This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134362e302f32342d3234203d3e20323633343536.roa
File:                     3137372e3139302e3134362e302f32342d3234203d3e20323633343536.roa (raw, json)
Hash identifier:          a0ODVlqvbhDtJtRFm7Qk90bdyNE/UMHnkbrWRTMDILo=
Subject key identifier:   55:55:8D:A7:2D:AB:17:7A:87:B4:1F:DF:AD:0C:29:B4:A8:24:97:BC
Certificate issuer:       /CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C
Certificate serial:       464C45240EB6448CEE90ECDB49609DDF177EFB60
Authority key identifier: 1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134362e302f32342d3234203d3e20323633343536.roa
Signing time:             Wed 31 Dec 2025 13:13:12 +0000
ROA not before:           Wed 31 Dec 2025 13:08:12 +0000
ROA not after:            Wed 30 Dec 2026 13:13:12 +0000
asID:                     263456
IP address blocks:        177.190.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl
                          rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4c:45:24:0e:b6:44:8c:ee:90:ec:db:49:60:9d:df:17:7e:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C
        Validity
            Not Before: Dec 31 13:08:12 2025 GMT
            Not After : Dec 30 13:13:12 2026 GMT
        Subject: CN=55558DA72DAB177A87B41FDFAD0C29B4A82497BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:ed:6e:45:d2:ba:5a:17:84:80:e2:92:bb:
                    49:78:1a:8e:05:41:6b:b7:17:6e:7f:29:9c:7e:fa:
                    eb:4d:cd:d5:0e:76:4d:e0:99:1f:0b:64:fa:54:3a:
                    d9:91:58:3c:dd:fd:81:79:65:1d:fd:cc:d9:53:5f:
                    99:df:1b:fa:00:53:cb:51:76:36:95:a2:1e:67:7d:
                    63:73:11:86:11:9c:94:57:45:09:d1:92:c2:c6:d0:
                    9f:25:4f:58:8b:50:c6:40:f0:44:43:a6:5f:6a:e9:
                    e4:20:f8:d3:b9:95:c3:26:27:ab:ad:db:64:d8:5b:
                    e8:30:8c:07:a5:b7:58:fd:94:c3:b5:0b:05:28:aa:
                    ce:77:72:92:7b:52:a7:78:98:46:01:53:4a:8d:3a:
                    9d:2c:28:b3:b6:03:2f:a1:20:94:4b:0c:ee:54:fb:
                    bd:f8:5c:60:c6:f3:5f:2c:97:7a:ba:7f:e2:6e:0f:
                    5e:0a:ae:09:1d:4e:8e:97:55:e8:15:21:0e:f1:a8:
                    59:fc:1e:78:7b:08:44:07:bb:74:87:d9:77:65:42:
                    62:20:e1:a2:fb:b0:98:3f:11:6d:aa:ba:70:01:f2:
                    86:8e:79:a7:e6:5d:70:b5:80:9f:e5:05:f7:26:31:
                    3e:94:3c:1f:02:61:eb:77:88:fe:d2:1d:3c:4e:16:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:55:8D:A7:2D:AB:17:7A:87:B4:1F:DF:AD:0C:29:B4:A8:24:97:BC
            X509v3 Authority Key Identifier:
                keyid:1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134362e302f32342d3234203d3e20323633343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e8:cb:59:d7:ad:ca:ba:14:86:cc:fa:8f:7e:12:e3:1b:1f:
         51:b9:c8:f3:5c:2b:12:1a:48:1f:9c:56:9c:97:09:6d:d7:10:
         f4:50:9c:2a:11:cb:2e:5e:fd:10:4e:f5:ee:02:34:80:ea:bf:
         58:f4:0d:85:ef:94:34:d1:01:18:c2:ee:2c:f0:08:4a:c4:dc:
         f7:d1:39:e8:aa:cd:67:54:50:65:b6:d3:6f:5c:de:07:cd:00:
         01:72:56:52:61:a2:4d:28:e4:8c:d8:f6:91:44:59:1e:f6:23:
         8a:cb:0a:83:b0:d3:ff:1e:37:0d:fa:1c:92:ab:b1:ab:54:0a:
         ec:03:68:36:7a:e8:26:72:ab:20:18:9d:8e:7d:27:a0:e0:91:
         45:01:bb:8f:aa:17:14:8a:44:5c:78:48:54:62:04:50:af:b1:
         75:be:4e:97:8d:bb:0a:0d:c1:67:4b:5f:e9:39:c8:d9:bf:eb:
         6b:d4:fe:e8:fc:22:61:63:b9:79:24:5b:17:b8:e5:21:79:6d:
         e4:6d:84:54:33:31:11:39:8c:dc:74:cf:8c:3d:b6:79:00:a3:
         c1:40:65:35:28:af:85:67:44:47:93:a0:0c:25:aa:9b:b5:10:
         57:ec:0b:6a:42:03:38:25:4f:ea:a3:09:70:0e:cc:8b:4e:d4:
         23:95:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:21:29 2026 by rpki-client