This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          H6lAeS3CpsGP4rhsuum8/3TCVvwj3GELb0X5+xMvEw4=
Subject key identifier:   56:CA:6E:58:BD:7A:85:6D:AA:41:91:83:B0:B8:8F:F3:F8:82:8B:6F
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       5F1FF1E21AC23CDB0A4713E8988C01512A5968C2
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa
Signing time:             Sat 17 Jan 2026 16:15:00 +0000
ROA not before:           Sat 17 Jan 2026 16:10:00 +0000
ROA not after:            Sat 16 Jan 2027 16:15:00 +0000
asID:                     262478
IP address blocks:        177.47.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1f:f1:e2:1a:c2:3c:db:0a:47:13:e8:98:8c:01:51:2a:59:68:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Jan 17 16:10:00 2026 GMT
            Not After : Jan 16 16:15:00 2027 GMT
        Subject: CN=56CA6E58BD7A856DAA419183B0B88FF3F8828B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:ca:06:e3:61:0d:cd:3b:b4:b6:de:48:cc:
                    a9:5f:f4:5c:8b:02:fd:9b:91:f7:6c:5b:50:2f:4f:
                    70:e5:44:ef:26:cc:79:e1:bb:ea:f4:67:92:1c:f6:
                    ec:5a:45:42:91:e4:3d:f9:f9:ac:07:5e:7f:f0:05:
                    fd:0a:5c:d1:eb:9f:b6:e3:10:62:2f:c7:53:db:87:
                    3d:f7:c8:8c:c0:ff:64:6b:61:55:68:6a:bc:3b:ad:
                    24:f3:fb:7a:1f:e6:23:9a:6c:e6:c5:14:11:98:c2:
                    62:ed:22:89:89:bf:bc:72:b5:05:8d:92:2d:63:99:
                    fd:69:9e:54:1e:52:63:4c:30:85:0a:aa:d4:da:ce:
                    9c:72:6b:cd:a9:ad:f7:8e:3c:f9:65:d1:b5:74:6e:
                    a9:31:60:e2:10:24:c5:1f:17:61:7f:de:c4:61:31:
                    81:5d:a1:ab:14:76:3a:ff:0d:53:3d:e9:19:da:0f:
                    9d:28:01:1c:3a:ca:67:d0:1a:86:c8:0c:d4:44:ac:
                    ec:eb:1a:c4:71:2f:c4:f3:f5:99:e0:be:b3:30:b4:
                    23:0f:cd:57:61:ec:3c:da:9e:d5:81:46:7a:87:99:
                    a7:9f:71:8c:cf:8b:01:2d:c9:70:06:d8:ac:19:84:
                    43:51:10:52:27:8d:a7:07:80:4c:84:d1:d0:d5:55:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CA:6E:58:BD:7A:85:6D:AA:41:91:83:B0:B8:8F:F3:F8:82:8B:6F
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235302e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:12:1d:a3:59:aa:bb:e0:66:0b:8c:2b:48:06:f3:b0:d2:cb:
         ab:ee:a8:67:51:59:40:ad:17:f0:71:6c:44:47:ca:20:99:0b:
         71:54:83:2d:a9:33:be:e8:8e:3e:17:b4:95:4e:2e:58:70:bc:
         19:5c:80:49:8b:60:70:e3:b3:95:71:48:08:1e:6a:1d:ff:19:
         18:c2:09:34:30:0a:0d:ff:89:19:1e:7c:db:fe:be:f6:e0:8f:
         ca:ff:56:c6:ce:f1:bb:9f:e8:cd:87:f3:f7:7f:24:51:68:e9:
         f0:de:28:06:54:a6:6f:8a:ba:78:38:c0:31:af:30:7c:4c:44:
         68:d4:cc:a8:f0:4a:58:30:80:e4:c1:1c:e3:84:f5:66:d3:1d:
         7b:ef:7d:2d:41:ac:31:12:8a:ec:84:5d:47:29:19:96:4b:25:
         d5:96:d3:1d:01:7c:56:98:5d:06:44:da:32:7b:a3:59:6a:36:
         9f:0a:99:f7:8b:12:09:73:c9:18:c5:48:fb:5d:8d:7a:b5:1c:
         69:65:2d:eb:5e:ed:0a:ac:54:6c:67:aa:23:10:cb:42:bf:11:
         1f:6d:98:a6:87:5c:ee:88:70:19:77:b6:e5:94:be:9d:41:04:
         95:45:b2:37:8b:4c:b1:bf:75:c1:07:44:21:6e:01:93:46:ce:
         12:81:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:58:40 2026 by rpki-client