This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqBB7MNbybVc7UctsvKeNB3z79jk54H5pNyvRNbALACX/0/3137372e3232312e3137362e302f32312d3234203d3e203532363733.roa
File:                     3137372e3232312e3137362e302f32312d3234203d3e203532363733.roa (raw, json)
Hash identifier:          +iGIrdayFGnXvQnRr6hZqfTs8A7djqpkhGbJbkECTFk=
Subject key identifier:   49:F0:9B:38:DC:BF:52:61:CC:9E:00:C7:C6:05:77:3D:4F:49:55:23
Certificate issuer:       /CN=6CBE607881F56FA53690AA903266B077076D18FF
Certificate serial:       0E54F674694CB458AA5C84E48AF86D7DE60A1E3E
Authority key identifier: 6C:BE:60:78:81:F5:6F:A5:36:90:AA:90:32:66:B0:77:07:6D:18:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CBE607881F56FA53690AA903266B077076D18FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqBB7MNbybVc7UctsvKeNB3z79jk54H5pNyvRNbALACX/0/3137372e3232312e3137362e302f32312d3234203d3e203532363733.roa
Signing time:             Sat 24 Jan 2026 16:13:10 +0000
ROA not before:           Sat 24 Jan 2026 16:08:10 +0000
ROA not after:            Sat 23 Jan 2027 16:13:10 +0000
asID:                     52673
IP address blocks:        177.221.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqBB7MNbybVc7UctsvKeNB3z79jk54H5pNyvRNbALACX/0/6CBE607881F56FA53690AA903266B077076D18FF.crl
                          rsync://rpki-repo.registro.br/repo/EqBB7MNbybVc7UctsvKeNB3z79jk54H5pNyvRNbALACX/0/6CBE607881F56FA53690AA903266B077076D18FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CBE607881F56FA53690AA903266B077076D18FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 10:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:54:f6:74:69:4c:b4:58:aa:5c:84:e4:8a:f8:6d:7d:e6:0a:1e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CBE607881F56FA53690AA903266B077076D18FF
        Validity
            Not Before: Jan 24 16:08:10 2026 GMT
            Not After : Jan 23 16:13:10 2027 GMT
        Subject: CN=49F09B38DCBF5261CC9E00C7C605773D4F495523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:c0:22:47:58:03:09:b1:bc:cc:2e:d5:b2:
                    31:d9:39:7b:1a:a6:7c:77:d4:de:a8:84:4a:2e:56:
                    6e:a6:2c:e8:e0:40:30:1c:20:9e:c1:c1:9c:b5:58:
                    f8:5a:4b:f4:d1:34:8a:a3:4e:1e:6e:e5:2e:17:54:
                    6d:07:13:3b:4d:6b:ee:40:cc:09:db:dd:ab:9e:46:
                    12:28:f6:a9:9d:21:e0:39:2e:6c:65:0f:76:0f:f8:
                    cc:8c:57:b2:c7:2c:be:21:c2:1c:60:17:20:da:e5:
                    33:c2:bf:8e:c1:1b:cf:46:12:e3:6c:24:e8:f3:15:
                    03:5d:e3:ec:1f:e2:e0:65:4b:5a:59:ca:6e:d5:19:
                    22:99:5f:cd:7b:f3:16:cc:e8:ec:ae:2b:76:bf:ee:
                    90:c4:b1:dc:33:79:45:7f:f6:99:7f:c4:df:2b:e9:
                    07:92:9b:53:d1:06:c6:f6:27:1f:b0:62:4c:5d:71:
                    7e:0d:03:09:b4:00:32:22:d2:ff:b3:60:ac:68:33:
                    86:82:8e:f8:c2:c3:56:c1:14:da:90:e7:d7:29:fd:
                    16:ce:d1:92:ed:53:6a:a7:86:5f:cc:48:58:15:4f:
                    40:43:7e:40:72:85:75:17:11:e1:e1:2e:02:42:98:
                    87:bd:10:a8:af:19:21:cf:83:b3:c3:ea:2b:31:e6:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F0:9B:38:DC:BF:52:61:CC:9E:00:C7:C6:05:77:3D:4F:49:55:23
            X509v3 Authority Key Identifier:
                keyid:6C:BE:60:78:81:F5:6F:A5:36:90:AA:90:32:66:B0:77:07:6D:18:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqBB7MNbybVc7UctsvKeNB3z79jk54H5pNyvRNbALACX/0/6CBE607881F56FA53690AA903266B077076D18FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CBE607881F56FA53690AA903266B077076D18FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqBB7MNbybVc7UctsvKeNB3z79jk54H5pNyvRNbALACX/0/3137372e3232312e3137362e302f32312d3234203d3e203532363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:0d:03:40:94:43:03:a2:7b:59:ca:99:88:e2:78:6f:d4:
         a9:aa:ce:17:0c:c3:46:71:4e:a2:cc:b5:0a:31:3c:98:ea:5a:
         0e:a6:12:bb:fc:d2:64:c3:98:77:19:59:3e:cb:14:26:6e:d4:
         c4:52:aa:29:98:78:67:58:58:3c:cc:ab:90:84:d3:57:73:18:
         39:47:04:7b:08:ef:17:24:9e:c9:ab:7b:48:0c:97:30:f6:0c:
         89:3c:5c:92:79:1b:61:f3:da:19:7c:51:fa:d6:14:5d:51:d7:
         71:43:4c:54:e7:fb:73:77:15:b4:c4:14:fe:6c:4b:82:0a:b1:
         2d:68:76:bb:a8:3c:42:81:6c:9c:26:08:79:7f:69:e4:27:2e:
         29:73:ce:20:a9:37:10:75:be:b4:5f:9c:91:d7:e5:4d:46:a9:
         26:0c:6f:21:6a:1c:e3:17:27:2f:e3:61:a8:1a:b1:ca:54:21:
         69:91:bf:85:51:49:f5:c9:db:a8:00:67:16:5e:54:63:ef:88:
         e1:39:90:1d:0a:9b:da:6d:9b:4a:dc:01:29:1d:ca:4f:a7:0f:
         84:b1:0e:22:c0:95:82:ff:97:92:86:32:a0:33:13:45:0f:2e:
         5a:a0:9a:2c:80:99:d1:a1:db:35:2f:fc:34:23:f3:49:2a:aa:
         95:44:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:45:37 2026 by rpki-client