This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa
File:                     3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa (raw, json)
Hash identifier:          A8re+tmSgayYIupFAg3xBVpqPMQuPTm+tj71ItpUib8=
Subject key identifier:   6A:71:65:9A:B3:25:A3:67:E5:B9:59:7D:DE:8B:D8:D7:A8:BA:28:84
Certificate issuer:       /CN=50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328
Certificate serial:       7BD8D2BDB1EE06506F8D00C93C9D3BF5220CC2E3
Authority key identifier: 50:DD:B4:AD:4C:AE:8B:E9:D8:76:B4:6C:EE:A0:FD:F7:71:90:03:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa
Signing time:             Wed 21 Jan 2026 19:47:18 +0000
ROA not before:           Wed 21 Jan 2026 19:42:18 +0000
ROA not after:            Wed 20 Jan 2027 19:47:18 +0000
asID:                     262355
IP address blocks:        177.91.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d8:d2:bd:b1:ee:06:50:6f:8d:00:c9:3c:9d:3b:f5:22:0c:c2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328
        Validity
            Not Before: Jan 21 19:42:18 2026 GMT
            Not After : Jan 20 19:47:18 2027 GMT
        Subject: CN=6A71659AB325A367E5B9597DDE8BD8D7A8BA2884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:9a:76:62:a6:0f:69:d1:73:5e:0b:b2:6d:
                    a2:f7:90:eb:af:e1:7c:04:39:4d:2f:01:3b:85:c3:
                    d2:66:06:5a:00:22:ce:64:f6:6b:63:b6:e0:9e:32:
                    19:6a:66:a1:f1:d1:e6:67:3c:a3:18:c4:74:e6:7d:
                    1c:9f:61:93:cb:e7:dd:2e:0f:f4:cc:c2:4d:3f:9c:
                    8f:4e:d1:2f:1d:2c:96:be:0a:7f:c9:0b:8e:21:ff:
                    9f:35:39:24:42:ec:72:69:5e:92:b3:90:eb:8f:c6:
                    4c:f3:92:1f:65:61:35:72:e0:10:6b:5d:9f:63:69:
                    58:07:ee:64:d3:50:73:dd:6c:03:76:7f:74:58:54:
                    99:1e:20:48:97:35:b0:0c:a6:80:22:a7:3d:9e:90:
                    46:26:78:df:cf:36:52:65:88:57:56:59:05:13:96:
                    4e:26:38:7d:8f:f5:68:e1:d6:64:b8:a6:26:ac:e3:
                    c9:de:07:80:df:e5:c3:79:0b:f9:55:b4:3d:56:ab:
                    47:91:d5:87:3c:01:37:94:ad:f2:6e:35:12:4d:04:
                    45:5a:ed:4b:a2:d1:23:ee:2b:0d:4d:3d:00:ba:ed:
                    24:ba:04:b2:2a:e3:a1:30:c6:7f:e2:ac:53:1a:a3:
                    a6:23:06:7d:1f:f5:b4:38:b2:cb:fa:95:d5:77:52:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:71:65:9A:B3:25:A3:67:E5:B9:59:7D:DE:8B:D8:D7:A8:BA:28:84
            X509v3 Authority Key Identifier:
                keyid:50:DD:B4:AD:4C:AE:8B:E9:D8:76:B4:6C:EE:A0:FD:F7:71:90:03:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:af:7c:75:0f:29:70:19:ac:2f:70:79:7d:d4:86:61:28:
         46:b4:a2:30:6d:4f:0f:5d:ed:bc:27:4c:c8:aa:0a:c3:e6:c8:
         6a:df:49:31:a9:6d:ae:5a:d8:28:e3:97:7a:ab:8d:25:58:54:
         6a:26:a1:20:b4:30:cd:d9:18:3c:a1:bc:a2:dc:ce:23:2d:71:
         0c:08:e0:31:c6:b4:1f:7f:f1:9c:a8:a1:ce:47:f9:89:df:35:
         ea:4c:8a:cd:dc:90:a6:c8:a6:a6:41:67:52:36:21:60:79:ed:
         cb:68:8b:fc:9c:3c:f6:37:8f:9d:79:a7:64:d4:4b:b2:2f:76:
         16:f6:8b:1d:a4:0e:e8:78:05:65:aa:78:65:05:85:33:b4:c7:
         2b:46:9e:14:88:2b:ba:0d:81:42:56:e5:25:87:76:eb:88:14:
         db:da:cf:d3:6f:42:8d:6f:a2:f5:43:70:77:d4:60:01:fb:73:
         b9:ae:6f:d6:a7:59:d5:3e:3e:ed:0d:8b:6d:bd:51:a6:cf:b3:
         da:1e:0d:2b:f7:a5:98:82:db:d5:46:d2:f1:11:97:70:31:c6:
         70:27:80:7a:fe:e9:c0:4e:c7:71:4d:f1:15:86:a1:19:9f:5e:
         aa:51:bd:b1:37:75:8d:da:07:89:0e:1b:6f:d5:87:82:3c:df:
         a6:a7:66:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:23 2026 by rpki-client