This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3133312e302e37362e302f32332d3234203d3e203533303632.roa
File:                     3133312e302e37362e302f32332d3234203d3e203533303632.roa (raw, json)
Hash identifier:          JIXFvOOVdJJZu3BEq0M7gCP2VtRm7ICrLWkxZVMhGXo=
Subject key identifier:   86:E3:90:9F:8A:3B:D9:19:F2:89:A3:A7:DF:9F:1C:0B:54:B3:18:7F
Certificate issuer:       /CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
Certificate serial:       50663C9E3EFDF67D2D984076E39F8D735464270E
Authority key identifier: 87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3133312e302e37362e302f32332d3234203d3e203533303632.roa
Signing time:             Fri 16 Jan 2026 17:26:01 +0000
ROA not before:           Fri 16 Jan 2026 17:21:01 +0000
ROA not after:            Fri 15 Jan 2027 17:26:01 +0000
asID:                     53062
IP address blocks:        131.0.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:66:3c:9e:3e:fd:f6:7d:2d:98:40:76:e3:9f:8d:73:54:64:27:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
        Validity
            Not Before: Jan 16 17:21:01 2026 GMT
            Not After : Jan 15 17:26:01 2027 GMT
        Subject: CN=86E3909F8A3BD919F289A3A7DF9F1C0B54B3187F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:81:99:7e:e3:b2:51:bc:de:a2:36:71:b3:
                    57:bd:ac:0b:c6:02:70:1b:b9:a4:66:20:e0:b0:0c:
                    f2:2a:e5:a3:87:c4:ad:f6:01:5f:f8:7d:af:69:2d:
                    c5:41:fd:ad:a2:3e:7c:bf:7d:d6:db:86:00:08:7e:
                    8d:6e:95:b0:64:41:b6:2f:a9:fc:91:a7:12:09:1b:
                    8a:a5:67:4f:66:75:de:a1:fc:42:56:f8:bc:04:55:
                    ec:f1:03:ec:82:22:ba:6c:df:49:b0:2b:b7:26:99:
                    2c:ba:ed:fd:76:88:3a:c2:0e:87:db:cb:bf:02:15:
                    48:0a:cb:1d:8b:36:67:33:0a:13:f9:66:3a:c1:d9:
                    98:d7:c1:e5:bb:9c:59:8a:48:92:bc:2d:77:23:ef:
                    1f:d8:69:a9:e5:05:95:1e:13:4e:69:87:91:b4:9e:
                    dc:35:b9:64:85:5f:06:e7:01:2d:9a:a0:c8:cb:df:
                    16:24:ed:e6:39:83:48:bf:41:b4:09:39:02:04:59:
                    60:a4:15:0b:e8:22:f6:31:64:bb:0b:45:e8:9d:33:
                    24:05:8a:d7:73:d0:2a:26:10:a7:da:8b:00:17:c6:
                    a3:01:90:6e:5e:07:05:89:db:e0:f0:6b:cd:9d:72:
                    91:61:1f:21:83:df:db:b2:01:fc:6e:3f:6c:b1:ed:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E3:90:9F:8A:3B:D9:19:F2:89:A3:A7:DF:9F:1C:0B:54:B3:18:7F
            X509v3 Authority Key Identifier:
                keyid:87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3133312e302e37362e302f32332d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:39:b8:b3:f2:f9:52:5e:0f:71:b7:60:22:88:a0:ee:12:b7:
         7f:10:ce:bb:15:3c:de:b1:78:43:d0:96:f2:95:9f:7b:f6:22:
         dc:84:82:1e:d2:27:da:4e:f9:d7:cd:97:c5:3e:fb:ec:c5:d3:
         73:ff:20:8a:a6:03:9d:82:6e:67:9f:a4:2b:f4:41:35:1f:21:
         05:b6:14:ad:14:d3:92:b5:2f:d5:89:57:bf:ad:4a:bf:44:26:
         c8:ce:90:6d:a9:91:bc:cb:33:36:bf:fd:4d:3f:a3:32:88:e8:
         6f:5d:6d:8b:59:6e:a2:1c:da:bc:e7:44:63:dd:74:2b:1f:9a:
         0c:1f:e5:40:c5:61:cc:26:c0:f3:96:0c:26:9f:01:f9:b9:94:
         72:f2:f7:4e:f6:ae:7c:69:af:b2:18:a7:9c:53:f4:51:00:35:
         7a:de:6d:28:fc:2e:99:ed:22:26:85:41:5d:3b:8f:71:20:04:
         b3:01:4b:ba:76:33:1c:93:84:4d:57:aa:99:ca:a6:b0:3f:be:
         48:d6:47:46:1c:96:90:19:a0:c2:bd:11:69:f5:2f:67:57:61:
         80:4b:08:b1:f6:6e:69:38:4d:c2:a4:df:db:b1:46:5f:fb:f5:
         60:03:bf:08:ec:0d:75:ef:6a:20:1a:82:01:e6:17:d2:b7:c0:
         0e:d0:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:57:38 2026 by rpki-client