This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa
File:                     3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa (raw, json)
Hash identifier:          QTkf12YIwSQ1c6fMpTUbvXU3yJxRWDHQyN0GObNbS0o=
Subject key identifier:   19:82:00:CF:D4:F0:BC:C3:A7:26:DE:A7:87:2D:A5:78:1D:C8:44:23
Certificate issuer:       /CN=30C3F67AD7202CD6EFF4D942412E7544462BF62A
Certificate serial:       4A5EDDA9CB81FA7A1F6C38A685A20CCC5A13D2B4
Authority key identifier: 30:C3:F6:7A:D7:20:2C:D6:EF:F4:D9:42:41:2E:75:44:46:2B:F6:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C3F67AD7202CD6EFF4D942412E7544462BF62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa
Signing time:             Fri 09 Jan 2026 12:25:36 +0000
ROA not before:           Fri 09 Jan 2026 12:20:36 +0000
ROA not after:            Fri 08 Jan 2027 12:25:36 +0000
asID:                     270418
IP address blocks:        190.111.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/30C3F67AD7202CD6EFF4D942412E7544462BF62A.crl
                          rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/30C3F67AD7202CD6EFF4D942412E7544462BF62A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C3F67AD7202CD6EFF4D942412E7544462BF62A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 22:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5e:dd:a9:cb:81:fa:7a:1f:6c:38:a6:85:a2:0c:cc:5a:13:d2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C3F67AD7202CD6EFF4D942412E7544462BF62A
        Validity
            Not Before: Jan  9 12:20:36 2026 GMT
            Not After : Jan  8 12:25:36 2027 GMT
        Subject: CN=198200CFD4F0BCC3A726DEA7872DA5781DC84423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:08:67:3b:33:c9:1d:51:1e:e8:8a:91:0f:7b:
                    a9:d3:68:69:6f:c6:1a:6d:63:ab:32:73:b3:11:ce:
                    2f:83:42:81:ba:62:b7:bb:c7:7d:2e:2a:57:08:0a:
                    be:45:2e:13:9d:b1:35:54:c0:2c:d8:b0:4b:e3:ca:
                    b8:1d:01:ea:09:15:83:78:55:a5:8c:0b:e9:09:9f:
                    be:ea:50:5e:bf:ff:c1:34:67:48:c9:6d:d3:b0:bf:
                    ec:e2:40:98:64:79:f4:6e:c9:5f:1e:2d:7c:d4:81:
                    e5:b4:7f:e3:5d:ff:a5:42:54:78:95:17:b4:e3:c6:
                    5a:d1:6f:dd:dc:0c:6d:cd:11:a1:5e:8f:35:ca:67:
                    ff:1f:02:44:99:18:e8:49:0d:e8:eb:24:ee:c5:14:
                    d2:ff:52:a4:78:48:4f:89:68:39:77:25:b5:88:d6:
                    47:99:1e:18:b7:03:ef:57:a6:55:ca:bb:c5:36:58:
                    c7:f5:2a:d5:33:ba:a8:b9:e1:1e:50:58:ba:c3:8e:
                    1b:d8:d4:e8:f2:71:d5:20:8b:4a:ac:2e:26:33:ca:
                    36:d7:c2:0d:81:04:9b:6e:a6:91:08:af:1e:a8:40:
                    cb:91:bd:64:9b:e9:10:5e:1e:51:97:32:e4:9c:d5:
                    be:66:00:75:9a:fe:d6:12:71:b4:c9:5b:a5:2d:98:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:82:00:CF:D4:F0:BC:C3:A7:26:DE:A7:87:2D:A5:78:1D:C8:44:23
            X509v3 Authority Key Identifier:
                keyid:30:C3:F6:7A:D7:20:2C:D6:EF:F4:D9:42:41:2E:75:44:46:2B:F6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/30C3F67AD7202CD6EFF4D942412E7544462BF62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C3F67AD7202CD6EFF4D942412E7544462BF62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:7b:11:d8:1f:cf:74:15:17:65:2a:0a:f4:60:f2:bf:b6:
         b9:3c:83:ed:a8:3a:c1:6e:68:d4:6e:88:e4:76:5d:01:e6:3f:
         33:70:8b:c5:51:26:bb:f5:6b:0e:31:5a:0e:70:28:68:d5:d0:
         3d:fe:cd:db:17:cf:8d:4d:75:6c:e1:f9:99:78:79:92:0a:e8:
         b4:22:be:ab:21:c2:45:d8:6a:86:a9:cf:09:3d:aa:0d:e0:52:
         bb:de:23:fd:c8:e8:d7:eb:47:65:4f:a3:30:b5:b2:a4:76:81:
         17:f3:ea:c2:ba:96:e4:46:e5:45:eb:72:fb:37:c7:72:24:c5:
         d3:5e:d3:64:f0:f1:4d:15:77:8c:ba:9c:a9:3e:61:fb:8d:b8:
         9b:5b:7a:69:2f:c7:aa:2f:dd:75:f5:b1:e5:14:7b:d6:ce:fe:
         06:44:d0:49:72:88:24:0c:b6:66:50:ff:9e:96:c7:7f:33:32:
         cd:a3:35:8a:72:56:2f:1e:48:4e:fe:68:57:be:30:61:31:7d:
         58:2d:8a:40:43:0f:64:8c:86:b4:7f:8f:97:01:af:31:7d:4e:
         92:58:cc:34:52:d4:5c:3f:af:d1:8b:09:87:bd:6e:53:80:6e:
         d0:40:38:f1:4d:87:24:5b:b2:bf:73:e8:87:85:09:ae:b9:70:
         43:56:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:25:51 2026 by rpki-client