This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/3136342e3136332e3130352e302f32342d3234203d3e20323636393631.roa
File:                     3136342e3136332e3130352e302f32342d3234203d3e20323636393631.roa (raw, json)
Hash identifier:          KTQqtQcgbA8p5ixe8JP0wf7DPCi4Nx5dbFTx95Hru0A=
Subject key identifier:   41:D8:8A:82:9F:DC:D4:24:9F:7A:C9:EE:9E:22:C0:BD:5F:E9:1A:47
Certificate issuer:       /CN=068991FC2FF257F34E828050A9B08B36CB649BE0
Certificate serial:       73303BD432B0341A3770D448C32B210E848F7AFE
Authority key identifier: 06:89:91:FC:2F:F2:57:F3:4E:82:80:50:A9:B0:8B:36:CB:64:9B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/3136342e3136332e3130352e302f32342d3234203d3e20323636393631.roa
Signing time:             Fri 23 Jan 2026 19:21:11 +0000
ROA not before:           Fri 23 Jan 2026 19:16:11 +0000
ROA not after:            Fri 22 Jan 2027 19:21:11 +0000
asID:                     266961
IP address blocks:        164.163.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.crl
                          rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:30:3b:d4:32:b0:34:1a:37:70:d4:48:c3:2b:21:0e:84:8f:7a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068991FC2FF257F34E828050A9B08B36CB649BE0
        Validity
            Not Before: Jan 23 19:16:11 2026 GMT
            Not After : Jan 22 19:21:11 2027 GMT
        Subject: CN=41D88A829FDCD4249F7AC9EE9E22C0BD5FE91A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:37:ec:87:4f:67:00:4c:f5:5f:eb:8b:57:
                    f9:26:73:30:a5:9e:bb:d0:4d:93:9f:86:eb:74:2f:
                    a0:b8:90:4a:fd:02:ca:c6:16:ad:37:d2:b2:ff:3d:
                    52:1d:b9:5d:52:5a:c0:e4:c2:99:cc:be:cc:ca:fa:
                    bc:d1:4f:92:57:35:6a:87:06:18:8e:03:33:9b:a1:
                    f6:57:40:40:4f:c8:72:6c:c4:b8:76:c8:03:af:7f:
                    5c:83:eb:17:23:9f:7d:67:1f:59:ea:ef:86:b2:e0:
                    df:02:66:38:63:ba:d1:06:18:64:04:41:6e:7f:88:
                    c9:20:23:7c:c9:e4:83:09:e4:48:a9:a5:57:e7:32:
                    68:22:97:4b:a6:14:cf:dc:de:7a:d7:3b:08:36:59:
                    0a:22:eb:40:bf:51:f0:c3:4c:8a:1a:26:94:4d:31:
                    55:c3:ea:3d:4f:d3:e3:3d:53:79:a9:ab:8f:e1:38:
                    eb:cd:b7:79:83:4e:79:1a:15:ec:33:61:fc:43:b4:
                    41:7e:f3:53:00:8a:4c:6f:8a:22:11:a8:68:67:86:
                    48:a0:c5:70:89:c5:3c:c0:3b:85:ce:fb:b7:5f:23:
                    a8:60:89:23:57:e0:26:9b:ca:2c:3f:4a:17:95:43:
                    68:83:85:ba:f9:30:c4:fe:3c:7a:96:f9:76:5e:2d:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D8:8A:82:9F:DC:D4:24:9F:7A:C9:EE:9E:22:C0:BD:5F:E9:1A:47
            X509v3 Authority Key Identifier:
                keyid:06:89:91:FC:2F:F2:57:F3:4E:82:80:50:A9:B0:8B:36:CB:64:9B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/3136342e3136332e3130352e302f32342d3234203d3e20323636393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ab:04:42:3d:70:a9:a9:f6:b1:3d:ab:19:23:d5:ca:11:2c:
         86:2e:41:f3:c4:32:ec:44:b0:08:9c:56:64:38:7d:00:21:fc:
         39:8b:eb:4c:ed:a7:63:25:8a:75:45:57:c0:53:2f:63:8e:7e:
         e7:3f:3b:cc:37:e7:71:7a:f2:07:2e:73:dd:09:fe:61:66:7e:
         46:bf:dd:c1:37:b1:d5:ed:8c:8e:01:7e:8f:62:27:51:4c:4e:
         e3:33:eb:78:b1:84:12:9c:9c:aa:84:87:ab:b9:0c:2b:6e:10:
         10:aa:7a:e7:46:9f:57:bc:21:60:4f:07:0e:40:dc:14:44:a8:
         47:9b:89:a4:a3:cc:b2:43:8d:4d:33:c9:49:f9:b5:55:cd:9d:
         4b:5e:3d:91:c0:78:9a:45:c6:1f:7b:24:32:7c:dd:5e:13:99:
         ea:b2:e8:8e:1b:2c:70:e5:30:f3:e7:8b:aa:c7:02:b9:33:3d:
         7e:80:3d:9d:b1:9f:62:dd:6c:4a:78:b0:a3:82:95:e4:7d:0a:
         77:14:15:71:34:41:50:af:a1:e3:1e:91:87:d7:22:a4:1a:30:
         fe:6b:a7:d0:aa:af:5c:42:86:b8:b8:2b:06:72:27:69:84:74:
         bd:41:76:17:d3:1b:81:1a:94:23:6d:4b:d2:e6:98:e0:5a:01:
         31:4e:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:25:13 2026 by rpki-client