07:56:bd:30:72:f3:c5:dc:33:0c:e4:
         3f:a9:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:48:22 2026 by rpki-client