This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134362e302f32342d3234203d3e20323636313738.roa
File:                     3133382e39372e3134362e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          7334nlQg/xpg15NrQIjdp536ocTOIU6vJfkWVg6TQMU=
Subject key identifier:   1F:F6:D9:AF:4A:02:13:95:9D:34:E1:B0:45:73:2E:AF:15:69:05:AD
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       3764E29ABF69953A40648CBBCC6B549A341FB6C8
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134362e302f32342d3234203d3e20323636313738.roa
Signing time:             Fri 09 Jan 2026 06:20:11 +0000
ROA not before:           Fri 09 Jan 2026 06:15:11 +0000
ROA not after:            Fri 08 Jan 2027 06:20:11 +0000
asID:                     266178
IP address blocks:        138.97.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:64:e2:9a:bf:69:95:3a:40:64:8c:bb:cc:6b:54:9a:34:1f:b6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Jan  9 06:15:11 2026 GMT
            Not After : Jan  8 06:20:11 2027 GMT
        Subject: CN=1FF6D9AF4A0213959D34E1B045732EAF156905AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:95:f5:cd:0c:ed:60:5e:26:c6:65:ef:33:
                    23:3d:90:84:f5:7f:4d:31:f5:59:8c:49:ce:d6:19:
                    d8:1c:71:3b:77:1a:ba:0a:1f:60:38:a1:42:80:25:
                    46:5c:dd:20:f3:da:1b:9f:f1:d7:0a:ed:ff:b8:7d:
                    c4:8e:58:e2:a0:57:1d:5a:44:b4:b8:58:c8:c3:e5:
                    aa:74:3b:64:02:f2:f8:93:06:af:fd:57:35:b2:5e:
                    c6:c5:5d:08:a0:4f:14:54:10:ad:b6:10:99:c7:04:
                    fb:3d:7d:3d:8a:ab:22:83:9d:4d:42:c8:2b:d9:bf:
                    85:d3:78:a1:5c:5b:08:0a:ab:fa:b1:7e:13:be:81:
                    49:2e:7a:2c:7f:33:67:10:ce:69:59:36:50:0d:ad:
                    6e:a3:f4:9b:e6:48:d1:5d:61:89:46:e3:b7:78:40:
                    8b:34:ab:51:84:fa:f7:3f:47:01:ec:74:72:3f:28:
                    de:cf:b5:0b:20:1a:d1:5b:75:ee:dd:06:f7:63:0c:
                    37:39:25:50:57:86:b5:81:89:d2:ae:61:a4:58:ab:
                    d3:26:a8:24:b5:bf:08:f1:67:46:81:84:69:f6:3a:
                    35:55:44:7a:c0:43:ff:78:37:19:0b:14:a4:1c:d0:
                    7d:55:b5:cc:7c:25:23:de:25:89:fe:01:71:03:85:
                    0e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F6:D9:AF:4A:02:13:95:9D:34:E1:B0:45:73:2E:AF:15:69:05:AD
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134362e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:bd:0a:be:2f:13:8a:d1:90:dc:57:13:1a:9f:09:4d:48:
         22:7b:ea:13:0e:6b:13:77:85:95:b7:05:26:b5:b1:28:0d:3c:
         a5:7d:25:9e:04:52:a9:5e:e6:a8:39:61:5a:f5:c2:8e:f1:4f:
         d6:59:76:1e:46:1e:aa:f7:13:ac:53:e6:d2:9c:c9:86:68:4c:
         25:8f:a8:f4:1f:35:3a:1a:da:72:5b:03:32:a7:c1:3d:d7:b2:
         63:fa:75:a5:2b:59:22:10:c5:18:c5:97:43:a1:ac:04:ae:4a:
         ab:10:3b:2a:67:c8:fa:79:78:ad:e8:87:1e:6d:43:b0:c9:92:
         e8:32:d7:ab:03:f4:35:44:8a:0f:64:0e:6a:30:93:c0:dc:5b:
         39:a1:14:8a:a4:ce:02:35:fd:0d:4b:a0:a3:92:ce:85:6f:af:
         8a:99:70:db:db:59:c4:70:7d:1e:a8:29:3a:02:23:3d:fa:83:
         25:3c:79:d9:b3:3b:86:e9:15:b3:18:6b:c8:ba:71:95:ad:b3:
         e1:1f:1e:c8:17:12:f2:02:f8:1b:ce:f0:d3:c4:8f:19:71:76:
         63:e6:6b:71:32:1c:cf:62:35:7f:6a:cb:3d:1c:1e:5c:1d:2c:
         7a:5f:98:4d:14:bc:a2:c3:72:f8:7a:ec:a4:e6:3f:56:2b:63:
         31:c2:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:07:58 2026 by rpki-client