This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137302e38322e3136302e302f32322d3234203d3e20313938393439.roa
File:                     3137302e38322e3136302e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          SfKJunmGsr6gnu1hLwpc0LM29OQ137Sxq2KbSvcQSDw=
Subject key identifier:   9E:F5:BD:00:35:92:86:BD:9D:1D:D8:E2:B3:3C:D4:D8:5C:E0:36:51
Certificate issuer:       /CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
Certificate serial:       195E5674046AA3389F19A29A6352493120183BCA
Authority key identifier: 19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137302e38322e3136302e302f32322d3234203d3e20313938393439.roa
Signing time:             Wed 14 Jan 2026 14:20:56 +0000
ROA not before:           Wed 14 Jan 2026 14:15:56 +0000
ROA not after:            Wed 13 Jan 2027 14:20:56 +0000
asID:                     198949
IP address blocks:        170.82.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl
                          rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5e:56:74:04:6a:a3:38:9f:19:a2:9a:63:52:49:31:20:18:3b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
        Validity
            Not Before: Jan 14 14:15:56 2026 GMT
            Not After : Jan 13 14:20:56 2027 GMT
        Subject: CN=9EF5BD00359286BD9D1DD8E2B33CD4D85CE03651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:cc:a4:4e:99:45:83:15:b5:ec:01:4a:b9:
                    b0:0f:e5:75:41:2e:ee:fc:fe:e6:51:a3:75:36:c4:
                    d7:c5:b5:ba:c5:a9:36:5d:25:15:a3:e5:f4:8a:97:
                    cf:1e:23:e6:f3:82:30:18:08:6b:b3:aa:75:de:98:
                    b0:67:91:17:d7:06:cb:22:47:ae:98:5b:e5:e6:ad:
                    ec:7e:d9:cd:ce:88:c0:02:64:02:01:25:cc:68:ef:
                    47:e5:7f:95:77:d5:14:0a:8c:fe:5c:94:6a:48:17:
                    d7:a8:57:dd:5c:85:ec:34:36:82:dd:48:36:aa:6d:
                    61:2d:31:03:85:79:31:40:f3:6d:d9:ea:45:30:d7:
                    2b:0c:4d:c3:86:00:64:ac:c4:72:8a:2e:ef:e1:72:
                    8d:85:89:e8:4b:50:83:ca:48:70:a5:e3:16:1a:a5:
                    b1:d6:68:8e:49:82:2c:7f:a9:33:a6:f6:79:86:96:
                    1f:29:5f:b3:95:77:d9:4b:68:2c:5b:c5:a3:ea:fd:
                    4c:83:09:0e:d3:a3:00:84:42:dd:19:f1:b7:a2:d6:
                    54:28:56:a7:e7:56:11:1a:31:b6:2b:50:be:2b:a2:
                    24:70:ad:de:3c:67:74:d1:e5:8a:87:87:b9:ea:c2:
                    03:c1:b6:7c:34:df:18:a2:9c:9f:fc:d9:52:34:7d:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F5:BD:00:35:92:86:BD:9D:1D:D8:E2:B3:3C:D4:D8:5C:E0:36:51
            X509v3 Authority Key Identifier:
                keyid:19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137302e38322e3136302e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:dd:c6:63:0f:9d:f5:30:13:cf:8a:85:09:74:55:d0:d9:
         18:0e:26:39:5e:ad:f8:f1:52:c5:21:31:32:ae:32:cb:86:e1:
         5c:01:3c:89:a7:d4:3e:72:f3:f8:0e:3e:a9:d4:82:0e:31:ba:
         5f:33:bc:01:dc:e2:31:5e:b3:43:34:91:ef:74:03:46:bd:fa:
         d6:60:ed:00:43:71:f0:a1:98:31:59:4f:5c:99:05:11:d0:b1:
         9a:6a:ac:07:40:b3:13:64:9d:68:63:55:9d:0f:ad:35:dc:fa:
         05:f6:26:9e:1c:5d:8e:76:e4:a1:58:1f:ea:38:7a:6c:9e:6d:
         03:da:ba:9f:f0:30:e1:e7:be:9f:6c:8d:e1:79:2b:a2:7e:11:
         b8:3e:5b:71:18:87:84:20:89:3d:e2:78:34:f6:6a:df:98:fc:
         aa:80:62:90:42:8f:20:d9:79:46:4c:17:85:06:9b:53:7a:38:
         d0:7d:80:71:69:99:7e:c4:8b:06:cf:53:c4:09:23:b3:e6:7e:
         c0:4d:2d:ea:05:69:ab:45:fd:4b:30:2f:3e:ac:8d:77:d1:bf:
         73:3b:0a:59:46:6d:69:0c:1d:cb:54:b5:d4:4c:de:fc:fa:0b:
         26:b1:6b:4f:81:82:1e:98:81:10:87:18:7a:80:a7:f4:32:30:
         5c:87:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:26:33 2026 by rpki-client