This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/3136382e3139362e36302e302f32322d3332203d3e20323635343634.roa
File:                     3136382e3139362e36302e302f32322d3332203d3e20323635343634.roa (raw, json)
Hash identifier:          dHpYZl++cdGIaIgZ5gMIy3c4BC4TS7pKOLsNs8t948U=
Subject key identifier:   F6:F8:02:08:FF:71:19:BA:CC:C3:B7:0D:9F:82:46:FF:86:47:6B:AA
Certificate issuer:       /CN=EA7EC4834D65091D1B75E69F365CB5A146892603
Certificate serial:       6E0F4AC75CBFBB27A5C3AAD566A1AB7F06964DB3
Authority key identifier: EA:7E:C4:83:4D:65:09:1D:1B:75:E6:9F:36:5C:B5:A1:46:89:26:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7EC4834D65091D1B75E69F365CB5A146892603.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/3136382e3139362e36302e302f32322d3332203d3e20323635343634.roa
Signing time:             Sun 28 Dec 2025 15:59:11 +0000
ROA not before:           Sun 28 Dec 2025 15:54:11 +0000
ROA not after:            Sun 27 Dec 2026 15:59:11 +0000
asID:                     265464
IP address blocks:        168.196.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/EA7EC4834D65091D1B75E69F365CB5A146892603.crl
                          rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/EA7EC4834D65091D1B75E69F365CB5A146892603.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7EC4834D65091D1B75E69F365CB5A146892603.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0f:4a:c7:5c:bf:bb:27:a5:c3:aa:d5:66:a1:ab:7f:06:96:4d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7EC4834D65091D1B75E69F365CB5A146892603
        Validity
            Not Before: Dec 28 15:54:11 2025 GMT
            Not After : Dec 27 15:59:11 2026 GMT
        Subject: CN=F6F80208FF7119BACCC3B70D9F8246FF86476BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:24:45:b7:ae:cc:87:6c:fd:bb:5f:ac:a5:
                    f6:88:69:4c:57:ea:98:7d:2a:83:ed:cd:ae:3f:dc:
                    6f:9d:7f:ee:e8:22:f0:3f:54:53:b8:c1:86:81:f9:
                    0b:54:c8:c3:14:0e:de:3b:65:77:25:20:81:d6:53:
                    f5:7e:f5:18:90:70:b5:ae:e5:fd:82:4a:cf:92:09:
                    02:6a:db:8a:83:60:76:48:2b:36:21:64:b8:2b:a5:
                    98:a2:7d:1f:c4:b3:4a:8e:5a:4d:d0:67:f7:5d:30:
                    69:10:9d:aa:e4:46:ac:76:56:fa:ae:63:7f:97:8a:
                    1b:b3:d5:af:f1:ad:7b:6d:56:7e:de:a0:ba:94:e2:
                    01:4f:a6:cd:b7:44:51:a8:9b:af:25:32:69:4e:8d:
                    62:39:2f:96:b9:64:ff:bd:d8:bc:7e:d6:43:a1:2f:
                    d7:b0:c0:57:ec:68:24:e3:49:3d:4c:72:20:f1:cc:
                    68:da:75:31:c6:68:b2:51:10:d0:cc:53:02:b4:57:
                    b5:81:2b:bf:b8:bf:68:7e:86:34:34:3e:15:c5:28:
                    fe:29:70:30:ff:d0:46:7d:1a:b8:46:e7:6b:6d:d7:
                    83:26:cb:dd:5d:ed:d3:eb:46:19:35:5a:9e:10:44:
                    fd:ce:43:7d:ec:db:93:b4:ce:f1:48:e3:a3:59:f2:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F8:02:08:FF:71:19:BA:CC:C3:B7:0D:9F:82:46:FF:86:47:6B:AA
            X509v3 Authority Key Identifier:
                keyid:EA:7E:C4:83:4D:65:09:1D:1B:75:E6:9F:36:5C:B5:A1:46:89:26:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/EA7EC4834D65091D1B75E69F365CB5A146892603.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7EC4834D65091D1B75E69F365CB5A146892603.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgLG7fHYj8Kcwm6AtQaQ3DHV2u5oarzGxKVJ89Ww8NCL/0/3136382e3139362e36302e302f32322d3332203d3e20323635343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:82:2d:d7:b0:18:94:6f:c2:fd:84:9d:ea:52:13:dd:de:f3:
         ca:3e:41:c9:96:50:af:64:b5:8f:19:24:02:9f:78:48:8f:f8:
         45:3f:31:4a:e3:57:0b:f7:09:32:1b:25:bb:be:62:8a:ac:ca:
         0f:fa:50:3a:76:c5:7d:1a:ae:c7:ec:49:7a:06:94:8b:7f:b0:
         d2:66:d9:84:14:bd:0f:bd:a0:49:c8:53:59:41:91:b0:e0:7c:
         58:20:60:8d:23:df:62:be:09:58:29:45:e1:4f:a1:3c:45:5a:
         06:6c:53:86:e6:9d:a8:5f:89:bd:0b:c5:23:6f:df:bf:90:f7:
         13:4f:5e:90:c8:4d:13:09:bd:ac:9a:72:3a:00:2d:61:32:1c:
         ec:db:76:66:d4:58:58:93:60:d8:bc:3b:4a:f9:37:67:65:1e:
         17:1a:f4:81:aa:5b:ce:93:8f:b2:99:cd:34:41:9d:8e:74:9a:
         4b:2a:75:0c:0d:7c:d9:b8:79:95:72:74:94:d8:48:0d:45:28:
         b6:8d:38:cc:ee:f0:93:c4:19:a8:ee:e8:f9:c1:d3:2e:37:9e:
         52:9f:aa:1c:db:dd:75:25:d3:c9:7c:3f:48:5a:bb:20:40:20:
         5d:ad:56:4b:86:4e:05:74:0a:17:52:b9:a3:f2:82:45:5d:b4:
         14:5a:06:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbg9Kx1y/uyelw6rVZqGrfwaWTbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE3RUM0ODM0RDY1MDkxRDFCNzVFNjlGMzY1Q0I1QTE0
Njg5MjYwMzAeFw0yNTEyMjgxNTU0MTFaFw0yNjEyMjcxNTU5MTFaMDMxMTAvBgNV
BAMTKEY2RjgwMjA4RkY3MTE5QkFDQ0MzQjcwRDlGODI0NkZGODY0NzZCQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0iRFt67Mh2z9u1+spfaIaUxX
6ph9KoPtza4/3G+df+7oIvA/VFO4wYaB+QtUyMMUDt47ZXclIIHWU/V+9RiQcLWu
5f2CSs+SCQJq24qDYHZIKzYhZLgrpZiifR/Es0qOWk3QZ/ddMGkQnarkRqx2Vvqu
Y3+Xihuz1a/xrXttVn7eoLqU4gFPps23RFGom68lMmlOjWI5L5a5ZP+92Lx+1kOh
L9ewwFfsaCTjST1MciDxzGjadTHGaLJRENDMUwK0V7WBK7+4v2h+hjQ0PhXFKP4p
cDD/0EZ9GrhG52tt14Mmy91d7dPrRhk1Wp4QRP3OQ33s25O0zvFI46NZ8iO9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9vgCCP9xGbrMw7cNn4JG/4ZHa6owHwYDVR0j
BBgwFoAU6n7Eg01lCR0bdeafNly1oUaJJgMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dMRzdmSFlqOEtjd202QXRRYVEzREhWMnU1b2Fyekd4S1ZKODlXdzhO
Q0wvMC9FQTdFQzQ4MzRENjUwOTFEMUI3NUU2OUYzNjVDQjVBMTQ2ODkyNjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBN0VDNDgzNEQ2NTA5MUQx
Qjc1RTY5RjM2NUNCNUExNDY4OTI2MDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnTEc3ZkhZajhLY3dtNkF0UWFRM0RIVjJ1NW9hcnpHeEtWSjg5V3c4TkNMLzAv
MzEzNjM4MmUzMTM5MzYyZTM2MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzUzNDM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxDwwDQYJKoZIhvcNAQELBQADggEBAJWCLdew
GJRvwv2EnepSE93e88o+QcmWUK9ktY8ZJAKfeEiP+EU/MUrjVwv3CTIbJbu+Yoqs
yg/6UDp2xX0arsfsSXoGlIt/sNJm2YQUvQ+9oEnIU1lBkbDgfFggYI0j32K+CVgp
ReFPoTxFWgZsU4bmnahfib0LxSNv37+Q9xNPXpDITRMJvayacjoALWEyHOzbdmbU
WFiTYNi8O0r5N2dlHhca9IGqW86Tj7KZzTRBnY50mksqdQwNfNm4eZVydJTYSA1F
KLaNOMzu8JPEGaju6PnB0y43nlKfqhzb3XUl08l8P0hauyBAIF2tVkuGTgV0ChdS
uaPygkVdtBRaBsM=
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:50:50 2026 by rpki-client