This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e20323632393037.roa
File:                     3137302e3233332e35322e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          xHTYE6vMhm9Mf2+jTB20UYCwlbKkWKcWL8QLO3G2nps=
Subject key identifier:   08:84:EB:E7:E7:17:76:72:D3:BD:32:34:CF:80:FE:45:C2:68:DB:DE
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       582D80B87D3D73B214B3E49D63A1D8F7549B1AE0
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e20323632393037.roa
Signing time:             Thu 08 Jan 2026 12:15:32 +0000
ROA not before:           Thu 08 Jan 2026 12:10:32 +0000
ROA not after:            Thu 07 Jan 2027 12:15:32 +0000
asID:                     262907
IP address blocks:        170.233.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2d:80:b8:7d:3d:73:b2:14:b3:e4:9d:63:a1:d8:f7:54:9b:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Jan  8 12:10:32 2026 GMT
            Not After : Jan  7 12:15:32 2027 GMT
        Subject: CN=0884EBE7E7177672D3BD3234CF80FE45C268DBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1f:a2:eb:f7:42:2c:ed:52:b9:36:57:bb:9b:
                    48:62:03:5e:2e:c2:07:10:1f:3c:90:75:e3:8f:ad:
                    de:03:ee:bd:3e:90:b4:a0:21:34:25:70:01:6b:4f:
                    19:02:ca:de:16:73:72:59:5a:a6:95:06:9f:e5:c5:
                    08:0c:f6:4b:8c:4c:60:a4:81:8e:dc:16:33:64:9a:
                    89:cf:91:6f:47:c8:63:78:b3:d4:00:0f:9f:32:83:
                    64:6b:8c:91:48:60:79:fe:e0:b7:fb:fe:d8:3f:30:
                    cb:61:94:4b:1c:d6:d0:50:eb:01:7d:1f:f1:92:20:
                    c4:f0:f7:22:35:04:80:36:66:36:98:10:8f:57:08:
                    a4:50:1e:f4:03:7f:5e:c9:cc:3b:48:29:ef:6c:fa:
                    04:7e:8c:d9:f4:3a:63:54:11:0d:5d:d8:8a:d4:ba:
                    a9:6e:4e:8a:19:2e:d0:4e:7c:9e:7e:81:1a:9e:44:
                    91:c2:4c:d8:51:39:6d:2c:da:b8:e4:4c:0a:a9:f4:
                    64:cb:35:b6:97:a3:a9:a6:77:35:a8:62:41:23:1b:
                    15:e4:8b:4b:be:8a:27:92:a8:51:7d:9f:f6:ea:5d:
                    db:ad:94:d8:aa:df:17:f2:fb:fa:c6:a2:c7:74:6b:
                    fb:5a:c2:70:39:f8:b1:28:23:67:ca:b5:8d:5e:f6:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:84:EB:E7:E7:17:76:72:D3:BD:32:34:CF:80:FE:45:C2:68:DB:DE
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137302e3233332e35322e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:2c:7e:07:d4:b0:51:a4:6f:aa:80:d4:c2:fd:73:d7:81:6d:
         b1:7a:d5:a6:d6:a2:c9:b2:94:ab:d9:2e:a7:b8:60:a6:0f:80:
         bd:1c:51:ca:2b:31:d5:e0:79:98:08:4b:f7:96:6c:bd:3c:95:
         59:8e:de:da:37:d5:19:26:de:65:a3:3c:26:03:de:c7:0e:01:
         89:ac:95:bd:57:eb:43:f8:a6:06:d5:2b:96:80:5f:78:20:ec:
         d5:04:65:ad:68:7f:3b:cf:31:25:30:47:12:21:25:cd:dc:1e:
         fd:13:4c:9d:6c:84:f3:c4:d7:86:cf:41:a8:91:fe:37:30:99:
         1f:65:54:cf:bb:a7:e6:e0:c7:d1:1d:58:7e:48:38:28:6a:52:
         8a:1e:1e:36:27:ef:e2:4e:3c:e1:dd:e0:ea:af:24:88:09:9f:
         13:67:79:95:ac:9b:2c:6c:57:33:4c:16:0c:86:76:3b:2b:30:
         c3:02:10:53:1e:13:9c:8d:e4:be:17:b5:44:3d:3f:dd:a7:4e:
         cf:34:41:9a:fc:18:90:6b:6e:ec:17:a2:5a:66:6e:09:d0:60:
         46:81:d0:37:2d:38:aa:9c:b2:8a:60:74:2e:db:07:11:b1:98:
         c2:89:f4:92:f3:8e:16:2c:91:47:c4:fa:e3:24:99:76:0b:46:
         84:c3:4f:d0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWC2AuH09c7IUs+SdY6HY91SbGuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5
MDkzODQ1ODAeFw0yNjAxMDgxMjEwMzJaFw0yNzAxMDcxMjE1MzJaMDMxMTAvBgNV
BAMTKDA4ODRFQkU3RTcxNzc2NzJEM0JEMzIzNENGODBGRTQ1QzI2OERCREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5H6Lr90Is7VK5Nle7m0hiA14u
wgcQHzyQdeOPrd4D7r0+kLSgITQlcAFrTxkCyt4Wc3JZWqaVBp/lxQgM9kuMTGCk
gY7cFjNkmonPkW9HyGN4s9QAD58yg2RrjJFIYHn+4Lf7/tg/MMthlEsc1tBQ6wF9
H/GSIMTw9yI1BIA2ZjaYEI9XCKRQHvQDf17JzDtIKe9s+gR+jNn0OmNUEQ1d2IrU
uqluTooZLtBOfJ5+gRqeRJHCTNhROW0s2rjkTAqp9GTLNbaXo6mmdzWoYkEjGxXk
i0u+iieSqFF9n/bqXdutlNiq3xfy+/rGosd0a/tawnA5+LEoI2fKtY1e9ttlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCITr5+cXdnLTvTI0z4D+RcJo294wHwYDVR0j
BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0
SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB
ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv
MzEzNzMwMmUzMjMzMzMyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzOTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq6TQwDQYJKoZIhvcNAQELBQADggEBAIwsfgfU
sFGkb6qA1ML9c9eBbbF61abWosmylKvZLqe4YKYPgL0cUcorMdXgeZgIS/eWbL08
lVmO3to31Rkm3mWjPCYD3scOAYmslb1X60P4pgbVK5aAX3gg7NUEZa1ofzvPMSUw
RxIhJc3cHv0TTJ1shPPE14bPQaiR/jcwmR9lVM+7p+bgx9EdWH5IOChqUooeHjYn
7+JOPOHd4OqvJIgJnxNneZWsmyxsVzNMFgyGdjsrMMMCEFMeE5yN5L4XtUQ9P92n
Ts80QZr8GJBrbuwXolpmbgnQYEaB0DctOKqcsopgdC7bBxGxmMKJ9JLzjhYskUfE
+uMkmXYLRoTDT9A=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:33 2026 by rpki-client