This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32322d3232203d3e20323632343738.roa
File:                     3137372e34372e3234382e302f32322d3232203d3e20323632343738.roa (raw, json)
Hash identifier:          13SY39/ymM6nN/74IbiebaKEwRxXYYkmujNvX4TSE68=
Subject key identifier:   1B:EE:38:3F:34:BB:96:89:33:DD:EE:E0:01:38:03:5F:94:5B:A2:A6
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       3CC89B193172EBB5DC8E643FEF3F62B1130AB075
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32322d3232203d3e20323632343738.roa
Signing time:             Sat 17 Jan 2026 16:14:57 +0000
ROA not before:           Sat 17 Jan 2026 16:09:57 +0000
ROA not after:            Sat 16 Jan 2027 16:14:57 +0000
asID:                     262478
IP address blocks:        177.47.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c8:9b:19:31:72:eb:b5:dc:8e:64:3f:ef:3f:62:b1:13:0a:b0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Jan 17 16:09:57 2026 GMT
            Not After : Jan 16 16:14:57 2027 GMT
        Subject: CN=1BEE383F34BB968933DDEEE00138035F945BA2A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:b4:f8:83:ae:0a:63:c6:6f:7e:3d:4f:bb:
                    22:a8:d5:67:6d:52:2c:57:9a:3a:7b:7b:0c:7d:8a:
                    84:d9:e5:5b:53:6e:cf:ef:eb:cb:a1:b5:92:d5:6a:
                    49:33:bb:60:2b:a3:7c:52:b0:53:f0:ba:27:ee:ad:
                    b6:e7:2d:4a:e1:23:f0:02:7f:83:4c:26:5f:0c:52:
                    2c:01:7f:f9:fb:1f:14:a2:49:88:54:be:9e:9a:40:
                    a1:ec:cd:75:ec:bb:95:aa:98:1e:6f:fe:2a:33:98:
                    da:0e:03:c3:4d:78:12:50:f7:69:78:51:35:66:42:
                    f0:9a:8d:7e:ef:f2:59:8d:d8:bd:34:ae:b1:23:9e:
                    81:d7:8b:04:58:35:1b:15:d0:f8:e4:68:dd:f4:45:
                    b6:03:7d:b9:5d:14:86:21:0f:06:b5:59:3f:4c:1b:
                    77:92:70:f7:39:19:f2:08:ef:27:a5:8f:90:82:b8:
                    4e:b0:93:9a:bf:17:5b:8e:9c:57:31:18:71:d2:fc:
                    35:9b:15:73:ca:6b:6a:88:ee:f8:cd:f0:8c:dc:ef:
                    95:b8:ed:31:02:54:14:5e:87:6f:4e:da:49:02:ba:
                    34:79:b5:09:93:29:17:5d:dc:f0:77:de:51:31:d2:
                    7d:66:3e:6c:03:ba:fb:0f:31:97:18:06:11:17:67:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EE:38:3F:34:BB:96:89:33:DD:EE:E0:01:38:03:5F:94:5B:A2:A6
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32322d3232203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:c0:39:a5:b2:bd:6a:a2:29:6b:c7:e4:16:cc:cf:ed:c7:e0:
         d0:c9:49:30:95:c6:d7:15:3e:3a:4b:bb:68:2c:fd:cd:39:c8:
         e0:76:e0:30:c5:19:40:27:de:5d:d8:07:4d:27:56:af:73:22:
         a4:43:fa:ad:68:7a:b0:a3:66:f4:21:22:1d:a6:77:c1:61:12:
         5c:e1:2f:80:2d:f6:0a:b5:eb:b1:fa:af:56:f4:66:3c:c4:8e:
         f7:98:3a:9f:f7:2c:64:1a:3e:14:09:23:9d:bd:30:e8:af:13:
         05:a8:a7:21:fe:9a:a9:0c:85:38:fa:9c:71:6a:bc:7a:84:60:
         a9:a8:24:c4:55:2a:aa:6e:de:71:a7:cb:5e:35:c3:b1:3b:d1:
         40:e7:91:44:4c:0e:28:81:cc:9c:5c:a4:f9:10:b8:b6:22:4e:
         b8:62:1c:89:d9:c9:1f:9d:46:db:e7:b3:93:42:eb:5b:c5:3f:
         86:df:b0:3d:ff:3e:a6:60:bf:1f:f2:2b:e1:c1:d3:fa:27:1f:
         15:01:4c:3b:4d:8c:1f:4e:a5:00:64:64:d8:9d:ad:80:4f:95:
         db:ef:c0:ed:05:23:d0:12:46:09:76:d1:7c:87:51:a5:05:be:
         f2:c3:b5:09:30:cf:2f:59:b3:7a:48:be:b7:5f:7a:82:9c:34:
         3d:cf:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:47:42 2026 by rpki-client