This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/3137372e32332e37322e302f32312d3231203d3e20323633303339.roa
File:                     3137372e32332e37322e302f32312d3231203d3e20323633303339.roa (raw, json)
Hash identifier:          kwOwT5Gb9++NSOew36i/G2sIVnVPBifKcgS/iWUNh0s=
Subject key identifier:   9B:89:DC:E9:AE:88:8F:0A:3D:16:78:D3:D0:59:1F:0A:BF:05:F1:34
Certificate issuer:       /CN=58BE498747EA22E6A42A4F8E3C0475421244264D
Certificate serial:       605190B6621D103C5E97AB1F2185D2B4DEDDBE58
Authority key identifier: 58:BE:49:87:47:EA:22:E6:A4:2A:4F:8E:3C:04:75:42:12:44:26:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BE498747EA22E6A42A4F8E3C0475421244264D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/3137372e32332e37322e302f32312d3231203d3e20323633303339.roa
Signing time:             Thu 15 Jan 2026 13:02:11 +0000
ROA not before:           Thu 15 Jan 2026 12:57:11 +0000
ROA not after:            Thu 14 Jan 2027 13:02:11 +0000
asID:                     263039
IP address blocks:        177.23.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/58BE498747EA22E6A42A4F8E3C0475421244264D.crl
                          rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/58BE498747EA22E6A42A4F8E3C0475421244264D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BE498747EA22E6A42A4F8E3C0475421244264D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:51:90:b6:62:1d:10:3c:5e:97:ab:1f:21:85:d2:b4:de:dd:be:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58BE498747EA22E6A42A4F8E3C0475421244264D
        Validity
            Not Before: Jan 15 12:57:11 2026 GMT
            Not After : Jan 14 13:02:11 2027 GMT
        Subject: CN=9B89DCE9AE888F0A3D1678D3D0591F0ABF05F134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:26:33:f9:b0:b7:9f:40:2a:93:06:bf:ad:
                    51:23:7b:28:c9:7d:fd:44:00:3b:1f:9a:2f:5f:7e:
                    1d:a1:0d:11:33:b5:c1:3c:71:47:75:9f:57:5f:fa:
                    27:44:60:a4:3a:52:1b:34:ab:a9:5d:60:c7:60:cb:
                    61:06:bc:44:31:b1:90:c9:d8:ef:f2:d6:2a:42:23:
                    e9:1b:57:7e:19:7e:b0:6f:8c:c2:06:bf:d7:7a:d9:
                    01:d0:a1:45:3c:68:43:51:d3:f9:a8:f4:50:8e:06:
                    ec:0e:eb:20:b3:4a:61:ae:19:0c:2e:56:d4:b7:59:
                    e5:4d:ae:0b:b3:4b:6e:d6:2b:bc:74:da:68:e6:0c:
                    58:94:c8:5f:c7:28:6a:99:a7:c7:c3:22:de:bc:e2:
                    83:cf:e7:29:ac:be:58:f6:34:88:26:55:11:da:13:
                    bc:4a:1b:bc:c5:a5:65:42:65:0b:4e:e6:14:2f:d7:
                    6d:4a:ce:69:89:26:09:5a:56:4d:09:34:74:c4:c4:
                    30:e7:b7:0a:00:83:ba:02:ff:c1:7a:ce:d5:f3:21:
                    19:1a:94:f1:dd:c7:b5:53:92:9a:5e:98:32:5a:ed:
                    1e:2b:e2:93:97:30:b9:17:ee:87:a1:12:29:72:49:
                    72:3f:b2:0b:91:36:5d:8d:b9:b6:67:bb:7c:17:21:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:89:DC:E9:AE:88:8F:0A:3D:16:78:D3:D0:59:1F:0A:BF:05:F1:34
            X509v3 Authority Key Identifier:
                keyid:58:BE:49:87:47:EA:22:E6:A4:2A:4F:8E:3C:04:75:42:12:44:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/58BE498747EA22E6A42A4F8E3C0475421244264D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BE498747EA22E6A42A4F8E3C0475421244264D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SyWgTttsDpEDDEdEKwX9zTpQfmR3sXjmQLEiSo5GoWN/0/3137372e32332e37322e302f32312d3231203d3e20323633303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:48:87:cc:20:05:a6:b3:8e:e7:d1:4e:17:f2:e4:81:9f:26:
         38:71:db:8a:84:35:87:46:8f:32:b3:9f:7d:0a:b9:d0:f4:19:
         08:b5:f9:17:14:41:9a:ab:ea:b5:e8:d2:c1:7d:56:6f:1a:71:
         e8:ae:2d:4a:2c:3a:4e:25:c5:e3:21:9d:6a:8d:db:43:7f:db:
         39:4c:b3:ef:37:26:a0:dc:d7:68:51:c5:50:12:8c:53:1a:7f:
         db:64:ba:59:10:1f:69:18:25:88:2d:d3:57:df:07:f6:82:72:
         9b:c2:6c:e1:a7:5d:8b:2b:4e:de:e2:64:8d:4e:2d:7b:1c:6e:
         1c:6b:16:01:1f:e7:d5:ff:5d:3c:a7:74:8a:5b:86:65:87:df:
         a0:02:32:e0:a0:2e:b9:67:58:53:e6:02:cc:67:89:55:1c:95:
         ee:61:31:20:bb:ce:c2:92:c6:79:b0:72:1b:97:8a:ca:f1:a5:
         18:88:49:db:dd:16:b7:20:36:8c:40:19:56:40:2f:20:16:80:
         18:90:ba:df:83:42:c4:56:62:d6:50:57:dd:56:ca:e0:69:88:
         48:de:6c:a7:56:20:61:78:b4:85:92:f8:0b:b5:65:56:00:2f:
         b2:bd:85:69:92:72:ca:13:4d:84:d9:b5:25:47:5a:58:b8:37:
         98:3e:5b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:31 2026 by rpki-client