This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3136382e3139352e3230382e302f32332d3332203d3e20323635343332.roa
File:                     3136382e3139352e3230382e302f32332d3332203d3e20323635343332.roa (raw, json)
Hash identifier:          EGWFFskX1peJybMFEzLZZ43MWjsy15b5RQ3lVUZGbEk=
Subject key identifier:   C3:2F:9F:2B:FB:34:FE:9F:81:B6:66:AD:8B:85:80:CD:39:09:F8:C3
Certificate issuer:       /CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C
Certificate serial:       67B7544B2F3772EFD7E2C72245F3140E82089F13
Authority key identifier: 2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3136382e3139352e3230382e302f32332d3332203d3e20323635343332.roa
Signing time:             Mon 05 Jan 2026 14:45:27 +0000
ROA not before:           Mon 05 Jan 2026 14:40:27 +0000
ROA not after:            Mon 04 Jan 2027 14:45:27 +0000
asID:                     265432
IP address blocks:        168.195.208.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl
                          rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b7:54:4b:2f:37:72:ef:d7:e2:c7:22:45:f3:14:0e:82:08:9f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C
        Validity
            Not Before: Jan  5 14:40:27 2026 GMT
            Not After : Jan  4 14:45:27 2027 GMT
        Subject: CN=C32F9F2BFB34FE9F81B666AD8B8580CD3909F8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:3c:08:99:fc:df:8b:2a:0d:71:6c:58:be:
                    8d:04:15:80:bd:ae:9f:f7:f9:2f:de:17:c7:3c:01:
                    ce:05:9b:21:75:51:f4:c0:a1:35:39:fd:4a:0d:ca:
                    70:6c:a5:8d:34:0b:01:bd:48:b7:66:3b:7b:fb:f2:
                    a6:20:f3:01:33:c1:60:df:84:2d:70:59:7a:9f:bb:
                    0a:b8:65:e0:b9:1f:61:b9:0e:cb:27:8f:11:68:75:
                    b4:0c:46:4d:ef:31:dd:69:f5:eb:09:27:a1:7b:cb:
                    36:fb:b6:46:64:31:bf:a9:74:70:3d:44:dc:30:6b:
                    ec:97:01:68:92:ab:9b:32:08:0d:c4:81:34:6b:8c:
                    70:81:88:82:47:4f:4b:e5:46:fc:d3:e6:ef:33:9f:
                    38:45:40:44:41:82:c6:97:19:9f:eb:f2:48:74:fe:
                    ba:ed:04:35:66:71:db:13:68:01:32:1b:ac:0a:f4:
                    04:e7:e8:d1:d7:07:8b:0a:f7:a3:2c:55:a2:6c:16:
                    15:eb:8e:0c:3e:90:84:b0:fb:6d:64:69:1c:75:7a:
                    2f:c0:5c:0c:64:4f:46:1c:13:0d:4d:d6:56:95:f5:
                    7a:e7:bc:c9:3a:7e:1a:a9:a2:02:50:a5:4c:f4:4e:
                    8e:ca:ef:47:62:7b:db:c9:9d:d5:03:9b:14:75:9f:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2F:9F:2B:FB:34:FE:9F:81:B6:66:AD:8B:85:80:CD:39:09:F8:C3
            X509v3 Authority Key Identifier:
                keyid:2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3136382e3139352e3230382e302f32332d3332203d3e20323635343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:0c:a6:e5:bb:a5:ec:46:24:83:02:f6:82:a5:85:c1:00:9a:
         a6:0e:9f:cf:9f:75:b4:8c:01:b8:96:ba:49:1d:04:bc:b1:a8:
         af:53:74:91:0b:35:1a:a4:bc:f4:e9:ca:72:ef:76:1f:ce:1a:
         be:49:6f:dc:ba:9a:dd:97:48:af:28:bb:3e:d0:19:b0:61:31:
         75:21:11:a5:66:00:4a:f2:13:18:06:68:16:7f:aa:4b:d4:19:
         dc:3e:7f:00:07:06:b9:97:8b:cc:22:9e:bc:68:8b:43:ab:09:
         b5:2e:27:a0:65:c2:c3:84:92:bc:77:06:d7:7b:94:f5:5a:78:
         db:7d:0a:e9:03:cd:bf:d8:e1:16:b1:19:f0:74:0e:e6:c2:ce:
         69:37:f3:ed:df:1f:c3:f1:ed:11:56:2d:c6:9f:2f:95:f9:31:
         9e:03:09:96:94:d2:2d:e2:ca:a4:29:63:1a:b4:f9:76:91:c3:
         d5:b1:f4:bc:07:bf:26:a4:a8:06:c8:5b:79:02:2c:eb:65:62:
         34:ff:64:2a:34:b0:c9:d7:00:77:7d:a5:b2:3a:87:6f:4e:8a:
         c0:b4:4f:64:d8:53:09:85:ac:37:a3:71:be:02:70:f6:8a:17:
         14:32:4e:1b:6d:ee:ff:0f:43:ee:85:82:ff:28:91:98:3c:f2:
         44:0c:8f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:04:00 2026 by rpki-client