This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa
File:                     3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa (raw, json)
Hash identifier:          Yrh1NQt5dfk6czpwdTkODNg8pKQk2Vdpe7nj5S0j6gc=
Subject key identifier:   09:16:50:D2:31:37:23:D5:CB:A8:0B:5B:84:F2:08:87:0B:8A:56:90
Certificate issuer:       /CN=89572AF0EBD91AB05A4587B34A48A12C52369C71
Certificate serial:       7BD9A0F9E6EF9DB47EE44A083C976C0D0C9B53FA
Authority key identifier: 89:57:2A:F0:EB:D9:1A:B0:5A:45:87:B3:4A:48:A1:2C:52:36:9C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89572AF0EBD91AB05A4587B34A48A12C52369C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa
Signing time:             Wed 07 Jan 2026 13:55:58 +0000
ROA not before:           Wed 07 Jan 2026 13:50:58 +0000
ROA not after:            Wed 06 Jan 2027 13:55:58 +0000
asID:                     270430
IP address blocks:        190.111.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/89572AF0EBD91AB05A4587B34A48A12C52369C71.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/89572AF0EBD91AB05A4587B34A48A12C52369C71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89572AF0EBD91AB05A4587B34A48A12C52369C71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d9:a0:f9:e6:ef:9d:b4:7e:e4:4a:08:3c:97:6c:0d:0c:9b:53:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89572AF0EBD91AB05A4587B34A48A12C52369C71
        Validity
            Not Before: Jan  7 13:50:58 2026 GMT
            Not After : Jan  6 13:55:58 2027 GMT
        Subject: CN=091650D2313723D5CBA80B5B84F208870B8A5690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ac:12:c1:7e:50:05:eb:32:5b:bf:d9:16:ac:
                    b8:75:fc:67:e1:5c:82:0b:ef:ed:08:85:01:9d:43:
                    ee:37:bc:c8:1d:9c:5f:c1:e5:0c:30:de:80:c3:af:
                    ac:6d:8b:34:be:a7:f3:5d:ef:78:9c:e7:da:fe:34:
                    57:bd:98:f6:0d:f9:01:4d:36:9a:4b:3f:4c:3c:27:
                    1d:02:f7:77:a5:5b:0b:79:7b:7e:6a:fd:40:ef:20:
                    c6:f7:65:d9:8c:0d:58:8a:3f:2b:19:80:37:9c:47:
                    7d:0e:d6:f3:14:87:f8:44:be:72:ad:f8:5a:34:9a:
                    83:d5:dc:27:81:06:64:e0:2b:50:41:f0:dc:4f:43:
                    bd:03:1b:14:bc:59:a1:b9:d1:29:80:96:b2:79:74:
                    09:17:f5:10:2d:c5:c2:d8:c3:fa:68:e7:34:83:69:
                    ca:92:ff:63:08:d1:14:72:f8:8d:1b:bf:4a:e1:1c:
                    c1:01:ef:aa:43:6c:6e:c8:0a:98:0d:aa:88:30:7c:
                    fa:7c:90:96:5a:54:b0:17:26:50:cf:0c:7c:8d:ba:
                    c6:d4:7a:a2:5e:51:bc:b8:3b:3f:17:a0:03:ae:25:
                    8c:a4:c2:02:5a:e1:e6:5d:b8:ac:7b:33:a4:ae:07:
                    f1:70:d5:3f:f1:ef:d5:53:d9:5b:46:df:e7:27:f6:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:16:50:D2:31:37:23:D5:CB:A8:0B:5B:84:F2:08:87:0B:8A:56:90
            X509v3 Authority Key Identifier:
                keyid:89:57:2A:F0:EB:D9:1A:B0:5A:45:87:B3:4A:48:A1:2C:52:36:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/89572AF0EBD91AB05A4587B34A48A12C52369C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89572AF0EBD91AB05A4587B34A48A12C52369C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:5b:65:62:e5:23:02:bd:a3:8b:1b:6d:70:99:db:b6:b4:fb:
         46:35:b7:bf:7a:78:55:1b:66:2f:ee:84:b8:35:46:9d:5c:c8:
         0e:fa:fe:08:82:ee:d6:f5:9c:26:7b:38:62:06:49:48:aa:d2:
         fa:cb:d6:4e:db:5e:9f:d6:5d:ce:f2:8a:f0:b0:ed:10:21:0e:
         40:36:66:32:24:22:cf:bd:48:0f:32:e6:e2:53:cb:88:02:1b:
         81:d5:4b:72:0c:96:c7:e1:22:13:3a:08:5a:a4:2b:6b:4e:1e:
         55:92:43:49:e2:55:16:4a:f3:72:1d:8e:82:7b:79:06:30:b1:
         2a:2b:74:ed:1e:2f:e5:a6:e8:0a:32:bc:2e:31:60:b5:6f:ce:
         6b:52:0c:39:44:14:15:85:e4:8a:5a:81:8b:cd:d0:6f:10:a9:
         c6:48:d4:39:a9:70:38:24:67:ff:b5:8c:c4:88:e9:1c:ec:bb:
         02:a3:a9:43:1b:35:2c:c5:d4:6a:46:14:87:6b:93:87:b5:8e:
         a6:74:72:ec:3e:6c:1a:33:9a:b6:ce:18:93:94:f7:01:31:84:
         c5:f9:1d:ea:08:c9:8c:f1:87:e4:e1:69:c2:6b:7b:42:f1:37:
         5f:31:6a:9f:5b:4f:03:7c:d1:05:5e:33:6b:d0:95:3f:6f:a9:
         eb:f7:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:29 2026 by rpki-client