This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3232203d3e203631363634.roa
File:                     3133312e3130382e36302e302f32322d3232203d3e203631363634.roa (raw, json)
Hash identifier:          HsRmMa8BTcJyj0DvS8Urzn0MWt6dPxNBzjURwyT7joM=
Subject key identifier:   DD:94:B2:AB:43:4E:B6:E7:F7:CD:AE:BE:AA:64:98:DA:B5:E9:B3:3D
Certificate issuer:       /CN=8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E
Certificate serial:       5F1478CEC924BABBB6653D94D3CC02399ABCD0B8
Authority key identifier: 8B:7A:B2:E0:B7:3A:2D:33:41:57:B4:75:4E:6E:B2:34:E9:D3:A1:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3232203d3e203631363634.roa
Signing time:             Tue 20 Jan 2026 13:51:47 +0000
ROA not before:           Tue 20 Jan 2026 13:46:47 +0000
ROA not after:            Tue 19 Jan 2027 13:51:47 +0000
asID:                     61664
IP address blocks:        131.108.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.crl
                          rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 02:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:14:78:ce:c9:24:ba:bb:b6:65:3d:94:d3:cc:02:39:9a:bc:d0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E
        Validity
            Not Before: Jan 20 13:46:47 2026 GMT
            Not After : Jan 19 13:51:47 2027 GMT
        Subject: CN=DD94B2AB434EB6E7F7CDAEBEAA6498DAB5E9B33D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:b0:85:34:f5:10:3a:53:4a:f0:7d:b1:93:
                    f5:2a:f5:89:39:d0:71:da:13:2a:8a:13:a1:45:1f:
                    80:38:f0:41:ee:15:da:cc:00:5d:d3:32:69:47:22:
                    45:18:70:dc:4b:d7:09:eb:ec:7e:b9:2c:6d:16:26:
                    47:57:da:5a:5e:5a:ea:af:fd:e0:7b:3d:74:aa:6e:
                    46:38:ba:20:e1:ec:71:2f:0f:34:87:46:d6:46:3f:
                    22:28:15:9a:2b:60:41:4c:83:3d:f9:91:31:60:7f:
                    2e:b5:8f:67:d3:5d:22:9f:5e:f5:b5:76:f1:52:2a:
                    2c:86:e8:cf:ba:fa:00:01:c1:10:61:d1:e8:e1:90:
                    bc:11:ce:f5:1c:b3:ac:c0:9a:7d:36:e1:c5:06:e3:
                    31:e7:dc:da:5d:1a:2e:5f:c8:87:8d:66:bf:a0:c4:
                    ad:25:dd:46:81:a7:d2:ee:36:89:be:c9:60:45:b3:
                    7d:8c:c3:60:86:63:a4:07:c9:b0:ce:e8:de:08:b6:
                    9f:5d:ea:1f:b1:d2:77:a9:94:60:c0:3a:44:9e:ce:
                    db:fe:9b:f5:11:d0:64:ff:34:83:2a:b9:c2:c5:e1:
                    00:a4:89:49:c9:2b:cc:3b:4c:9a:24:58:d1:d8:4a:
                    10:87:13:6c:28:f7:1e:08:cd:45:81:32:2a:74:dd:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:B2:AB:43:4E:B6:E7:F7:CD:AE:BE:AA:64:98:DA:B5:E9:B3:3D
            X509v3 Authority Key Identifier:
                keyid:8B:7A:B2:E0:B7:3A:2D:33:41:57:B4:75:4E:6E:B2:34:E9:D3:A1:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3232203d3e203631363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:12:ab:d4:59:f2:d1:42:45:b2:64:8c:89:f0:04:6b:67:71:
         e9:d1:9c:d2:2b:a9:5d:30:b4:a3:fa:cb:60:b3:c9:ca:75:18:
         2f:bc:3d:f3:49:ba:69:50:d0:96:c3:76:4b:b0:0b:60:83:6d:
         de:92:78:28:2e:e2:e7:10:c8:b9:f6:56:9a:38:9b:a2:04:11:
         59:84:df:c2:79:9a:20:3c:ee:09:32:3b:0d:9f:c1:91:76:06:
         5a:d9:3c:1c:58:24:82:70:04:b1:88:79:10:d7:bd:46:b1:71:
         53:0a:24:4e:85:f6:e4:3d:61:69:f4:c7:a6:a7:2e:d9:41:0e:
         32:36:dc:bd:a2:a6:47:2f:72:7f:ca:1b:74:4d:4a:84:46:08:
         73:f4:4a:0b:50:55:60:48:7f:60:ca:99:d7:90:80:13:23:71:
         d2:a1:23:6e:41:fe:c4:7c:2a:70:34:ac:68:c2:d7:34:dc:de:
         99:91:6a:c5:1b:a0:7f:90:4c:6c:0e:91:48:cf:0c:c7:4c:a5:
         78:e6:fe:1c:ea:cc:84:7c:e9:91:81:1c:62:eb:56:ad:63:da:
         b0:db:bc:d8:d4:46:4b:da:4a:10:ba:68:a0:b0:15:90:b4:a4:
         59:83:e9:8a:13:57:a1:2b:af:ac:a1:ea:74:9e:0f:44:97:11:
         1b:8b:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:48:34 2026 by rpki-client