This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/3139302e3132332e3230342e302f32322d3332203d3e20323636323134.roa
File:                     3139302e3132332e3230342e302f32322d3332203d3e20323636323134.roa (raw, json)
Hash identifier:          lGvpi58HhfarFU4vGCSTYCWI8OOFswjDvsBPqVjjEv0=
Subject key identifier:   E0:3A:8B:36:11:C8:56:FE:84:F6:48:D9:93:4B:AD:7D:7D:E8:E4:CD
Certificate issuer:       /CN=C0FC918D9660D5EA6D1D6941F6E21C9277A230FB
Certificate serial:       4241CA5577FDC921406C2040B2F60C122D847F60
Authority key identifier: C0:FC:91:8D:96:60:D5:EA:6D:1D:69:41:F6:E2:1C:92:77:A2:30:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/3139302e3132332e3230342e302f32322d3332203d3e20323636323134.roa
Signing time:             Mon 05 Jan 2026 18:50:38 +0000
ROA not before:           Mon 05 Jan 2026 18:45:38 +0000
ROA not after:            Mon 04 Jan 2027 18:50:38 +0000
asID:                     266214
IP address blocks:        190.123.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.crl
                          rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:41:ca:55:77:fd:c9:21:40:6c:20:40:b2:f6:0c:12:2d:84:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0FC918D9660D5EA6D1D6941F6E21C9277A230FB
        Validity
            Not Before: Jan  5 18:45:38 2026 GMT
            Not After : Jan  4 18:50:38 2027 GMT
        Subject: CN=E03A8B3611C856FE84F648D9934BAD7D7DE8E4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:f1:d3:eb:30:62:43:3e:ef:33:8b:7a:1e:
                    bc:67:1f:a3:9d:f7:7d:84:3f:12:fa:be:10:31:ba:
                    b7:c4:ef:3b:66:ec:ad:1a:10:f7:11:37:b4:dc:5d:
                    be:d9:61:fb:3d:d1:f3:25:ef:cc:7a:2d:f3:3d:d9:
                    32:83:a0:93:38:b6:f1:3e:c0:2c:a2:21:5e:9a:fa:
                    17:e8:09:21:9c:d6:6c:d3:83:c3:82:75:38:ef:c2:
                    96:9e:c5:7d:0a:03:48:f6:56:15:33:72:3a:3a:28:
                    c9:55:8a:05:fb:eb:32:03:ae:7b:99:c8:77:12:2d:
                    63:af:63:af:ac:09:45:d2:9b:d7:a4:d6:08:6a:5a:
                    87:bb:f1:27:75:1b:44:9f:b3:16:35:c6:a2:4b:c7:
                    4b:9c:9e:2e:fb:7f:70:11:0a:d5:43:a1:af:77:54:
                    34:5e:f8:0c:f9:79:ce:ba:d9:c9:1b:7f:c7:58:2c:
                    d5:ee:36:b6:4e:b3:a9:86:ef:ae:c0:1b:70:bc:b1:
                    8b:f4:6b:94:da:10:d8:59:41:3e:3e:69:1c:c4:ad:
                    18:a8:18:96:42:a3:ed:4a:82:14:3e:d8:e4:46:f2:
                    23:21:9a:38:9f:5b:0b:aa:a2:91:6b:11:d4:96:f3:
                    58:a9:1c:3b:77:a0:97:03:54:4c:c1:15:c4:2e:81:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:8B:36:11:C8:56:FE:84:F6:48:D9:93:4B:AD:7D:7D:E8:E4:CD
            X509v3 Authority Key Identifier:
                keyid:C0:FC:91:8D:96:60:D5:EA:6D:1D:69:41:F6:E2:1C:92:77:A2:30:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/3139302e3132332e3230342e302f32322d3332203d3e20323636323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:86:bc:a6:b5:db:25:02:5e:3f:14:3a:58:6d:c5:5e:ed:8b:
         19:23:73:e7:ff:65:9c:15:70:c6:f6:4c:0d:c5:0e:bd:de:10:
         b0:b2:54:27:58:f1:51:d8:9a:25:be:7e:e9:bb:3f:51:5e:1e:
         b7:8f:c5:6f:81:18:eb:5c:e4:7b:d3:d5:1d:13:b9:93:cb:9f:
         5c:81:5e:50:1c:aa:6e:d0:cc:b9:db:78:6d:00:2d:0a:f7:c1:
         3c:55:3d:a5:db:ae:01:58:3e:fe:a1:e4:d3:30:17:85:e6:bb:
         70:15:ca:04:66:28:9f:6b:50:ad:0d:ae:85:ff:f7:b5:2a:34:
         dc:5b:81:88:b5:3e:5d:e8:d5:83:cc:b0:a5:1d:bd:01:75:b9:
         c5:ad:70:98:76:f6:41:30:bf:90:0a:79:1d:c1:55:3c:02:34:
         f4:fc:30:03:e7:e2:7f:45:6e:34:bb:3e:cb:0c:8d:d5:10:95:
         0b:57:e0:72:9e:e5:2d:4d:29:34:40:43:a6:78:79:bb:3d:17:
         12:80:4f:e1:38:e4:e2:bc:74:80:da:f0:12:18:72:5e:22:26:
         51:47:08:df:95:a2:b2:df:28:62:23:b6:0a:0f:85:dd:65:78:
         8d:a6:ed:d1:ff:d2:f4:b6:e3:4d:de:3d:f4:1d:f5:2e:0c:8c:
         d7:96:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:23 2026 by rpki-client