This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/3137302e3235342e3134302e302f32322d3332203d3e20323635313037.roa
File:                     3137302e3235342e3134302e302f32322d3332203d3e20323635313037.roa (raw, json)
Hash identifier:          Q2pqHbVyNb2z814whEyfp83D7QMqmixfQ27ToQtEcY4=
Subject key identifier:   8A:23:51:9B:D4:E5:D6:95:6A:75:78:6D:7C:47:E1:86:E8:05:EB:85
Certificate issuer:       /CN=07ED916E260CEE4493474E6E1B368CCEF212F6F0
Certificate serial:       7A511AA0F9B06040056194C3565294B03AB1070F
Authority key identifier: 07:ED:91:6E:26:0C:EE:44:93:47:4E:6E:1B:36:8C:CE:F2:12:F6:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07ED916E260CEE4493474E6E1B368CCEF212F6F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/3137302e3235342e3134302e302f32322d3332203d3e20323635313037.roa
Signing time:             Mon 05 Jan 2026 20:15:57 +0000
ROA not before:           Mon 05 Jan 2026 20:10:57 +0000
ROA not after:            Mon 04 Jan 2027 20:15:57 +0000
asID:                     265107
IP address blocks:        170.254.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/07ED916E260CEE4493474E6E1B368CCEF212F6F0.crl
                          rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/07ED916E260CEE4493474E6E1B368CCEF212F6F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07ED916E260CEE4493474E6E1B368CCEF212F6F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 14:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:51:1a:a0:f9:b0:60:40:05:61:94:c3:56:52:94:b0:3a:b1:07:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ED916E260CEE4493474E6E1B368CCEF212F6F0
        Validity
            Not Before: Jan  5 20:10:57 2026 GMT
            Not After : Jan  4 20:15:57 2027 GMT
        Subject: CN=8A23519BD4E5D6956A75786D7C47E186E805EB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:20:06:9d:f4:23:45:2e:60:65:a4:f7:4e:
                    14:20:f6:c0:3b:7a:86:46:07:79:20:a9:59:bb:e0:
                    13:18:8a:f5:35:14:b5:a1:32:c5:a7:78:d6:2b:65:
                    40:5c:20:bf:28:1e:b5:01:8f:01:bc:e9:74:47:bd:
                    0a:96:01:e9:9f:d9:90:46:b6:5b:bb:f4:bf:f6:79:
                    9d:6b:d4:36:9d:d8:70:d9:70:fe:eb:c4:79:3e:f6:
                    88:d3:4b:55:f9:ca:19:b2:c0:6e:45:2e:1a:ad:d2:
                    ce:3f:be:ec:45:cf:bd:64:61:36:fa:4c:eb:57:eb:
                    f6:65:e2:ed:5a:c9:14:5f:70:9d:66:2d:63:99:8e:
                    d3:d4:c7:d3:00:86:dd:2b:5e:53:72:d9:4d:bc:2d:
                    38:ee:3d:23:5b:dd:64:fe:77:31:42:3c:68:03:e7:
                    2c:b3:3b:c4:b6:e5:b0:2c:d5:bd:76:65:f2:44:58:
                    ec:3d:b0:64:fd:f8:36:25:ab:c5:f8:d8:08:ac:58:
                    4c:bd:2e:6e:e5:bb:84:06:3f:c3:aa:96:03:9c:b9:
                    48:fb:86:8a:92:9c:b1:60:16:86:04:42:bb:16:b2:
                    86:b1:d2:74:95:58:cb:7b:c3:13:88:20:ed:d3:24:
                    81:dd:00:28:7e:21:43:ff:16:ec:60:36:22:13:fe:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:23:51:9B:D4:E5:D6:95:6A:75:78:6D:7C:47:E1:86:E8:05:EB:85
            X509v3 Authority Key Identifier:
                keyid:07:ED:91:6E:26:0C:EE:44:93:47:4E:6E:1B:36:8C:CE:F2:12:F6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/07ED916E260CEE4493474E6E1B368CCEF212F6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07ED916E260CEE4493474E6E1B368CCEF212F6F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/3137302e3235342e3134302e302f32322d3332203d3e20323635313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:37:a3:ec:66:8d:25:b6:85:e1:07:4b:b0:1f:02:6b:47:
         50:76:b2:90:15:23:f5:dc:de:4e:a2:7b:dc:ec:13:39:f2:bb:
         33:8a:89:ad:2b:9e:94:a2:54:fb:9b:0c:84:21:eb:59:64:10:
         a9:e7:0d:52:a0:79:a5:1e:34:4e:c4:d2:35:a5:b1:10:23:d0:
         b8:c5:37:61:4a:11:6b:24:91:ff:67:a3:fc:51:4d:ac:9a:ce:
         51:9e:a3:09:36:b9:85:83:2a:e3:6d:03:0e:22:85:14:30:4b:
         7b:d5:29:05:c6:8a:db:08:59:b6:ac:72:f3:34:ef:42:22:28:
         02:82:98:6c:9f:23:ad:0a:c6:74:ac:3c:ac:71:13:b6:08:cb:
         d3:29:4a:95:d3:87:9b:79:45:b4:f6:16:7d:5a:16:5b:75:2f:
         73:a8:30:cc:cf:5f:98:7c:16:12:2a:59:0d:2c:d5:21:92:ad:
         2a:24:fe:84:f1:1b:94:66:47:cd:6e:bd:d8:3e:7c:5d:12:0c:
         45:ad:2f:64:e8:cf:7a:6f:26:22:44:2b:4e:2a:d8:99:85:c3:
         48:04:ab:30:c0:a2:d7:c3:a8:f8:02:37:80:6a:f0:78:16:46:
         49:9d:37:a8:f6:b2:2f:af:ef:ea:f9:1f:29:9f:26:fc:32:79:
         a0:ab:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:26:19 2026 by rpki-client