This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3133382e3132312e3132382e302f32322d3332203d3e20323634323934.roa
File:                     3133382e3132312e3132382e302f32322d3332203d3e20323634323934.roa (raw, json)
Hash identifier:          MJvvXtQG/YXZFiUJ7vqsRUS9hMvNgdCkp2YEJlGm5uo=
Subject key identifier:   44:3A:7C:24:A1:C4:53:89:20:D8:99:98:44:CB:22:74:6A:D6:89:44
Certificate issuer:       /CN=134F37BD7F0154E037FB50124BEEA50F6B2BFC37
Certificate serial:       12CC47B3132A7FD7D343BFE1BEE8CF85D6ED84AF
Authority key identifier: 13:4F:37:BD:7F:01:54:E0:37:FB:50:12:4B:EE:A5:0F:6B:2B:FC:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3133382e3132312e3132382e302f32322d3332203d3e20323634323934.roa
Signing time:             Thu 15 Jan 2026 13:29:42 +0000
ROA not before:           Thu 15 Jan 2026 13:24:42 +0000
ROA not after:            Thu 14 Jan 2027 13:29:42 +0000
asID:                     264294
IP address blocks:        138.121.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.crl
                          rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cc:47:b3:13:2a:7f:d7:d3:43:bf:e1:be:e8:cf:85:d6:ed:84:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134F37BD7F0154E037FB50124BEEA50F6B2BFC37
        Validity
            Not Before: Jan 15 13:24:42 2026 GMT
            Not After : Jan 14 13:29:42 2027 GMT
        Subject: CN=443A7C24A1C4538920D8999844CB22746AD68944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:84:08:7f:8a:e1:3d:2c:db:2b:1f:47:82:
                    35:6d:54:db:04:a0:c8:60:0f:0a:8c:f5:84:23:4a:
                    10:dc:e0:ec:82:cb:18:43:5c:f9:64:9b:dd:3b:77:
                    d3:47:d8:50:34:e8:58:a0:d7:6d:5b:ae:8b:f9:f2:
                    fc:0f:04:59:04:57:6e:45:62:bd:03:0e:d2:0a:9c:
                    9a:e2:18:30:17:a0:b9:7b:bf:5b:f3:30:fa:5b:d0:
                    b8:e8:ef:b0:8d:2f:bc:95:86:09:e5:18:61:70:6e:
                    77:f5:97:60:e2:4d:47:2a:a1:d3:9d:b9:5d:00:47:
                    ae:fd:b7:ed:0d:45:ca:10:53:22:91:51:ef:dd:85:
                    64:90:a0:0a:e8:aa:4d:50:83:c5:60:4f:84:2b:87:
                    8c:e9:a9:01:b4:87:de:5f:a1:fd:d1:18:72:dd:e8:
                    55:6a:15:33:8d:72:d7:30:4d:0c:30:28:a3:d6:ba:
                    69:73:2c:1d:de:8f:bd:b8:75:70:c6:1b:0a:95:ec:
                    6c:b0:40:48:3c:c4:ce:0d:fa:81:de:a7:a3:0e:db:
                    66:a4:3f:a5:ec:62:b8:5b:a4:7b:c6:2e:ba:82:ec:
                    cf:d5:18:d2:5b:41:8a:61:93:4a:c8:0b:4a:bb:42:
                    d0:41:89:f3:75:39:43:96:a7:1f:62:0d:87:8d:cc:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3A:7C:24:A1:C4:53:89:20:D8:99:98:44:CB:22:74:6A:D6:89:44
            X509v3 Authority Key Identifier:
                keyid:13:4F:37:BD:7F:01:54:E0:37:FB:50:12:4B:EE:A5:0F:6B:2B:FC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3133382e3132312e3132382e302f32322d3332203d3e20323634323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:ad:6b:c6:31:43:6d:33:a3:6c:a4:59:a0:83:8a:cf:01:
         c5:36:83:8d:14:8f:36:cf:1d:52:d2:ca:0d:50:eb:c2:19:19:
         9b:7b:cd:bb:18:3e:8d:99:00:ca:e1:4f:87:c5:59:b1:dc:83:
         d2:01:b1:0c:90:50:fb:16:67:77:fb:9d:5e:2a:16:88:82:e6:
         ba:69:9c:08:35:dc:83:4c:ed:d8:8b:2b:da:69:78:cb:72:aa:
         2b:40:81:c8:f2:fc:5f:d4:d7:b6:25:99:e8:7f:ba:da:e3:b7:
         4b:5e:25:76:f8:d8:c4:ee:40:5f:5d:09:46:36:66:20:ed:d1:
         8d:8d:5d:10:b3:8f:ed:e5:51:b4:af:4b:1a:2c:91:fb:d8:b5:
         a5:2b:7f:02:f9:b0:a8:84:93:e4:fa:9a:32:f5:d2:8f:31:b2:
         b5:ec:01:f7:4c:ea:01:ab:63:65:96:c1:b8:4e:0e:47:a1:27:
         a1:ee:a1:d7:20:02:73:b4:39:eb:d8:4f:78:ca:7d:44:ca:b6:
         75:82:4b:90:33:0d:7c:97:f5:af:1e:d5:5e:4b:81:a7:36:d5:
         a5:23:2c:a6:fd:e7:7b:38:e8:93:7f:60:b2:c4:ec:6f:70:bb:
         40:c9:1c:8d:ba:be:ea:3f:e7:9c:1c:74:f3:0d:c0:36:d7:45:
         ae:97:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:51:40 2026 by rpki-client