This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134372e302f32342d3234203d3e203236343536.roa
File:                     3137372e3139302e3134372e302f32342d3234203d3e203236343536.roa (raw, json)
Hash identifier:          FgfUY+CSpOOF3v7mWRPKCuxonVW0oNB+DkAFZ0GhflI=
Subject key identifier:   A1:83:CA:7A:A6:6B:5C:01:68:1A:D1:1C:F1:C8:27:C2:60:A7:1D:71
Certificate issuer:       /CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C
Certificate serial:       61D25D01A14192D86F3F7FBFF860FC8881AABAF1
Authority key identifier: 1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134372e302f32342d3234203d3e203236343536.roa
Signing time:             Thu 22 Jan 2026 13:03:50 +0000
ROA not before:           Thu 22 Jan 2026 12:58:50 +0000
ROA not after:            Thu 21 Jan 2027 13:03:50 +0000
asID:                     26456
IP address blocks:        177.190.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl
                          rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d2:5d:01:a1:41:92:d8:6f:3f:7f:bf:f8:60:fc:88:81:aa:ba:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C
        Validity
            Not Before: Jan 22 12:58:50 2026 GMT
            Not After : Jan 21 13:03:50 2027 GMT
        Subject: CN=A183CA7AA66B5C01681AD11CF1C827C260A71D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:65:cd:b9:ac:8b:6a:c7:77:79:cc:7a:e6:4a:
                    b6:b5:34:22:4b:2d:27:31:aa:20:df:37:c4:47:28:
                    c6:3b:99:78:1c:56:24:77:78:24:9a:f3:15:03:9c:
                    a3:95:18:dd:39:6f:d0:43:a7:64:af:d1:eb:80:01:
                    56:4c:f3:bb:d6:f5:95:0f:70:4a:0b:28:a5:06:3f:
                    95:a1:c8:cc:7a:fa:ce:ca:17:03:08:fb:81:94:b9:
                    ec:4d:15:ba:a8:9b:f7:49:d7:aa:23:44:8e:d4:f6:
                    36:d5:c5:55:71:6c:0e:4b:9d:a4:65:03:2b:a7:11:
                    f2:3e:15:c8:d9:4a:1e:67:0a:8a:d4:95:46:27:7f:
                    0b:33:8e:f2:d7:08:67:e3:6d:84:7c:5d:39:92:fc:
                    2c:20:ba:3f:bb:0e:06:ae:56:2a:2b:18:5d:fd:91:
                    c0:55:30:11:6e:33:99:c1:92:1b:e1:5d:21:5f:39:
                    4c:59:81:1c:1f:31:a7:7e:d4:8e:22:b8:0d:eb:86:
                    2f:d1:7b:0a:23:ac:24:44:2f:ce:1c:3f:f1:67:a9:
                    6b:f4:a0:91:a9:75:91:1e:85:21:e0:41:3c:1a:92:
                    e6:95:35:96:aa:b2:43:0e:7c:17:c3:11:e6:f3:ff:
                    01:5d:c4:34:6c:25:ea:27:1b:4f:8b:4c:97:bd:aa:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:83:CA:7A:A6:6B:5C:01:68:1A:D1:1C:F1:C8:27:C2:60:A7:1D:71
            X509v3 Authority Key Identifier:
                keyid:1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134372e302f32342d3234203d3e203236343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:cd:22:24:47:3c:f4:98:ba:8b:6f:f6:5f:49:e6:4e:8e:69:
         ff:bb:78:32:92:00:30:70:93:5d:c2:f0:8c:2a:f4:15:18:8c:
         28:32:a4:73:37:08:37:47:04:c6:da:ea:d9:18:f5:8c:80:b0:
         9f:74:62:39:26:ee:47:b3:7f:dd:5f:68:72:8d:6e:dc:e9:6c:
         a4:3e:cb:3c:27:47:52:26:1f:55:24:51:f3:f4:2b:4c:68:d7:
         59:a8:f0:5d:6f:ab:04:0d:9a:b4:35:2f:ab:5d:64:95:90:e2:
         6b:bc:9a:c7:4b:d6:18:cb:4a:df:16:69:14:27:15:48:63:d9:
         a3:c4:a3:06:5d:09:f2:e3:e3:13:4b:58:d5:c3:57:a4:d2:98:
         ed:65:4b:88:f6:bf:0b:89:ef:94:96:ea:e6:75:cd:1f:bd:02:
         b9:05:10:6a:c2:ca:a9:d0:75:4e:d3:a7:f9:21:d9:98:fa:19:
         4b:33:ae:89:fb:47:16:f3:1e:c2:40:b4:54:34:9c:7b:05:40:
         1f:c7:c7:1e:bb:cb:18:e4:e0:4c:8f:19:50:86:c6:22:ef:fc:
         2d:20:c1:47:71:db:9d:a5:94:19:5b:9c:83:41:8e:78:e2:31:
         6c:a0:ff:7a:20:ef:f6:07:8d:8c:a6:91:bc:93:5f:3e:64:cb:
         30:e6:06:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:21:34 2026 by rpki-client