This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3133382e3132312e3230382e302f32322d3234203d3e20323635333135.roa
File:                     3133382e3132312e3230382e302f32322d3234203d3e20323635333135.roa (raw, json)
Hash identifier:          ej1bquQYsS2bNscIvx/U/bIicK/70cAMW+ATxHQxljw=
Subject key identifier:   F9:39:BB:CB:3E:E8:F3:A5:B8:F4:D2:34:D2:AA:EE:ED:D2:B9:AC:D6
Certificate issuer:       /CN=9A59E428DA1E76D55074AE4987DC8EDF84F610B6
Certificate serial:       4031E23396E7646EC95FC2D2273DE0D54FF252D7
Authority key identifier: 9A:59:E4:28:DA:1E:76:D5:50:74:AE:49:87:DC:8E:DF:84:F6:10:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3133382e3132312e3230382e302f32322d3234203d3e20323635333135.roa
Signing time:             Sun 18 Jan 2026 17:34:22 +0000
ROA not before:           Sun 18 Jan 2026 17:29:22 +0000
ROA not after:            Sun 17 Jan 2027 17:34:22 +0000
asID:                     265315
IP address blocks:        138.121.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.crl
                          rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:31:e2:33:96:e7:64:6e:c9:5f:c2:d2:27:3d:e0:d5:4f:f2:52:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A59E428DA1E76D55074AE4987DC8EDF84F610B6
        Validity
            Not Before: Jan 18 17:29:22 2026 GMT
            Not After : Jan 17 17:34:22 2027 GMT
        Subject: CN=F939BBCB3EE8F3A5B8F4D234D2AAEEEDD2B9ACD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b4:2b:21:a3:dd:24:6f:ea:5d:d9:5a:11:e5:
                    88:1d:a3:a9:37:ef:c1:5b:d0:eb:bf:7c:1b:af:1d:
                    7b:95:cb:9a:3c:59:c2:ef:0a:0c:ca:a8:22:09:67:
                    83:fb:81:1d:9a:00:0f:35:02:8a:8e:ec:d3:b7:28:
                    d9:7e:f4:3a:26:cb:a2:b3:1e:2a:c8:1e:f1:b5:e3:
                    2c:97:e0:66:77:bb:6d:e4:6c:c9:6e:3c:fc:b1:ed:
                    c1:44:05:0c:01:b4:5f:a8:37:b5:47:c2:c9:dd:a0:
                    74:d3:ce:1b:a7:07:4d:4e:ff:50:41:2c:b0:b7:1e:
                    50:8d:a6:a5:28:a3:1f:72:d3:59:24:dc:e6:35:22:
                    e5:65:16:31:f4:71:c7:cb:43:15:f3:d3:83:02:f9:
                    86:92:7e:76:42:7f:27:60:55:b7:b2:5e:b5:e9:e9:
                    28:72:b9:b6:9c:67:59:cb:e6:da:d8:ec:8b:42:46:
                    55:70:80:48:78:92:db:39:ef:3e:8b:e2:0c:7d:f8:
                    72:55:ac:73:9d:a1:7f:a0:1f:16:38:a2:41:92:d1:
                    9b:47:d3:3d:30:d9:36:af:d5:dd:99:05:1b:aa:9d:
                    97:c6:3a:bf:36:1e:cb:75:1d:9e:df:11:d5:4b:eb:
                    af:73:98:91:fe:be:57:0b:56:f7:fe:a9:3a:83:64:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:BB:CB:3E:E8:F3:A5:B8:F4:D2:34:D2:AA:EE:ED:D2:B9:AC:D6
            X509v3 Authority Key Identifier:
                keyid:9A:59:E4:28:DA:1E:76:D5:50:74:AE:49:87:DC:8E:DF:84:F6:10:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3133382e3132312e3230382e302f32322d3234203d3e20323635333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:19:8d:8d:02:9b:e5:b9:e2:8e:62:5d:9b:ce:7b:7f:16:
         35:d7:d8:f2:ab:54:a4:f9:a9:67:bb:05:8b:0a:4c:38:04:8f:
         59:56:34:bf:ce:ab:b9:44:8d:38:07:2b:e3:e9:b1:4f:6a:ec:
         f1:9d:18:65:24:a4:55:78:e2:79:31:13:73:f1:4f:aa:27:13:
         ed:4c:7a:43:91:46:9c:70:49:6d:00:93:c1:ec:1d:63:94:40:
         57:93:85:98:ec:28:67:0d:a8:e1:e9:88:73:3d:1d:70:a7:72:
         2f:e9:74:44:7e:17:94:23:cc:59:39:cd:72:09:4f:27:71:f3:
         7e:1a:83:10:13:c2:6f:5b:33:2b:d6:3c:2d:e7:5d:48:b0:f1:
         cb:df:48:e2:27:2f:45:4f:bb:e3:fa:c6:a3:d0:42:34:ec:2f:
         6a:b1:34:0f:00:75:69:4b:7b:e9:b9:6a:99:9e:73:e0:a4:69:
         a6:c4:a6:e2:e4:27:58:3a:17:95:40:34:17:f7:17:89:ed:82:
         8d:af:82:6d:cb:12:6d:2d:bd:f7:ee:c3:ef:09:21:c2:54:40:
         2f:95:1a:ba:6a:35:2c:ce:46:50:47:92:2f:26:84:e6:b1:5c:
         64:da:1e:eb:60:0b:54:34:9e:8d:3e:ae:13:99:63:ed:fc:69:
         8e:b4:fc:41
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQDHiM5bnZG7JX8LSJz3g1U/yUtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1OUU0MjhEQTFFNzZENTUwNzRBRTQ5ODdEQzhFREY4
NEY2MTBCNjAeFw0yNjAxMTgxNzI5MjJaFw0yNzAxMTcxNzM0MjJaMDMxMTAvBgNV
BAMTKEY5MzlCQkNCM0VFOEYzQTVCOEY0RDIzNEQyQUFFRUVERDJCOUFDRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStCsho90kb+pd2VoR5Ygdo6k3
78Fb0Ou/fBuvHXuVy5o8WcLvCgzKqCIJZ4P7gR2aAA81AoqO7NO3KNl+9Domy6Kz
HirIHvG14yyX4GZ3u23kbMluPPyx7cFEBQwBtF+oN7VHwsndoHTTzhunB01O/1BB
LLC3HlCNpqUoox9y01kk3OY1IuVlFjH0ccfLQxXz04MC+YaSfnZCfydgVbeyXrXp
6ShyubacZ1nL5trY7ItCRlVwgEh4kts57z6L4gx9+HJVrHOdoX+gHxY4okGS0ZtH
0z0w2Tav1d2ZBRuqnZfGOr82Hst1HZ7fEdVL669zmJH+vlcLVvf+qTqDZHjHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+Tm7yz7o86W49NI00qru7dK5rNYwHwYDVR0j
BBgwFoAUmlnkKNoedtVQdK5Jh9yO34T2ELYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUwzM0M5d0FDblRtcXplN2NIVm9rNzlVSFgzTkI1NXhVc1hhYmp4cUhz
ZmIvMC85QTU5RTQyOERBMUU3NkQ1NTA3NEFFNDk4N0RDOEVERjg0RjYxMEI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBNTlFNDI4REExRTc2RDU1
MDc0QUU0OTg3REM4RURGODRGNjEwQjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMMzNDOXdBQ25UbXF6ZTdjSFZvazc5VUhYM05CNTV4VXNYYWJqeHFIc2ZiLzAv
MzEzMzM4MmUzMTMyMzEyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop50DANBgkqhkiG9w0BAQsFAAOCAQEAK8EZ
jY0Cm+W54o5iXZvOe38WNdfY8qtUpPmpZ7sFiwpMOASPWVY0v86ruUSNOAcr4+mx
T2rs8Z0YZSSkVXjieTETc/FPqicT7Ux6Q5FGnHBJbQCTwewdY5RAV5OFmOwoZw2o
4emIcz0dcKdyL+l0RH4XlCPMWTnNcglPJ3HzfhqDEBPCb1szK9Y8LeddSLDxy99I
4icvRU+74/rGo9BCNOwvarE0DwB1aUt76blqmZ5z4KRppsSm4uQnWDoXlUA0F/cX
ie2Cja+CbcsSbS299+7D7wkhwlRAL5Uaumo1LM5GUEeSLyaE5rFcZNoe62ALVDSe
jT6uE5lj7fxpjrT8QQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:31:20 2026 by rpki-client