This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e36372e3139322e302f32312d3234203d3e20323632393037.roa
File:                     3137372e36372e3139322e302f32312d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          1Nl68cT5+jtnePD5xWuOBEXcB4JVnHKkablt1PA4nvc=
Subject key identifier:   DE:77:A8:0D:9B:4F:4F:61:58:E4:AA:F7:F2:22:02:2D:7F:89:D1:2E
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       5330C022857A2FA67BA4193ED1CAE4E9BB4469A7
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e36372e3139322e302f32312d3234203d3e20323632393037.roa
Signing time:             Mon 19 Jan 2026 17:34:10 +0000
ROA not before:           Mon 19 Jan 2026 17:29:10 +0000
ROA not after:            Mon 18 Jan 2027 17:34:10 +0000
asID:                     262907
IP address blocks:        177.67.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:30:c0:22:85:7a:2f:a6:7b:a4:19:3e:d1:ca:e4:e9:bb:44:69:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Jan 19 17:29:10 2026 GMT
            Not After : Jan 18 17:34:10 2027 GMT
        Subject: CN=DE77A80D9B4F4F6158E4AAF7F222022D7F89D12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:09:d6:e3:51:86:71:80:fd:28:6d:72:53:22:
                    d7:a7:5d:8a:2e:e4:8b:43:73:f6:b6:5c:78:8f:f0:
                    58:37:34:f9:da:61:96:ad:c0:0e:63:ed:62:69:00:
                    c9:fb:af:a7:59:c8:87:ba:c9:51:f2:ac:9a:b3:7e:
                    83:0e:fb:2d:70:e8:6c:66:8d:ad:db:04:4f:bd:90:
                    7c:98:9c:20:3c:3c:81:d4:0e:93:f1:2e:cb:56:d5:
                    77:3b:25:fd:19:50:42:ca:85:36:7c:2b:1c:8d:a1:
                    f4:a2:51:4c:4e:af:1e:dc:ba:96:20:e1:c8:68:fa:
                    2a:1c:42:0d:c2:8b:14:af:2e:37:74:db:13:ba:6b:
                    3b:db:eb:4c:24:d4:b3:66:a6:8e:d5:15:1a:12:c4:
                    f7:62:26:13:c1:68:ea:fa:97:60:26:e0:54:55:e6:
                    60:58:28:64:6b:fa:fd:cd:d3:0a:da:b2:74:42:7a:
                    5f:5c:a7:32:ca:bf:c8:2a:27:47:16:5c:1c:09:8c:
                    6c:8e:1b:13:78:92:e8:50:28:75:b0:c2:cc:b0:f3:
                    d6:10:7e:24:b1:15:a6:27:f3:30:4e:83:0c:85:0d:
                    07:ee:5e:dc:52:0f:0a:c3:f4:ba:4f:22:43:a6:1e:
                    f2:55:f7:92:0f:66:15:16:9b:fb:b7:8d:62:ad:c1:
                    a4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:77:A8:0D:9B:4F:4F:61:58:E4:AA:F7:F2:22:02:2D:7F:89:D1:2E
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e36372e3139322e302f32312d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:c7:21:c3:0c:df:75:ba:02:39:7f:30:66:85:57:e4:ed:
         f7:cc:2f:f8:7c:50:18:b3:b4:36:d5:a5:a7:e5:58:54:c4:aa:
         fe:01:5e:b1:d7:92:44:96:53:48:5d:75:12:fa:21:4d:dd:9c:
         27:b1:73:2a:25:0b:50:bd:48:5e:4f:49:fe:fb:8c:0d:3f:a9:
         2d:6e:f2:09:ce:60:a2:2b:e6:d8:e9:ce:d3:f2:c2:e4:e7:f8:
         bc:ca:0f:6f:63:99:39:30:0d:50:a7:b1:1e:50:cb:8a:7c:bb:
         6b:f6:38:8e:e3:65:8c:e3:21:4c:df:5a:df:29:c6:bc:69:22:
         06:14:3d:4e:cd:c3:31:47:50:85:c3:cd:c8:21:87:70:11:31:
         d9:d3:ad:1b:df:e6:d2:b8:25:70:81:9e:11:13:25:23:f0:46:
         22:c4:82:99:18:3d:3f:c1:b2:70:fa:f8:13:13:9f:dd:ad:ac:
         b1:b8:e2:66:dd:d7:a9:11:ae:8a:a4:90:20:45:80:9a:d7:55:
         80:e0:4c:11:37:93:b0:14:31:af:1e:88:38:8c:d0:50:0c:ef:
         2c:d1:57:60:3b:f1:01:cb:73:1b:88:40:81:c4:bb:a2:5d:62:
         9d:13:e5:bf:e2:65:53:e1:87:10:4a:88:81:ce:c1:6d:f7:38:
         0e:09:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:44 2026 by rpki-client