This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3133312e302e37382e302f32332d3234203d3e203134343537.roa
File:                     3133312e302e37382e302f32332d3234203d3e203134343537.roa (raw, json)
Hash identifier:          ILJgLUF6Wfy098wi3ybz7Lzn1itPhWcYMQDlPXodXQ8=
Subject key identifier:   65:C1:C3:27:8B:B3:99:2E:87:7A:C0:C6:65:E2:4F:81:81:5E:9F:D4
Certificate issuer:       /CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
Certificate serial:       2F5B6BE0F164667A336C01E8F03E9B23970AF14C
Authority key identifier: 87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3133312e302e37382e302f32332d3234203d3e203134343537.roa
Signing time:             Fri 16 Jan 2026 17:26:03 +0000
ROA not before:           Fri 16 Jan 2026 17:21:03 +0000
ROA not after:            Fri 15 Jan 2027 17:26:03 +0000
asID:                     14457
IP address blocks:        131.0.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5b:6b:e0:f1:64:66:7a:33:6c:01:e8:f0:3e:9b:23:97:0a:f1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
        Validity
            Not Before: Jan 16 17:21:03 2026 GMT
            Not After : Jan 15 17:26:03 2027 GMT
        Subject: CN=65C1C3278BB3992E877AC0C665E24F81815E9FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:94:0c:ca:3c:1b:47:3c:a1:e0:ec:19:76:63:
                    9d:cb:12:d5:8c:14:ac:69:2d:a1:82:7f:48:bc:67:
                    18:ab:c5:6e:19:78:99:7e:a1:dc:9e:51:13:ff:7c:
                    01:f5:63:35:f9:62:3c:b0:04:c9:0a:4c:dc:79:90:
                    2a:64:20:d8:ad:8c:4a:23:d9:f2:73:b6:48:57:da:
                    13:10:54:85:a6:87:14:51:3d:3d:d5:b4:43:48:e9:
                    d6:5f:10:a8:ce:b3:1c:6c:56:c5:4c:6d:20:64:6f:
                    16:76:86:75:17:d0:a0:7f:b3:6a:22:81:8e:b7:6e:
                    5a:1d:66:36:cf:fc:99:a2:a6:d2:66:c4:2b:b7:91:
                    5f:d6:ee:47:b5:2b:f4:c3:b9:27:70:07:2d:90:51:
                    4c:0b:18:53:fe:c0:40:48:77:e2:2a:5c:68:0a:e7:
                    6d:3e:8c:2d:da:29:2f:ff:84:7e:62:37:f8:3d:18:
                    64:57:41:45:79:93:fa:8e:f7:b3:e2:ea:81:90:c0:
                    c7:48:95:6a:cd:a3:59:1e:f5:f8:57:a1:44:e7:e7:
                    13:18:d3:20:40:ac:8b:86:f1:46:f9:1f:4c:e7:e3:
                    db:e3:14:be:17:5f:2d:c8:4f:e6:d3:55:dc:3e:57:
                    b9:16:9a:17:2f:1a:98:3f:0c:da:4d:46:00:c8:3e:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C1:C3:27:8B:B3:99:2E:87:7A:C0:C6:65:E2:4F:81:81:5E:9F:D4
            X509v3 Authority Key Identifier:
                keyid:87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3133312e302e37382e302f32332d3234203d3e203134343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:f6:9e:e6:4f:f7:a1:84:cc:c2:6e:c8:29:f6:ad:f7:8e:40:
         a7:67:5b:6b:12:e1:97:5f:25:5f:11:1f:43:60:1f:09:96:2f:
         79:bf:2e:b0:cb:73:5f:14:53:c3:65:48:6f:ff:e5:06:38:8d:
         eb:61:6b:0e:af:4a:44:55:07:5a:e7:c0:a3:42:12:dc:29:26:
         c4:fd:f8:6e:63:52:ce:03:a4:d7:32:4c:81:44:48:85:c8:87:
         24:fc:d0:1a:00:10:29:41:2b:ee:25:16:6d:ab:5e:8f:65:38:
         6a:12:11:36:f4:c7:ec:18:7d:ff:31:71:d2:26:c5:2a:f7:92:
         95:10:e3:df:bb:ce:a9:99:04:30:09:71:64:c1:9a:90:7b:bd:
         fa:ea:33:5c:69:98:10:af:6e:2f:60:c3:33:a1:22:d6:50:e5:
         bb:95:8d:30:96:ba:73:22:b6:36:7f:2e:54:0f:39:e0:d9:ea:
         2c:95:07:b4:7b:85:c6:47:31:53:6b:da:81:be:75:66:85:5d:
         03:7c:31:5a:63:6f:df:c6:df:ee:e1:ed:29:1c:3e:ed:19:14:
         18:2c:db:d8:c5:3f:8a:58:47:45:6a:c6:78:83:2f:d3:1e:ad:
         f6:b1:29:13:73:50:27:6b:1c:0d:c9:68:13:72:93:ee:3d:92:
         5f:ee:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:01:11 2026 by rpki-client