This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa
File:                     3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa (raw, json)
Hash identifier:          qlcyB7/XRBRtPh4jauaGm3CMcWAxyzA/DC3hsN5yByU=
Subject key identifier:   33:54:8A:DF:84:B4:91:90:5D:58:D7:CA:BC:E8:C7:F5:43:6E:03:D3
Certificate issuer:       /CN=843E46AA209E75F9302824E3938E138395B4B3A9
Certificate serial:       716A4D61A2F2BBFC30E010A525331002C5BF59E6
Authority key identifier: 84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa
Signing time:             Mon 05 Jan 2026 22:15:23 +0000
ROA not before:           Mon 05 Jan 2026 22:10:23 +0000
ROA not after:            Mon 04 Jan 2027 22:15:23 +0000
asID:                     264912
IP address blocks:        168.228.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl
                          rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 23:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6a:4d:61:a2:f2:bb:fc:30:e0:10:a5:25:33:10:02:c5:bf:59:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843E46AA209E75F9302824E3938E138395B4B3A9
        Validity
            Not Before: Jan  5 22:10:23 2026 GMT
            Not After : Jan  4 22:15:23 2027 GMT
        Subject: CN=33548ADF84B491905D58D7CABCE8C7F5436E03D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:93:49:bc:82:69:8c:56:00:b1:f7:a4:22:4c:
                    c7:54:d6:df:4c:3e:ab:ef:a9:04:74:f3:d5:8e:64:
                    01:1e:2e:30:e9:59:a4:29:e2:5a:5a:4b:af:0e:4a:
                    09:42:2a:b2:ae:03:bd:37:27:9f:ab:aa:19:c4:6e:
                    48:a0:3c:06:df:a2:07:4d:2f:c2:ff:89:ea:c5:00:
                    f5:e7:e9:16:72:aa:ac:2e:d8:12:96:40:dc:2d:a3:
                    1f:70:ed:87:41:cd:33:3a:87:32:04:49:eb:8a:7c:
                    d2:75:0b:3a:72:88:86:d8:e6:26:3f:be:83:ec:b5:
                    8c:64:a3:ac:92:dc:ed:be:4a:07:d0:03:6c:41:9e:
                    f6:92:d3:19:a5:9a:7f:61:ad:23:fb:19:d9:5b:c0:
                    ea:47:9b:c2:f3:80:64:4a:36:32:3d:5c:d6:4e:dc:
                    65:89:fd:4e:ee:07:96:91:23:5e:a0:e8:4c:76:31:
                    f9:51:dd:1e:50:1e:c4:29:a9:bc:34:74:dc:4f:fa:
                    e5:c3:6e:be:20:b7:b9:20:57:c8:dd:65:f6:c1:96:
                    ef:b5:5c:6f:f2:c1:9e:48:4a:77:f9:29:aa:b7:d3:
                    d7:4b:53:13:31:9a:5a:98:15:fe:d2:1c:8f:76:9c:
                    ce:91:ba:24:22:29:50:c3:37:db:35:f9:65:68:66:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:54:8A:DF:84:B4:91:90:5D:58:D7:CA:BC:E8:C7:F5:43:6E:03:D3
            X509v3 Authority Key Identifier:
                keyid:84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:aa:ff:c5:20:6c:3a:93:43:2b:b0:2d:cd:f9:0e:4e:20:ee:
         ca:80:3f:ce:69:33:c9:05:2b:f7:92:34:df:e2:80:26:13:ce:
         a0:30:87:82:09:63:7c:4f:60:39:54:4c:1c:36:89:ea:4d:4f:
         11:6c:5b:3f:73:e0:86:3b:bc:9c:7a:97:47:7d:eb:35:67:72:
         9c:fc:7e:ed:49:8d:33:be:02:0d:2a:90:07:a9:58:78:09:db:
         a2:a4:28:4a:2f:f6:24:5e:3e:a3:23:fd:88:c8:b2:f1:91:13:
         81:f7:54:9b:d1:50:2e:f1:ef:98:da:0f:e3:5c:56:4b:d6:46:
         bb:c5:62:54:30:25:f7:19:42:00:db:3a:84:75:84:52:4b:80:
         65:c4:ba:4d:9d:8c:da:fe:ed:21:66:75:40:b5:0a:b1:a9:ee:
         5e:03:9a:8c:ab:ee:37:7a:53:b6:e5:21:43:e0:00:88:89:12:
         70:23:91:67:f7:db:d2:02:8b:39:8f:52:78:a1:ad:c0:70:3d:
         63:a4:5a:72:e9:b6:ad:4e:5e:42:f8:04:40:b7:48:96:28:d4:
         e6:c3:05:70:1b:6f:2e:e3:1f:92:a1:32:a4:ec:0f:55:0a:bf:
         e6:d7:a6:37:55:ef:8b:7d:38:60:78:84:ec:29:0e:38:2e:d3:
         db:63:d5:67
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcWpNYaLyu/ww4BClJTMQAsW/WeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQzRTQ2QUEyMDlFNzVGOTMwMjgyNEUzOTM4RTEzODM5
NUI0QjNBOTAeFw0yNjAxMDUyMjEwMjNaFw0yNzAxMDQyMjE1MjNaMDMxMTAvBgNV
BAMTKDMzNTQ4QURGODRCNDkxOTA1RDU4RDdDQUJDRThDN0Y1NDM2RTAzRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbk0m8gmmMVgCx96QiTMdU1t9M
PqvvqQR089WOZAEeLjDpWaQp4lpaS68OSglCKrKuA703J5+rqhnEbkigPAbfogdN
L8L/ierFAPXn6RZyqqwu2BKWQNwtox9w7YdBzTM6hzIESeuKfNJ1CzpyiIbY5iY/
voPstYxko6yS3O2+SgfQA2xBnvaS0xmlmn9hrSP7GdlbwOpHm8LzgGRKNjI9XNZO
3GWJ/U7uB5aRI16g6Ex2MflR3R5QHsQpqbw0dNxP+uXDbr4gt7kgV8jdZfbBlu+1
XG/ywZ5ISnf5Kaq309dLUxMxmlqYFf7SHI92nM6RuiQiKVDDN9s1+WVoZh1BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUM1SK34S0kZBdWNfKvOjH9UNuA9MwHwYDVR0j
BBgwFoAUhD5GqiCedfkwKCTjk44Tg5W0s6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjkyZFZRUEN0aXBXbmRXNDJtVWdBYVdiQW02cm9vSm5nS2c4cGtjZHR5
aHAvMC84NDNFNDZBQTIwOUU3NUY5MzAyODI0RTM5MzhFMTM4Mzk1QjRCM0E5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0M0U0NkFBMjA5RTc1Rjkz
MDI4MjRFMzkzOEUxMzgzOTVCNEIzQTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5MmRWUVBDdGlwV25kVzQybVVnQWFXYkFtNnJvb0puZ0tnOHBrY2R0eWhwLzAv
MzEzNjM4MmUzMjMyMzgyZTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzOTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo5EAwDQYJKoZIhvcNAQELBQADggEBAGyq/8Ug
bDqTQyuwLc35Dk4g7sqAP85pM8kFK/eSNN/igCYTzqAwh4IJY3xPYDlUTBw2iepN
TxFsWz9z4IY7vJx6l0d96zVncpz8fu1JjTO+Ag0qkAepWHgJ26KkKEov9iRePqMj
/YjIsvGRE4H3VJvRUC7x75jaD+NcVkvWRrvFYlQwJfcZQgDbOoR1hFJLgGXEuk2d
jNr+7SFmdUC1CrGp7l4Dmoyr7jd6U7blIUPgAIiJEnAjkWf329ICizmPUnihrcBw
PWOkWnLptq1OXkL4BEC3SJYo1ObDBXAbby7jH5KhMqTsD1UKv+bXpjdV74t9OGB4
hOwpDjgu09tj1Wc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:42:35 2026 by rpki-client