This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3332203d3e20323635343636.roa
File:                     3136382e3139362e3137362e302f32322d3332203d3e20323635343636.roa (raw, json)
Hash identifier:          HmQc5TElcXZorlsy9OwdFo39URKEZxJFxe2EfyxASpw=
Subject key identifier:   F7:4C:99:6F:3E:6A:2D:C7:0C:1B:06:08:E5:31:A9:9F:21:C1:60:BD
Certificate issuer:       /CN=8F66558670F52B216CF1A300EE9109FB19CBD795
Certificate serial:       1A39E91D5623BF1C7929EA05441EF011B2E80B29
Authority key identifier: 8F:66:55:86:70:F5:2B:21:6C:F1:A3:00:EE:91:09:FB:19:CB:D7:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3332203d3e20323635343636.roa
Signing time:             Thu 22 Jan 2026 03:42:36 +0000
ROA not before:           Thu 22 Jan 2026 03:37:36 +0000
ROA not after:            Thu 21 Jan 2027 03:42:36 +0000
asID:                     265466
IP address blocks:        168.196.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.crl
                          rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:39:e9:1d:56:23:bf:1c:79:29:ea:05:44:1e:f0:11:b2:e8:0b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F66558670F52B216CF1A300EE9109FB19CBD795
        Validity
            Not Before: Jan 22 03:37:36 2026 GMT
            Not After : Jan 21 03:42:36 2027 GMT
        Subject: CN=F74C996F3E6A2DC70C1B0608E531A99F21C160BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:18:da:fb:c5:f1:77:b6:51:19:6b:96:98:4b:
                    de:0c:e3:55:6a:3f:fd:ef:f4:2f:d4:a3:76:90:96:
                    e0:71:9f:75:c5:96:e5:13:98:86:fa:83:75:64:35:
                    87:7f:33:23:0e:88:aa:05:97:cd:ad:9f:10:e8:b1:
                    3f:37:dd:3a:6d:9c:d6:ad:f3:f6:e4:74:0a:55:0a:
                    25:f4:b5:a9:f7:01:79:28:2e:05:06:40:ed:54:02:
                    45:3d:5d:64:28:f7:38:06:c9:2d:73:47:9b:62:20:
                    a2:9c:6e:89:a8:da:1c:bb:8e:19:d3:68:fa:6a:4d:
                    02:2a:a2:d8:52:2c:87:94:1a:b9:0b:59:bd:d0:58:
                    43:a3:45:e9:d1:7b:e2:8d:4a:a4:d1:25:ae:74:be:
                    6f:9c:0a:81:06:8e:fc:5e:77:3e:2a:67:eb:c8:91:
                    82:42:10:75:90:12:5a:c6:d2:ab:fa:fc:08:67:67:
                    bf:bb:ac:1d:1c:f8:4d:7c:a3:34:58:e4:7b:aa:1d:
                    aa:d6:6a:40:1b:78:78:f7:de:d9:1a:70:17:c3:0d:
                    bb:e9:e6:36:0e:8a:b4:97:ca:69:36:84:9b:18:36:
                    c4:da:92:6e:3c:e2:fd:fc:ce:5e:3e:b5:53:24:ab:
                    d1:f0:92:85:53:a3:52:16:95:46:19:4f:20:a3:b9:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4C:99:6F:3E:6A:2D:C7:0C:1B:06:08:E5:31:A9:9F:21:C1:60:BD
            X509v3 Authority Key Identifier:
                keyid:8F:66:55:86:70:F5:2B:21:6C:F1:A3:00:EE:91:09:FB:19:CB:D7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3332203d3e20323635343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:c1:1d:bf:07:f8:14:8e:36:f4:78:13:19:1a:2e:1b:28:fa:
         7e:b8:bc:49:de:7b:96:f1:74:3b:b7:f5:ab:9f:c0:91:04:ae:
         4c:cf:c1:41:67:b4:7e:80:eb:36:5c:ee:7b:7d:4a:e8:89:8a:
         21:4d:40:26:b0:13:cf:41:52:5b:8d:67:e3:5b:ed:20:7e:b9:
         e3:66:da:9f:39:d1:54:e4:ce:7b:83:27:a7:30:2b:50:e0:6c:
         2f:55:90:c5:ff:06:cf:82:47:0a:46:6d:e5:b9:82:1c:26:58:
         c6:e4:6a:8e:36:da:3a:2e:51:ab:03:da:28:8d:b6:ca:15:30:
         7d:e4:d1:af:3b:ba:fd:24:82:b2:13:4b:2a:7b:ba:a4:7e:ab:
         4e:80:71:f8:40:c7:70:0b:bd:49:eb:a3:d5:58:f0:a5:bd:85:
         cb:f2:d9:12:25:eb:6d:2c:e7:09:07:26:12:23:97:4a:db:ab:
         da:c2:9a:7e:8d:3d:b8:5a:cf:a0:95:1a:8a:f0:0f:0f:d8:3d:
         f4:1d:5c:40:51:cd:30:eb:31:fb:53:d6:be:99:95:eb:d5:6d:
         4e:19:f1:df:bf:db:6e:47:aa:38:c2:eb:bf:36:fe:89:08:6a:
         8b:cd:0b:b3:6d:e8:70:93:5a:dc:82:ea:0e:b6:84:71:39:56:
         ff:f0:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:26:18 2026 by rpki-client