This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32382e302f32332d3233203d3e203631373933.roa
File:                     3230312e3133302e32382e302f32332d3233203d3e203631373933.roa (raw, json)
Hash identifier:          9N/yY5xSgudsEsolG/pBkhgACjFcaRjOcxdoqF/fIbs=
Subject key identifier:   FD:EF:94:BF:7B:AF:87:D0:0D:94:40:2B:6E:80:5A:C4:E5:D2:ED:15
Certificate issuer:       /CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1
Certificate serial:       26AF461062996F6960C98AB6043D9DAB83A1BE06
Authority key identifier: AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32382e302f32332d3233203d3e203631373933.roa
Signing time:             Fri 23 Jan 2026 16:43:16 +0000
ROA not before:           Fri 23 Jan 2026 16:38:16 +0000
ROA not after:            Fri 22 Jan 2027 16:43:16 +0000
asID:                     61793
IP address blocks:        201.130.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl
                          rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 22:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:af:46:10:62:99:6f:69:60:c9:8a:b6:04:3d:9d:ab:83:a1:be:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1
        Validity
            Not Before: Jan 23 16:38:16 2026 GMT
            Not After : Jan 22 16:43:16 2027 GMT
        Subject: CN=FDEF94BF7BAF87D00D94402B6E805AC4E5D2ED15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:cd:d6:2d:63:77:67:47:43:42:f0:60:1e:
                    02:40:95:4f:a1:7d:5a:45:52:fa:06:4b:6b:c1:5e:
                    50:c0:7f:7a:2f:57:a0:ef:10:e0:77:38:1d:e1:69:
                    56:df:71:f2:b9:d5:d6:02:ac:34:bf:c4:6b:4c:50:
                    28:8c:0c:db:ff:6c:1f:c2:46:a3:95:0e:60:62:7c:
                    f8:ef:4f:23:8f:b7:86:71:ec:c3:98:1f:d3:0f:5a:
                    93:1e:6c:fc:39:cb:b9:7c:a8:ee:20:b8:0c:26:44:
                    ab:ca:d5:fb:b2:9f:d9:c0:35:5c:3f:7c:e9:fb:35:
                    27:0e:e4:3a:00:63:83:1f:9f:26:0f:2b:1d:6e:a5:
                    79:e8:9e:1f:23:d4:62:96:ca:f5:3f:b2:81:bb:42:
                    c0:26:e3:f1:d6:1b:e5:0f:7b:27:08:f2:08:96:a6:
                    67:a0:0f:21:d3:28:20:ed:5a:39:95:d4:65:43:15:
                    2e:ab:96:c3:b0:57:1e:f4:30:21:7d:95:f9:27:96:
                    4f:55:96:1b:37:6a:ce:95:cc:fa:62:3b:aa:62:9a:
                    6d:9d:71:88:0d:16:ed:64:a2:e4:f5:34:80:9a:17:
                    f0:90:29:dc:b2:88:bc:4b:29:c0:a4:c1:19:7a:61:
                    33:c3:bf:32:fb:c5:e4:a6:13:ae:9c:56:38:97:9d:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:94:BF:7B:AF:87:D0:0D:94:40:2B:6E:80:5A:C4:E5:D2:ED:15
            X509v3 Authority Key Identifier:
                keyid:AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e32382e302f32332d3233203d3e203631373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:67:23:66:66:5b:d0:1d:94:5c:a5:c2:cb:08:63:8a:93:7e:
         c0:3a:3f:f1:cf:4b:1b:92:d6:7c:2c:25:d9:7a:e3:1d:c0:cd:
         5b:22:42:97:29:d4:e8:f9:82:fa:88:6e:be:87:7c:b1:f7:1e:
         70:08:d1:af:c4:d3:c0:65:b1:db:7f:fe:20:46:4f:b0:56:56:
         f3:43:63:99:ff:65:83:2b:8f:19:ba:34:ed:41:c8:e0:c5:e1:
         08:5d:52:7f:4e:31:d5:8b:5c:01:cc:f6:7a:81:9e:f9:29:16:
         f1:3d:b8:58:86:75:b6:e9:56:b4:a7:02:ec:14:58:6d:e8:53:
         87:22:dc:60:32:e8:00:99:40:48:e1:06:c7:cb:2f:b5:1b:46:
         7e:29:2d:76:80:18:62:67:1e:84:4e:e4:63:46:af:b4:80:1a:
         52:43:da:13:a0:7d:73:13:62:47:2a:b0:23:55:a4:cb:f4:db:
         49:77:13:0b:22:97:df:2b:cf:e2:3b:8b:a5:a6:58:68:c1:15:
         6b:9c:6b:ac:a7:fa:16:0e:db:a3:a0:09:57:c4:7b:90:5d:1d:
         6a:82:e4:07:67:d5:d2:c1:3a:21:8d:7e:4e:61:da:8b:dc:e3:
         60:b9:10:a0:96:f5:64:66:5c:05:ff:80:63:c5:71:62:ff:8e:
         db:77:97:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJq9GEGKZb2lgyYq2BD2dq4OhvgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY3OTE0Qzc4N0FGRENCRkNGRkZERDk0NUM1QTBFQ0ZE
OERCQzZCMTAeFw0yNjAxMjMxNjM4MTZaFw0yNzAxMjIxNjQzMTZaMDMxMTAvBgNV
BAMTKEZERUY5NEJGN0JBRjg3RDAwRDk0NDAyQjZFODA1QUM0RTVEMkVEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXc3WLWN3Z0dDQvBgHgJAlU+h
fVpFUvoGS2vBXlDAf3ovV6DvEOB3OB3haVbfcfK51dYCrDS/xGtMUCiMDNv/bB/C
RqOVDmBifPjvTyOPt4Zx7MOYH9MPWpMebPw5y7l8qO4guAwmRKvK1fuyn9nANVw/
fOn7NScO5DoAY4MfnyYPKx1upXnonh8j1GKWyvU/soG7QsAm4/HWG+UPeycI8giW
pmegDyHTKCDtWjmV1GVDFS6rlsOwVx70MCF9lfknlk9Vlhs3as6VzPpiO6pimm2d
cYgNFu1kouT1NICaF/CQKdyyiLxLKcCkwRl6YTPDvzL7xeSmE66cVjiXnQ3VAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/e+Uv3uvh9ANlEArboBaxOXS7RUwHwYDVR0j
BBgwFoAUr3kUx4ev3L/P/92UXFoOz9jbxrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWU1S21kYm9EQ2NKbjY5b3F1OWtqaEhoeG52Z1hZYzZZTUh0VnBhRkd5
UFEvMC9BRjc5MTRDNzg3QUZEQ0JGQ0ZGRkREOTQ1QzVBMEVDRkQ4REJDNkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzkxNEM3ODdBRkRDQkZD
RkZGREQ5NDVDNUEwRUNGRDhEQkM2QjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzllNUttZGJvRENjSm42OW9xdTlramhIaHhudmdYWWM2WU1IdFZwYUZHeVBRLzAv
MzIzMDMxMmUzMTMzMzAyZTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByYIcMA0GCSqGSIb3DQEBCwUAA4IBAQCVZyNmZlvQ
HZRcpcLLCGOKk37AOj/xz0sbktZ8LCXZeuMdwM1bIkKXKdTo+YL6iG6+h3yx9x5w
CNGvxNPAZbHbf/4gRk+wVlbzQ2OZ/2WDK48ZujTtQcjgxeEIXVJ/TjHVi1wBzPZ6
gZ75KRbxPbhYhnW26Va0pwLsFFht6FOHItxgMugAmUBI4QbHyy+1G0Z+KS12gBhi
Zx6ETuRjRq+0gBpSQ9oToH1zE2JHKrAjVaTL9NtJdxMLIpffK8/iO4ulplhowRVr
nGusp/oWDtujoAlXxHuQXR1qguQHZ9XSwTohjX5OYdqL3ONguRCglvVkZlwF/4Bj
xXFi/47bd5eT
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:23 2026 by rpki-client