This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
File:                     3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (raw, json)
Hash identifier:          YMO1AAaKddSx4wsxtUWpW6YFZK1PI1b4AKJgiHYgwMk=
Subject key identifier:   F2:15:72:17:30:73:49:60:26:A5:09:AE:FC:D0:9F:3B:96:B7:B8:56
Certificate issuer:       /CN=085A4379FC02066399A7BABE986F2B930711F0E0
Certificate serial:       3F116CC4FE975923C445DD93692CA9BA705862E2
Authority key identifier: 08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa
Signing time:             Fri 23 Jan 2026 15:06:32 +0000
ROA not before:           Fri 23 Jan 2026 15:01:32 +0000
ROA not after:            Fri 22 Jan 2027 15:06:32 +0000
asID:                     266168
IP address blocks:        160.19.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
                          rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:11:6c:c4:fe:97:59:23:c4:45:dd:93:69:2c:a9:ba:70:58:62:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085A4379FC02066399A7BABE986F2B930711F0E0
        Validity
            Not Before: Jan 23 15:01:32 2026 GMT
            Not After : Jan 22 15:06:32 2027 GMT
        Subject: CN=F21572173073496026A509AEFCD09F3B96B7B856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a5:ca:0b:bd:70:65:69:d9:27:d9:9e:49:d1:
                    0a:82:29:5d:43:5f:88:17:6d:14:b2:8f:5d:78:e7:
                    a1:2d:26:a5:5b:49:e0:a5:97:43:bc:cb:b8:35:7a:
                    ab:26:6f:96:d4:c1:16:81:d8:6e:cf:0f:3d:4b:19:
                    bc:fc:fb:14:d2:53:85:c9:df:8f:88:e3:d9:b2:d5:
                    79:41:60:aa:02:9a:6d:91:47:75:b1:a0:06:61:1a:
                    63:e4:a3:ef:f8:db:26:dc:71:59:da:1d:85:8b:e1:
                    db:13:b7:c7:ee:b4:5b:81:2b:3d:71:5f:c6:73:3a:
                    d9:83:b8:b7:92:d7:49:b5:13:c3:49:a6:d9:53:05:
                    88:de:03:6e:d7:28:9c:b8:6e:a8:5a:b9:1e:82:0d:
                    e1:27:73:12:e7:99:0c:73:47:c8:cc:09:0b:8a:01:
                    4c:14:78:2e:9c:50:ef:ff:c9:d7:15:90:7c:0c:cf:
                    ec:82:10:16:15:be:30:1a:12:a8:f9:ff:62:61:60:
                    d4:f0:88:e9:6f:63:67:ff:f7:1c:ea:87:e3:17:0d:
                    d4:6c:62:e0:60:dc:51:be:e5:13:38:ae:31:1f:e4:
                    d0:a9:53:67:20:c0:48:c9:b1:6c:54:2f:7c:9f:fc:
                    03:ca:16:6b:c7:41:38:81:5f:b1:b1:cb:88:a0:f4:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:15:72:17:30:73:49:60:26:A5:09:AE:FC:D0:9F:3B:96:B7:B8:56
            X509v3 Authority Key Identifier:
                keyid:08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:45:23:c5:cb:a6:00:4a:be:4f:8b:21:71:76:1e:e7:77:
         e6:18:48:4f:8b:f2:ce:73:87:ae:f8:3e:59:ae:33:d3:29:74:
         4f:f0:1c:4c:1f:b4:d3:a7:7f:ea:64:45:b4:8e:82:ab:5e:dd:
         f7:3c:bd:e3:a3:1d:1c:30:3f:6b:09:78:a7:a9:16:36:67:cb:
         36:72:e1:38:47:e4:fa:dc:8f:7b:42:46:48:7b:60:b5:b3:c5:
         4a:c5:b4:f8:f4:0c:8b:2d:fd:6d:2d:16:4d:2e:85:b9:a6:51:
         dd:5c:e7:40:6c:aa:22:f3:3e:ee:cb:fd:e7:54:d5:3b:f3:39:
         f3:77:0a:6e:25:f6:87:f4:cc:98:be:a6:3e:dc:ed:8a:4a:d6:
         cd:9f:b8:ac:ec:3c:79:ea:54:95:ff:60:8c:c5:9e:94:13:aa:
         7c:61:2e:f6:2f:54:a0:0c:17:f9:15:22:8c:9c:f3:47:83:cd:
         a1:26:95:1c:24:8b:31:a9:a1:af:15:b3:97:24:cb:a6:9c:c9:
         ad:ac:9f:bb:97:e9:93:9e:bb:14:a0:a8:1b:db:db:f2:ca:bc:
         9e:be:df:8e:f4:74:04:1e:9f:fc:2f:66:5d:93:8a:6b:3d:d0:
         96:66:f6:d0:19:30:bd:22:d4:47:2c:be:87:7c:b4:57:0a:35:
         4b:37:11:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:39 2026 by rpki-client