This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/3139322e3134312e3130302e302f32322d3234203d3e20323637353232.roa
File:                     3139322e3134312e3130302e302f32322d3234203d3e20323637353232.roa (raw, json)
Hash identifier:          J7joql6LPoTxXuBVChtfNn7VXBH+HHhsDnuNIdTcxic=
Subject key identifier:   0A:1A:19:DC:CB:E7:72:A4:15:4F:48:6A:85:2D:6C:DD:A0:FD:D3:71
Certificate issuer:       /CN=999AD1BE9395F66B0115A7E2003E6ABFF1FE8408
Certificate serial:       5E08A3FFDD3B8AB213790251F8E736DD3E3E542B
Authority key identifier: 99:9A:D1:BE:93:95:F6:6B:01:15:A7:E2:00:3E:6A:BF:F1:FE:84:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999AD1BE9395F66B0115A7E2003E6ABFF1FE8408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/3139322e3134312e3130302e302f32322d3234203d3e20323637353232.roa
Signing time:             Sat 24 Jan 2026 13:27:04 +0000
ROA not before:           Sat 24 Jan 2026 13:22:04 +0000
ROA not after:            Sat 23 Jan 2027 13:27:04 +0000
asID:                     267522
IP address blocks:        192.141.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/999AD1BE9395F66B0115A7E2003E6ABFF1FE8408.crl
                          rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/999AD1BE9395F66B0115A7E2003E6ABFF1FE8408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999AD1BE9395F66B0115A7E2003E6ABFF1FE8408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:08:a3:ff:dd:3b:8a:b2:13:79:02:51:f8:e7:36:dd:3e:3e:54:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999AD1BE9395F66B0115A7E2003E6ABFF1FE8408
        Validity
            Not Before: Jan 24 13:22:04 2026 GMT
            Not After : Jan 23 13:27:04 2027 GMT
        Subject: CN=0A1A19DCCBE772A4154F486A852D6CDDA0FDD371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:d9:61:4e:2e:b2:e4:be:ac:cb:a7:29:49:
                    65:e7:31:0e:8c:2a:cb:38:fe:61:2d:96:57:a7:d0:
                    c2:f4:43:71:35:40:5f:3f:a2:d4:b5:6e:db:17:2d:
                    73:3c:f1:80:9c:02:5c:5c:68:94:38:c3:8b:ae:c0:
                    84:d0:61:10:32:87:30:60:cd:36:5f:8d:61:66:28:
                    4e:a8:ef:e0:94:64:e4:4e:89:d4:12:74:52:24:eb:
                    d0:da:63:52:86:70:60:33:36:93:8f:82:3e:92:ed:
                    ac:6d:11:93:46:b5:c3:b4:37:4e:48:88:bb:b5:cb:
                    4d:9f:67:55:0e:00:f4:c0:10:7e:54:37:69:65:d0:
                    54:71:18:ed:68:94:32:24:40:e0:92:8d:6c:2c:4b:
                    7f:c1:18:3a:d3:7d:14:0f:34:7a:3f:65:3c:cc:1c:
                    98:27:d1:4f:64:e8:a1:a5:fa:fe:fa:bd:73:d9:a5:
                    1f:84:dc:bc:81:24:8a:a0:fa:45:36:61:d6:17:e6:
                    28:ab:0d:05:7a:69:cc:fd:cf:32:89:94:f1:18:dd:
                    fa:5f:e3:60:04:c4:f9:aa:4b:3e:ab:58:2d:b1:67:
                    e3:fa:a7:00:63:bb:08:1e:15:99:e6:99:f3:e3:ee:
                    c2:80:40:bf:1a:60:85:63:70:cc:d9:73:1e:07:64:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1A:19:DC:CB:E7:72:A4:15:4F:48:6A:85:2D:6C:DD:A0:FD:D3:71
            X509v3 Authority Key Identifier:
                keyid:99:9A:D1:BE:93:95:F6:6B:01:15:A7:E2:00:3E:6A:BF:F1:FE:84:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/999AD1BE9395F66B0115A7E2003E6ABFF1FE8408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999AD1BE9395F66B0115A7E2003E6ABFF1FE8408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/3139322e3134312e3130302e302f32322d3234203d3e20323637353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:94:4f:9a:41:d8:01:38:1a:0b:cf:60:69:2c:b9:e3:cb:
         d6:ce:ff:16:32:d5:9d:65:24:53:aa:5b:74:3f:4d:9a:db:ba:
         b9:7f:23:d9:d3:62:6b:0a:27:36:4b:48:f4:12:1c:6c:aa:11:
         26:c3:93:45:63:6f:f9:47:dd:ca:0c:75:06:e5:c1:f9:30:7f:
         7c:50:0e:98:21:f9:86:99:5b:4f:f9:d5:9c:0d:ec:3f:ca:4c:
         86:bc:21:0c:f0:29:d7:51:1b:c9:87:41:2f:b0:aa:f1:89:e5:
         6b:cb:3d:f2:fa:da:18:84:40:51:0f:3e:59:15:ae:00:ca:54:
         84:96:57:c7:8b:4c:21:0e:7c:90:d2:e7:93:a2:36:65:9e:55:
         fd:2d:e3:51:86:7b:bb:84:ce:50:25:0b:93:a6:91:ac:8f:b6:
         1e:a2:b8:20:f1:a3:60:1b:a6:70:1a:e4:fe:c6:59:8b:73:0d:
         34:72:2a:db:16:8a:4c:3d:1f:94:9c:00:70:a5:9a:e5:9a:e1:
         c4:8f:ac:a5:f4:e1:96:56:b3:0e:d8:70:c2:8b:14:8c:a8:ce:
         8a:ba:85:59:12:26:23:7c:5f:c2:a5:d9:19:ec:0c:64:ee:83:
         7a:61:5a:d1:fb:82:62:c1:c7:0e:04:85:d1:99:27:c4:96:18:
         06:d2:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:51:49 2026 by rpki-client