This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.gns.net.br/repo/Gns/0/3137372e37332e36342e302f32322d3234203d3e203331383938.roa
File:                     3137372e37332e36342e302f32322d3234203d3e203331383938.roa (raw, json)
Hash identifier:          8WgcHHNvLLvarSJflZXRB68l0q1wRCiJqaplohqKiYU=
Subject key identifier:   8D:B0:43:97:28:04:27:D4:9E:4C:F6:1E:DD:03:03:C3:58:F0:3C:D1
Certificate issuer:       /CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8
Certificate serial:       591A6225ABCFCD159B710D862D57DEC263914237
Authority key identifier: 80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer
Subject info access:      rsync://rpki.gns.net.br/repo/Gns/0/3137372e37332e36342e302f32322d3234203d3e203331383938.roa
Signing time:             Wed 21 Jan 2026 15:56:43 +0000
ROA not before:           Wed 21 Jan 2026 15:51:43 +0000
ROA not after:            Wed 20 Jan 2027 15:56:43 +0000
asID:                     31898
IP address blocks:        177.73.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.crl
                          rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1a:62:25:ab:cf:cd:15:9b:71:0d:86:2d:57:de:c2:63:91:42:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8
        Validity
            Not Before: Jan 21 15:51:43 2026 GMT
            Not After : Jan 20 15:56:43 2027 GMT
        Subject: CN=8DB04397280427D49E4CF61EDD0303C358F03CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:59:5d:de:4f:88:c9:dd:02:71:ac:95:21:
                    f1:0a:6d:8a:21:28:45:0d:b3:17:d8:47:16:e6:db:
                    b6:61:97:8b:e0:b7:8c:d4:ad:29:61:e5:fd:6f:d5:
                    a0:b4:eb:a5:5a:fc:d6:d5:1a:80:54:29:5f:31:dc:
                    01:01:43:fd:27:89:c9:24:40:51:c2:7b:40:05:03:
                    04:29:d2:c0:6d:a6:7e:0e:4e:65:e7:e1:02:32:ac:
                    b4:bf:c8:3c:ef:b3:86:b9:8a:40:18:96:f6:3b:64:
                    43:fd:0c:99:5e:ad:c1:8b:d4:f2:4f:4e:49:95:31:
                    ba:27:79:0f:68:93:fb:f6:dd:af:8e:e7:87:b7:0c:
                    71:9a:a6:d8:37:57:5f:d5:98:9a:f2:58:41:e8:83:
                    49:3e:4b:4e:dc:2f:77:2d:de:af:bd:8f:9e:54:c0:
                    c5:ae:0d:a6:f7:b3:a5:c6:ac:eb:02:55:9c:e4:cc:
                    e5:cb:aa:c4:17:a8:13:10:b8:75:44:2d:9f:97:a7:
                    80:2f:66:09:1f:4e:43:4f:26:bb:f8:b5:da:52:9f:
                    7b:df:ce:7d:2c:be:d5:83:1f:77:bd:9a:19:b8:d8:
                    d2:0f:07:72:43:22:b7:dd:84:c4:2f:1c:86:e8:4d:
                    d9:8b:0f:df:b7:b5:ce:fc:e7:9e:10:41:12:9b:3f:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B0:43:97:28:04:27:D4:9E:4C:F6:1E:DD:03:03:C3:58:F0:3C:D1
            X509v3 Authority Key Identifier:
                keyid:80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gns.net.br/repo/Gns/0/3137372e37332e36342e302f32322d3234203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:98:3c:cf:a2:b2:be:fb:2c:b9:3b:8c:21:65:43:58:ff:4c:
         ad:a2:01:92:34:6b:0d:a8:2c:62:a7:e1:f0:f8:9b:85:70:30:
         95:de:eb:8b:6c:45:9e:6d:b2:ee:e9:f4:b7:03:fc:e0:27:d9:
         64:99:70:67:03:9b:a5:00:81:5d:10:87:32:9b:aa:e7:3d:a2:
         fd:96:68:34:3f:3e:ed:f8:65:dc:b6:ce:3b:87:32:c4:3f:e8:
         be:7b:b7:11:9c:b2:29:9c:03:82:20:f9:c0:2e:7f:1b:c1:c4:
         d7:8f:c2:8c:00:27:ce:83:0d:7c:01:1b:e0:60:fb:1b:a8:97:
         29:b4:3c:2b:4d:3d:a1:47:88:23:5c:29:6a:d8:50:d6:0a:32:
         ff:f0:fb:45:03:01:85:e8:db:c2:01:6c:d9:fc:7e:f8:20:59:
         94:3c:7c:1b:09:b3:ed:a8:8e:bc:a6:a9:9f:8d:db:bd:02:d1:
         09:84:8e:30:2e:1d:41:32:a9:c1:70:94:2a:d8:ed:4f:b3:f9:
         76:25:5b:8f:b1:a4:13:d3:13:13:c1:0c:54:42:34:30:a0:4e:
         73:db:ac:17:d0:56:a8:c1:aa:df:82:59:1f:9e:35:d9:6a:f0:
         89:a4:a5:3b:72:3a:0d:9a:86:ea:14:5e:b7:1a:42:ba:1b:88:
         b8:d5:d7:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:48 2026 by rpki-client