This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e3230302e3137362e302f32302d3234203d3e20323632393037.roa
File:                     3137372e3230302e3137362e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          kPKq46VDculrTJg53TztGATD7WxsqYZgFsmBI/4hC8M=
Subject key identifier:   9A:76:A6:A5:BD:9D:6F:C8:A5:D8:76:69:40:78:6A:F8:BC:12:45:60
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       7371E8CCA01B1D5D7775871067D353F2985B62CA
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e3230302e3137362e302f32302d3234203d3e20323632393037.roa
Signing time:             Mon 19 Jan 2026 17:34:09 +0000
ROA not before:           Mon 19 Jan 2026 17:29:09 +0000
ROA not after:            Mon 18 Jan 2027 17:34:09 +0000
asID:                     262907
IP address blocks:        177.200.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:71:e8:cc:a0:1b:1d:5d:77:75:87:10:67:d3:53:f2:98:5b:62:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Jan 19 17:29:09 2026 GMT
            Not After : Jan 18 17:34:09 2027 GMT
        Subject: CN=9A76A6A5BD9D6FC8A5D8766940786AF8BC124560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4a:29:2a:90:fb:35:1e:de:0b:c5:4b:a3:a1:
                    1c:de:2d:06:ac:23:72:59:e8:4d:b2:4b:54:88:90:
                    18:96:96:d7:7b:cb:df:85:51:59:e4:5b:99:20:59:
                    89:96:77:fb:92:8c:34:d4:31:9a:7d:1c:df:b5:60:
                    3a:6f:da:cb:37:bb:a7:8a:8e:ef:06:52:b7:36:7e:
                    bf:61:a7:d8:da:e6:8e:ba:ce:ef:85:b4:de:e9:7e:
                    72:a2:3b:57:cd:6c:d6:da:cd:e9:ce:f7:fd:6c:02:
                    4a:37:95:3e:6a:3c:b0:5b:e2:d0:3f:16:37:f8:d6:
                    92:84:c9:1b:77:e0:d0:bf:92:f0:d9:58:22:3e:a3:
                    44:44:e0:f0:ef:b0:1d:10:a7:7f:23:d1:c1:10:bd:
                    1f:5f:38:e1:76:ad:12:4b:70:f3:86:4f:98:5c:05:
                    fa:ca:87:22:61:1b:f7:c1:a9:55:b9:f7:ff:05:b4:
                    75:72:b4:84:9c:6b:4d:d2:09:01:2d:de:3a:5a:28:
                    53:cc:2e:42:d2:4b:52:a9:9f:3f:1b:65:bb:59:43:
                    23:b1:39:d9:6a:06:7e:41:9c:f8:0c:2a:07:f3:72:
                    68:f8:42:e5:b9:f9:f8:9b:d5:ff:2f:ea:34:02:aa:
                    0d:66:d9:8a:6d:98:c6:14:e4:b0:61:9c:25:1d:da:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:76:A6:A5:BD:9D:6F:C8:A5:D8:76:69:40:78:6A:F8:BC:12:45:60
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e3230302e3137362e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:03:16:22:75:65:5e:f4:fb:c9:b7:f0:09:bb:d4:54:23:
         a6:67:e8:c0:bf:46:db:b4:98:c8:76:23:15:da:29:a3:50:7e:
         e9:7f:64:51:87:6e:de:80:5e:b9:05:be:e9:67:ab:3f:7e:b6:
         85:32:55:8e:c2:dc:b3:ca:7b:35:0b:f2:eb:11:63:8f:68:b5:
         b3:bc:09:94:65:19:d2:d5:4e:c7:84:0f:b2:d0:82:9a:b9:60:
         82:c8:a1:84:8b:29:73:72:32:e7:a4:07:4a:7e:54:a1:f3:89:
         2a:f4:48:8a:d3:76:c8:5f:72:f2:6e:5c:c4:bb:5c:14:20:c0:
         b6:b4:aa:2b:95:3b:b5:fc:92:bd:42:66:4d:b4:04:ba:38:06:
         17:3d:81:7f:98:ad:e4:10:ac:89:c7:e0:b5:4e:e9:97:7f:c1:
         8a:96:52:21:86:aa:e9:70:51:05:ef:72:10:de:13:13:e8:83:
         0d:61:21:c5:24:fa:ff:cb:fa:55:89:98:c4:4e:53:dd:2a:70:
         8c:7c:33:81:e3:39:45:51:8f:9e:f3:34:05:79:78:1a:77:9e:
         f6:4d:f5:13:ea:bb:28:26:2b:53:05:b3:0d:d9:a7:9d:f8:31:
         27:ce:15:7b:f8:3d:4f:cb:5f:05:14:ec:93:83:1e:e8:55:c1:
         bf:0d:df:30
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUc3HozKAbHV13dYcQZ9NT8phbYsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5
MDkzODQ1ODAeFw0yNjAxMTkxNzI5MDlaFw0yNzAxMTgxNzM0MDlaMDMxMTAvBgNV
BAMTKDlBNzZBNkE1QkQ5RDZGQzhBNUQ4NzY2OTQwNzg2QUY4QkMxMjQ1NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOSikqkPs1Ht4LxUujoRzeLQas
I3JZ6E2yS1SIkBiWltd7y9+FUVnkW5kgWYmWd/uSjDTUMZp9HN+1YDpv2ss3u6eK
ju8GUrc2fr9hp9ja5o66zu+FtN7pfnKiO1fNbNbazenO9/1sAko3lT5qPLBb4tA/
Fjf41pKEyRt34NC/kvDZWCI+o0RE4PDvsB0Qp38j0cEQvR9fOOF2rRJLcPOGT5hc
BfrKhyJhG/fBqVW59/8FtHVytISca03SCQEt3jpaKFPMLkLSS1Kpnz8bZbtZQyOx
OdlqBn5BnPgMKgfzcmj4QuW5+fib1f8v6jQCqg1m2YptmMYU5LBhnCUd2qaBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmnampb2db8il2HZpQHhq+LwSRWAwHwYDVR0j
BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0
SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB
ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv
MzEzNzM3MmUzMjMwMzAyZTMxMzczNjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLHIsDANBgkqhkiG9w0BAQsFAAOCAQEANLgD
FiJ1ZV70+8m38Am71FQjpmfowL9G27SYyHYjFdopo1B+6X9kUYdu3oBeuQW+6Wer
P362hTJVjsLcs8p7NQvy6xFjj2i1s7wJlGUZ0tVOx4QPstCCmrlggsihhIspc3Iy
56QHSn5UofOJKvRIitN2yF9y8m5cxLtcFCDAtrSqK5U7tfySvUJmTbQEujgGFz2B
f5it5BCsicfgtU7pl3/BipZSIYaq6XBRBe9yEN4TE+iDDWEhxST6/8v6VYmYxE5T
3SpwjHwzgeM5RVGPnvM0BXl4Gnee9k31E+q7KCYrUwWzDdmnnfgxJ84Ve/g9T8tf
BRTsk4Me6FXBvw3fMA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:43 2026 by rpki-client