This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.gns.net.br/repo/Gns/0/3137372e37332e36342e302f32322d3234203d3e2038313637.roa
File:                     3137372e37332e36342e302f32322d3234203d3e2038313637.roa (raw, json)
Hash identifier:          O7n0jLzo7YMcBGooO1vfFpKR+fQoz2i2afGi6ojAyww=
Subject key identifier:   3F:A2:5B:40:4F:9A:EE:87:1C:67:97:A8:E9:20:FC:FA:14:42:8A:9D
Certificate issuer:       /CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8
Certificate serial:       2A77FC902D5254C02411FADD643AFDC05CC3EF08
Authority key identifier: 80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer
Subject info access:      rsync://rpki.gns.net.br/repo/Gns/0/3137372e37332e36342e302f32322d3234203d3e2038313637.roa
Signing time:             Wed 21 Jan 2026 16:56:32 +0000
ROA not before:           Wed 21 Jan 2026 16:51:32 +0000
ROA not after:            Wed 20 Jan 2027 16:56:32 +0000
asID:                     8167
IP address blocks:        177.73.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.crl
                          rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:77:fc:90:2d:52:54:c0:24:11:fa:dd:64:3a:fd:c0:5c:c3:ef:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8
        Validity
            Not Before: Jan 21 16:51:32 2026 GMT
            Not After : Jan 20 16:56:32 2027 GMT
        Subject: CN=3FA25B404F9AEE871C6797A8E920FCFA14428A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:29:77:11:13:93:70:ba:f8:48:c5:99:9c:
                    a0:9f:e9:ed:fd:c5:a1:d5:ab:35:cb:72:32:e4:24:
                    c2:b7:e3:9f:8b:ed:f8:55:cd:c9:df:32:52:3a:b9:
                    a5:0d:22:7f:00:9f:b5:f9:ed:c9:57:40:cb:fd:d1:
                    ab:60:6d:3d:d2:ac:0e:82:81:c2:e2:86:66:e1:8e:
                    4a:94:9f:ab:d3:70:36:26:f6:c7:4a:ac:83:96:88:
                    1a:6e:8b:8a:9e:ae:d7:bc:40:96:ef:a3:eb:52:06:
                    06:4b:0b:94:de:bb:65:5a:42:47:b5:75:8a:38:a0:
                    b8:a1:bc:d1:57:52:42:28:40:1b:78:e1:e8:84:3b:
                    7e:79:c4:94:1f:6c:06:d8:4b:55:29:24:1b:fa:3e:
                    c6:b4:17:6b:8a:7a:c2:2a:16:1d:59:82:26:20:00:
                    c6:65:5a:a3:37:89:f5:72:9b:ec:84:17:c7:d6:7d:
                    49:e0:3d:c6:64:0a:d8:b9:a1:ff:61:25:e3:d3:b1:
                    96:25:89:6a:a3:5e:38:c4:40:c4:42:29:5d:de:6b:
                    53:74:9c:74:7d:36:f2:7d:dc:69:6d:bb:93:53:69:
                    85:ec:e6:0a:c0:39:c9:43:5f:07:b3:4e:73:71:8f:
                    76:0b:a0:e7:d6:63:c9:99:80:6d:98:dc:09:91:df:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A2:5B:40:4F:9A:EE:87:1C:67:97:A8:E9:20:FC:FA:14:42:8A:9D
            X509v3 Authority Key Identifier:
                keyid:80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gns.net.br/repo/Gns/0/3137372e37332e36342e302f32322d3234203d3e2038313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:7a:14:af:75:0c:59:1a:9f:07:6d:da:25:b4:a9:5f:db:77:
         78:7e:60:a1:d1:27:ca:93:c0:06:be:2e:36:f7:e6:3b:6d:29:
         a6:04:8f:43:bf:b7:55:06:ee:e6:00:de:59:a9:e0:44:ea:53:
         a7:8f:ce:3c:77:c5:11:b0:d0:7f:f8:fd:06:47:d4:b1:05:6f:
         7e:9c:b1:ab:58:5e:3f:a9:cb:d9:bb:3e:b8:4f:8d:6d:31:23:
         42:1b:02:8f:10:5a:93:20:a2:ff:2e:10:a0:67:91:27:b1:9a:
         b0:36:3a:e9:90:5f:df:55:53:02:04:a6:d6:d5:50:b5:ae:eb:
         98:02:0d:10:00:5b:b4:6e:21:67:a1:74:78:db:32:ac:3d:e7:
         b1:1f:dc:65:63:46:13:d7:c7:d9:c0:db:25:33:8b:ba:69:9c:
         04:55:a3:0c:88:94:71:7e:4a:54:1d:5a:d4:ca:e2:18:3b:68:
         b5:54:83:61:f9:73:82:7a:42:d6:76:46:19:6f:84:bd:b3:b8:
         33:bd:1c:e8:dd:c9:af:1b:e8:bb:31:e2:dc:ae:bc:4c:74:64:
         24:39:a7:31:75:db:f5:9d:3d:ab:10:10:39:71:bc:2d:e3:c3:
         85:9b:1a:e7:11:56:8f:21:7f:86:e2:45:19:25:17:23:2f:4e:
         8b:ba:76:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:45 2026 by rpki-client