This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa
File:                     3230302e35332e31362e302f32302d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          ftHdk0LPz7pNzU1iw0S688cz8UKibH0qXKAXzZ7FXE8=
Subject key identifier:   77:7A:01:96:07:C5:2D:39:23:1F:34:4F:57:15:DD:C0:90:78:1E:65
Certificate issuer:       /CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
Certificate serial:       25992E9DEEFA4A6AC7ABD7890908A04F0A9859D0
Authority key identifier: 87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa
Signing time:             Fri 16 Jan 2026 17:26:01 +0000
ROA not before:           Fri 16 Jan 2026 17:21:01 +0000
ROA not after:            Fri 15 Jan 2027 17:26:01 +0000
asID:                     262391
IP address blocks:        200.53.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:99:2e:9d:ee:fa:4a:6a:c7:ab:d7:89:09:08:a0:4f:0a:98:59:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
        Validity
            Not Before: Jan 16 17:21:01 2026 GMT
            Not After : Jan 15 17:26:01 2027 GMT
        Subject: CN=777A019607C52D39231F344F5715DDC090781E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:14:94:f5:3c:e2:91:5a:71:df:48:78:d8:
                    0f:36:4e:42:24:fe:75:9d:f5:2d:64:c0:8b:bf:88:
                    d6:dc:05:3e:9c:a8:0b:8c:2c:3a:ac:ed:a0:eb:fd:
                    16:85:32:a0:18:b5:44:64:04:bb:66:e8:f2:0f:6f:
                    d6:49:51:c8:df:2e:d1:67:2e:8b:04:2b:31:e2:7a:
                    e2:37:48:24:58:e2:63:d7:9e:f9:77:11:ce:db:d0:
                    a7:97:85:00:f5:9b:c2:ef:3e:76:ab:76:ae:25:63:
                    30:65:23:ff:08:99:aa:7c:7a:26:ba:b3:26:32:e3:
                    cd:f4:e8:01:c4:c2:2e:68:df:6c:be:9f:8d:7d:ce:
                    bc:30:cc:57:ee:4e:12:ab:32:00:e0:70:5c:49:00:
                    4b:26:21:dc:c5:a6:12:55:15:e3:29:82:25:fb:0e:
                    10:f0:66:7d:27:84:81:5b:a8:08:c9:6e:55:33:88:
                    5a:85:10:2c:76:85:71:06:6a:0a:5b:84:3a:80:98:
                    89:df:c3:7b:2c:43:1d:b5:04:f4:97:cd:83:e5:07:
                    2c:7b:05:a9:00:d3:49:91:0d:b4:40:a5:21:a6:88:
                    f3:f2:9a:fe:0f:7f:8e:70:0e:fc:c2:cf:e7:d8:51:
                    ce:57:d5:74:fe:2e:f2:0a:b0:3b:d0:87:11:0c:74:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7A:01:96:07:C5:2D:39:23:1F:34:4F:57:15:DD:C0:90:78:1E:65
            X509v3 Authority Key Identifier:
                keyid:87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:72:8a:12:ed:24:db:29:15:5c:b3:94:58:e8:d5:e6:bd:06:
         31:21:63:95:dd:76:b3:43:f1:ef:a4:dd:14:d4:b2:ad:23:3a:
         95:59:ca:ab:e7:52:da:6c:24:1d:19:b7:7a:fc:e9:09:b3:29:
         36:d1:71:4f:39:2e:e6:43:08:b8:c0:75:14:3c:88:99:af:62:
         d8:43:dd:b9:45:71:cf:ea:80:9d:38:93:6d:fe:bb:f5:45:13:
         95:da:0d:bf:a8:e0:02:fe:81:5c:37:9d:ef:ea:61:82:a9:78:
         26:29:35:a6:cc:10:ad:c9:b9:0e:ad:eb:f3:86:b8:14:ea:05:
         c5:93:da:46:43:f0:dc:02:16:f7:cd:9b:f3:bd:ab:c3:fd:92:
         94:49:fa:40:ff:40:a2:d4:ee:5c:a6:a2:6e:68:07:a7:55:7d:
         6c:dd:e3:56:eb:03:1b:ae:9f:48:84:0c:b3:72:7b:6d:cd:ca:
         96:7e:e1:de:d2:71:2f:43:48:c7:4a:8f:01:7d:03:fc:13:e6:
         89:22:bd:8f:f0:28:a5:64:c2:2b:48:8d:1f:b2:71:08:fe:5d:
         fc:d9:c5:cc:1f:49:41:72:6d:11:cb:11:1f:6d:1e:a3:7c:69:
         02:11:c0:13:d5:7c:00:93:7d:42:42:2b:15:0f:b4:9a:cf:43:
         72:3d:9f:02
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUJZkune76SmrHq9eJCQigTwqYWdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc4RDhDOTBBMkNDRkU2MzEzQzVEMTVDODcyQjg5NjMy
MDIxRTQ0QzAeFw0yNjAxMTYxNzIxMDFaFw0yNzAxMTUxNzI2MDFaMDMxMTAvBgNV
BAMTKDc3N0EwMTk2MDdDNTJEMzkyMzFGMzQ0RjU3MTVEREMwOTA3ODFFNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2hSU9TzikVpx30h42A82TkIk
/nWd9S1kwIu/iNbcBT6cqAuMLDqs7aDr/RaFMqAYtURkBLtm6PIPb9ZJUcjfLtFn
LosEKzHieuI3SCRY4mPXnvl3Ec7b0KeXhQD1m8LvPnardq4lYzBlI/8Imap8eia6
syYy48306AHEwi5o32y+n419zrwwzFfuThKrMgDgcFxJAEsmIdzFphJVFeMpgiX7
DhDwZn0nhIFbqAjJblUziFqFECx2hXEGagpbhDqAmInfw3ssQx21BPSXzYPlByx7
BakA00mRDbRApSGmiPPymv4Pf45wDvzCz+fYUc5X1XT+LvIKsDvQhxEMdEYXAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUd3oBlgfFLTkjHzRPVxXdwJB4HmUwHwYDVR0j
BBgwFoAUh42MkKLM/mMTxdFchyuJYyAh5EwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5
LzMvODc4RDhDOTBBMkNDRkU2MzEzQzVEMTVDODcyQjg5NjMyMDIxRTQ0Qy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NzhEOEM5MEEyQ0NGRTYzMTND
NUQxNUM4NzJCODk2MzIwMjFFNDRDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
eWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5LzMvMzIz
MDMwMmUzNTMzMmUzMTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMyMzMz
OTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEyDUQMA0GCSqGSIb3DQEBCwUAA4IBAQARcooS7STbKRVc
s5RY6NXmvQYxIWOV3XazQ/HvpN0U1LKtIzqVWcqr51LabCQdGbd6/OkJsyk20XFP
OS7mQwi4wHUUPIiZr2LYQ925RXHP6oCdOJNt/rv1RROV2g2/qOAC/oFcN53v6mGC
qXgmKTWmzBCtybkOrevzhrgU6gXFk9pGQ/DcAhb3zZvzvavD/ZKUSfpA/0Ci1O5c
pqJuaAenVX1s3eNW6wMbrp9IhAyzcnttzcqWfuHe0nEvQ0jHSo8BfQP8E+aJIr2P
8CilZMIrSI0fsnEI/l382cXMH0lBcm0RyxEfbR6jfGkCEcAT1XwAk31CQisVD7Sa
z0NyPZ8C
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:01:03 2026 by rpki-client