This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.gns.net.br/repo/Gns/0/3137372e37332e36342e302f32322d3234203d3e203533303236.roa
File:                     3137372e37332e36342e302f32322d3234203d3e203533303236.roa (raw, json)
Hash identifier:          ERuVbdsldZ/MmaqnqkWbD7Gb9Gu1uzrsRJhmMYVLr0o=
Subject key identifier:   A6:9E:FB:12:5B:AC:62:20:25:AA:4A:7B:6F:3A:BE:49:C5:D8:0C:07
Certificate issuer:       /CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8
Certificate serial:       3257481E8CCD6927F39E5ED6FA5869BD4069BBFF
Authority key identifier: 80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer
Subject info access:      rsync://rpki.gns.net.br/repo/Gns/0/3137372e37332e36342e302f32322d3234203d3e203533303236.roa
Signing time:             Wed 21 Jan 2026 15:34:21 +0000
ROA not before:           Wed 21 Jan 2026 15:29:21 +0000
ROA not after:            Wed 20 Jan 2027 15:34:21 +0000
asID:                     53026
IP address blocks:        177.73.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.crl
                          rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:57:48:1e:8c:cd:69:27:f3:9e:5e:d6:fa:58:69:bd:40:69:bb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8
        Validity
            Not Before: Jan 21 15:29:21 2026 GMT
            Not After : Jan 20 15:34:21 2027 GMT
        Subject: CN=A69EFB125BAC622025AA4A7B6F3ABE49C5D80C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:38:c9:16:d1:1e:e1:b5:09:f9:2c:73:57:bc:
                    a7:ab:f7:ff:e9:8d:5d:f5:36:b0:c5:69:89:8e:bf:
                    aa:92:72:48:2e:ad:1a:16:8c:5c:fd:5c:a0:f3:3f:
                    1d:fd:b3:80:0c:55:36:d6:e5:ef:cc:83:c6:de:12:
                    4b:88:4f:af:36:9e:af:24:bb:ab:0f:f7:41:6d:d1:
                    6e:3a:22:8d:88:91:72:af:49:01:b1:93:4f:ff:c3:
                    34:14:cd:0c:47:42:49:cd:72:38:52:2d:a0:bd:a3:
                    0a:45:02:45:b3:26:9b:8a:81:ff:e8:84:4b:aa:56:
                    9f:c9:6a:0c:bf:31:f7:65:ae:cb:cc:b1:a7:6f:73:
                    19:6e:66:2a:aa:a5:58:34:04:92:0c:16:11:fb:0c:
                    f9:ea:cc:72:c9:b9:84:e3:54:57:a5:5d:b0:81:de:
                    e5:f5:de:9f:63:8b:6a:54:b2:15:71:f0:2a:51:f4:
                    bf:16:9d:42:28:aa:b4:b7:d3:44:a5:e7:da:8f:66:
                    0c:43:1c:d8:c9:3f:9d:4d:54:27:e6:25:74:62:ab:
                    b3:02:48:f3:27:9a:1b:d1:72:ec:62:90:92:62:dd:
                    3f:35:8e:9b:70:9e:c5:ec:1e:85:22:fb:7f:4a:27:
                    bb:3a:3e:1d:e2:fb:90:21:24:90:18:e7:36:30:19:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9E:FB:12:5B:AC:62:20:25:AA:4A:7B:6F:3A:BE:49:C5:D8:0C:07
            X509v3 Authority Key Identifier:
                keyid:80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gns.net.br/repo/Gns/0/3137372e37332e36342e302f32322d3234203d3e203533303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:6c:96:81:ce:2e:ac:25:54:b6:59:d1:6f:ca:a3:3e:e8:
         f1:0b:2e:ea:b2:75:49:43:fb:1d:91:95:e2:75:52:d0:98:2a:
         10:34:7f:be:12:01:a1:09:7f:01:f4:e3:61:c4:24:a9:23:9f:
         27:21:15:00:00:ae:92:f3:52:fe:ad:25:f5:dd:1a:31:8b:37:
         e6:03:0c:63:a3:da:1c:58:3c:c5:ab:27:09:0f:30:37:a7:59:
         1c:ba:4f:c6:9d:c7:c6:0f:e2:8e:a2:5b:28:5a:24:dc:0c:e5:
         43:2e:9d:ef:7b:f3:f8:15:e9:02:ee:76:9b:ff:05:86:19:57:
         27:c0:b7:a9:ff:0b:76:b4:75:02:38:05:15:1a:28:e5:63:0f:
         79:01:e8:50:c2:b3:cd:01:b2:66:fb:bc:e3:69:ca:e1:d7:d7:
         d0:b6:e8:73:7a:9c:49:2e:95:94:a2:c0:b6:2f:5b:57:6e:30:
         05:8f:a7:b3:c5:ca:f6:c4:9e:92:8f:15:5f:74:a3:8e:69:b2:
         9c:66:dd:91:2f:c9:22:a3:fa:03:8d:cc:27:6f:60:f0:51:05:
         a3:9e:4b:6f:39:8e:5a:f5:ad:6a:c3:e3:d2:43:95:5e:5b:b1:
         e6:17:32:1f:b2:20:8c:e3:95:c7:d4:61:6d:81:a4:67:a2:6d:
         ba:2d:3f:74
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUMldIHozNaSfznl7W+lhpvUBpu/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBEMjk1QkY0NjJGM0JEOTgzRkE3OTE0QkI0NkVDNUVD
OEFDQzlEODAeFw0yNjAxMjExNTI5MjFaFw0yNzAxMjAxNTM0MjFaMDMxMTAvBgNV
BAMTKEE2OUVGQjEyNUJBQzYyMjAyNUFBNEE3QjZGM0FCRTQ5QzVEODBDMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZOMkW0R7htQn5LHNXvKer9//p
jV31NrDFaYmOv6qSckgurRoWjFz9XKDzPx39s4AMVTbW5e/Mg8beEkuIT682nq8k
u6sP90Ft0W46Io2IkXKvSQGxk0//wzQUzQxHQknNcjhSLaC9owpFAkWzJpuKgf/o
hEuqVp/Jagy/MfdlrsvMsadvcxluZiqqpVg0BJIMFhH7DPnqzHLJuYTjVFelXbCB
3uX13p9ji2pUshVx8CpR9L8WnUIoqrS300Sl59qPZgxDHNjJP51NVCfmJXRiq7MC
SPMnmhvRcuxikJJi3T81jptwnsXsHoUi+39KJ7s6Ph3i+5AhJJAY5zYwGYTFAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUpp77ElusYiAlqkp7bzq+ScXYDAcwHwYDVR0j
BBgwFoAUgNKVv0YvO9mD+nkUu0bsXsisydgwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS5nbnMubmV0LmJyL3JlcG8vR25zLzAv
ODBEMjk1QkY0NjJGM0JEOTgzRkE3OTE0QkI0NkVDNUVDOEFDQzlEOC5jcmwweAYI
KwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MEQyOTVCRjQ2MkYzQkQ5ODNGQTc5
MTRCQjQ2RUM1RUM4QUNDOUQ4LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUH
MAuGW3JzeW5jOi8vcnBraS5nbnMubmV0LmJyL3JlcG8vR25zLzAvMzEzNzM3MmUz
NzMzMmUzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMzMwMzIzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEArFJQDANBgkqhkiG9w0BAQsFAAOCAQEAKf5sloHOLqwlVLZZ0W/Koz7o
8Qsu6rJ1SUP7HZGV4nVS0JgqEDR/vhIBoQl/AfTjYcQkqSOfJyEVAACukvNS/q0l
9d0aMYs35gMMY6PaHFg8xasnCQ8wN6dZHLpPxp3Hxg/ijqJbKFok3AzlQy6d73vz
+BXpAu52m/8FhhlXJ8C3qf8LdrR1AjgFFRoo5WMPeQHoUMKzzQGyZvu842nK4dfX
0Lboc3qcSS6VlKLAti9bV24wBY+ns8XK9sSeko8VX3SjjmmynGbdkS/JIqP6A43M
J29g8FEFo55LbzmOWvWtasPj0kOVXlux5hcyH7IgjOOVx9RhbYGkZ6Jtui0/dA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:38 2026 by rpki-client