This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56PVM8sr1ANhgw8NJ6buFZK7CseWtqavQ7BoZ2H3Ssf6/0/3139302e38392e39362e302f32322d3332203d3e20323730333731.roa
File:                     3139302e38392e39362e302f32322d3332203d3e20323730333731.roa (raw, json)
Hash identifier:          UtCPvP54XdtOddwqYrBKoS5wuLGvqeTZoLsg7xPya8E=
Subject key identifier:   37:DE:A4:13:7D:1D:27:33:FC:C4:C8:4C:90:F4:6D:FE:E8:F2:35:FD
Certificate issuer:       /CN=62667E006D06E83FA08E4EBDEFAB3B23FECF4530
Certificate serial:       18DEAD1DEF95B979FD46127B0465EE8B23F3FA52
Authority key identifier: 62:66:7E:00:6D:06:E8:3F:A0:8E:4E:BD:EF:AB:3B:23:FE:CF:45:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62667E006D06E83FA08E4EBDEFAB3B23FECF4530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56PVM8sr1ANhgw8NJ6buFZK7CseWtqavQ7BoZ2H3Ssf6/0/3139302e38392e39362e302f32322d3332203d3e20323730333731.roa
Signing time:             Thu 15 Jan 2026 23:00:37 +0000
ROA not before:           Thu 15 Jan 2026 22:55:37 +0000
ROA not after:            Thu 14 Jan 2027 23:00:37 +0000
asID:                     270371
IP address blocks:        190.89.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56PVM8sr1ANhgw8NJ6buFZK7CseWtqavQ7BoZ2H3Ssf6/0/62667E006D06E83FA08E4EBDEFAB3B23FECF4530.crl
                          rsync://rpki-repo.registro.br/repo/56PVM8sr1ANhgw8NJ6buFZK7CseWtqavQ7BoZ2H3Ssf6/0/62667E006D06E83FA08E4EBDEFAB3B23FECF4530.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62667E006D06E83FA08E4EBDEFAB3B23FECF4530.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:de:ad:1d:ef:95:b9:79:fd:46:12:7b:04:65:ee:8b:23:f3:fa:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62667E006D06E83FA08E4EBDEFAB3B23FECF4530
        Validity
            Not Before: Jan 15 22:55:37 2026 GMT
            Not After : Jan 14 23:00:37 2027 GMT
        Subject: CN=37DEA4137D1D2733FCC4C84C90F46DFEE8F235FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:36:1d:70:5a:06:0d:f1:4f:09:a4:dd:dc:
                    d6:52:11:54:97:55:43:12:6b:a1:4b:fe:35:1b:db:
                    42:87:5b:bb:dc:8a:86:b7:3c:62:71:4e:63:56:ca:
                    41:33:c4:9e:01:a0:d6:bd:5b:57:39:06:6b:45:0b:
                    f5:b2:21:d9:e0:d1:65:33:bb:97:45:2d:59:a1:a1:
                    26:7c:94:b6:8e:14:4d:ae:e9:c3:35:50:fd:36:5a:
                    d9:ad:df:98:e6:a0:47:e1:40:92:bd:46:bf:30:a0:
                    fc:e6:89:d9:1e:68:eb:ff:ec:03:1a:30:90:44:f1:
                    c9:6e:2e:55:c3:a1:36:88:b2:e2:40:b2:47:a8:71:
                    1c:ce:49:56:81:df:e5:ab:4b:f0:c9:54:fd:13:cb:
                    3a:b4:a3:86:41:4f:47:eb:bd:6b:76:21:65:bb:0f:
                    8e:61:f1:ab:05:ce:bc:87:1b:33:fb:85:39:49:52:
                    63:f8:0d:df:3b:4e:37:04:1e:b1:20:a0:55:13:43:
                    c0:98:d7:9e:02:af:71:08:48:85:7a:d4:16:4e:79:
                    8d:e7:26:97:4e:e0:c7:c4:4a:e8:25:da:9a:9e:c2:
                    c0:a9:a1:76:19:fd:b3:2b:18:e8:b7:83:3d:55:e9:
                    01:19:4b:5c:0e:5c:a0:b4:5a:70:2e:be:ed:27:bb:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DE:A4:13:7D:1D:27:33:FC:C4:C8:4C:90:F4:6D:FE:E8:F2:35:FD
            X509v3 Authority Key Identifier:
                keyid:62:66:7E:00:6D:06:E8:3F:A0:8E:4E:BD:EF:AB:3B:23:FE:CF:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56PVM8sr1ANhgw8NJ6buFZK7CseWtqavQ7BoZ2H3Ssf6/0/62667E006D06E83FA08E4EBDEFAB3B23FECF4530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62667E006D06E83FA08E4EBDEFAB3B23FECF4530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56PVM8sr1ANhgw8NJ6buFZK7CseWtqavQ7BoZ2H3Ssf6/0/3139302e38392e39362e302f32322d3332203d3e20323730333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:94:0e:be:1c:e8:49:c3:b0:da:a6:83:63:1a:a8:5a:4e:
         2d:42:68:93:02:ea:03:5e:f1:17:83:05:97:e5:44:98:5d:88:
         b1:13:5e:1d:6b:9e:5f:ff:60:23:0f:6c:3e:9f:1f:82:4d:96:
         ce:ec:f8:a3:0b:7e:f7:c3:e6:b0:2a:a1:c2:84:41:a3:ce:8d:
         9d:44:bd:45:20:99:b6:f9:3d:81:80:24:8b:5c:ba:e1:f7:07:
         da:7b:31:2e:56:a7:7a:df:16:16:cb:64:7b:d7:43:fa:b5:d1:
         8f:3c:0f:f6:36:a9:c1:1e:8a:7a:b9:f4:9e:b2:b8:a3:2f:06:
         77:b1:03:de:82:49:89:de:70:96:70:3a:99:f1:a7:2e:6d:a6:
         78:f8:52:65:aa:61:f6:c1:aa:46:c3:38:54:a1:b1:4a:0e:b3:
         42:c9:df:f2:2d:24:a0:59:de:54:ae:f0:8d:1c:fa:dd:60:b0:
         d6:b9:8b:31:93:41:c2:10:65:4b:6d:58:6a:99:7b:d2:59:09:
         46:34:bd:2e:ad:19:43:0e:0e:b9:fa:6c:4c:6e:70:28:b4:91:
         e0:11:4e:03:36:7d:54:bf:c5:df:e4:f0:07:90:24:a0:f2:87:
         97:2f:26:29:4a:57:f7:a1:50:73:24:5c:98:57:7c:d4:2c:90:
         14:8d:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:15 2026 by rpki-client