This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3234203d3e20323633303733.roa
File:                     3137372e3232332e31362e302f32302d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          lPaKxlrts3MtjemwvxQcoxk7JfmWLEncGSU0YlvBKVw=
Subject key identifier:   3A:64:11:07:48:5F:FB:90:EE:47:4C:53:4E:AC:D8:2C:C9:66:98:B9
Certificate issuer:       /CN=E6A3BB875E3C099F0B7527B57175ACBC2C52C920
Certificate serial:       11F330F84B3452EBD824D59B6D946EF16B61A5DC
Authority key identifier: E6:A3:BB:87:5E:3C:09:9F:0B:75:27:B5:71:75:AC:BC:2C:52:C9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3234203d3e20323633303733.roa
Signing time:             Wed 31 Dec 2025 14:13:47 +0000
ROA not before:           Wed 31 Dec 2025 14:08:47 +0000
ROA not after:            Wed 30 Dec 2026 14:13:47 +0000
asID:                     263073
IP address blocks:        177.223.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 08:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f3:30:f8:4b:34:52:eb:d8:24:d5:9b:6d:94:6e:f1:6b:61:a5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A3BB875E3C099F0B7527B57175ACBC2C52C920
        Validity
            Not Before: Dec 31 14:08:47 2025 GMT
            Not After : Dec 30 14:13:47 2026 GMT
        Subject: CN=3A641107485FFB90EE474C534EACD82CC96698B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:72:29:12:2f:ef:e0:5b:be:cd:1c:8a:30:
                    b9:ad:a0:ed:7d:8a:53:02:e2:22:d3:de:91:d6:16:
                    f4:b7:f7:16:83:b1:c4:07:c4:8d:ef:21:cf:41:73:
                    df:b6:3d:2b:c5:a2:4d:0a:17:98:0c:f1:f2:14:e7:
                    f6:08:6f:a7:b2:05:9d:eb:6e:a9:11:10:e4:d7:92:
                    d7:22:14:80:ae:f3:c9:fe:a8:c3:48:9d:58:2f:37:
                    55:30:0a:0b:8b:45:2f:ad:75:d5:38:a9:7a:92:d7:
                    72:47:6c:f2:53:4b:a1:51:73:8e:88:c0:b3:f7:cd:
                    49:9a:d2:99:a7:d1:cb:04:e0:bd:f1:f0:1b:e6:0e:
                    85:7b:05:51:9f:f0:fa:33:20:c8:ac:b9:e6:db:25:
                    0d:36:8f:95:07:f5:bb:35:47:4e:9c:8a:df:9d:7d:
                    4a:69:d1:91:6f:a5:f6:b5:e9:8a:50:59:4f:30:df:
                    f4:ac:8d:c2:6b:b7:de:5c:ad:9e:31:38:20:dd:50:
                    97:00:0c:79:4b:ba:6b:0d:67:ab:8e:68:dd:09:d6:
                    21:46:75:70:7a:6a:56:48:87:a4:6e:0c:11:80:59:
                    c1:81:48:80:d2:f4:9a:39:cf:5a:ff:e3:72:46:09:
                    d1:cb:79:62:fb:10:ec:28:0f:ee:b8:dd:52:03:50:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:64:11:07:48:5F:FB:90:EE:47:4C:53:4E:AC:D8:2C:C9:66:98:B9
            X509v3 Authority Key Identifier:
                keyid:E6:A3:BB:87:5E:3C:09:9F:0B:75:27:B5:71:75:AC:BC:2C:52:C9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:3b:2b:66:94:8b:e5:8b:19:30:4c:d9:65:71:0d:43:fe:5c:
         02:49:92:ec:b7:53:33:e6:fb:97:b0:63:d4:b5:10:52:dd:44:
         62:3e:61:de:25:f7:40:bf:a6:1e:ea:1e:38:ee:18:8c:b2:37:
         0f:89:fe:8d:f1:eb:98:f8:99:04:24:57:94:aa:72:23:d8:14:
         ca:23:24:f0:52:d5:e5:7e:19:51:eb:3d:39:72:62:95:6e:7a:
         1f:95:8e:c3:2a:11:a9:b7:3e:2b:72:2d:56:d9:fa:58:28:28:
         ec:ff:7c:b1:59:a7:2b:39:9e:c5:8e:b4:c9:fb:0d:c5:88:c9:
         b2:cb:0e:ba:c6:86:72:b1:d8:f5:4f:ed:48:cc:df:70:ba:ef:
         7a:4d:b3:84:0c:b2:9e:4b:79:67:d6:1c:72:4c:9b:f3:73:ca:
         d9:b9:27:31:37:43:9c:29:ce:9b:47:bc:66:ee:63:f5:92:9d:
         37:40:03:bf:a6:48:57:fa:ef:24:cc:05:80:00:ce:1e:6e:ea:
         59:f8:77:88:15:80:f0:9a:ac:5d:3e:e5:e8:eb:6d:29:41:d9:
         df:fb:99:c7:ac:07:07:da:50:a1:5d:81:ed:1e:58:2d:53:d7:
         8c:39:58:57:a8:b8:78:cf:d6:d9:d0:88:99:0c:c6:b5:64:e3:
         5c:cf:f9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 22:40:29 2026 by rpki-client