This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e33302e302f32332d3233203d3e203631373933.roa
File:                     3230312e3133302e33302e302f32332d3233203d3e203631373933.roa (raw, json)
Hash identifier:          5AIW8AQBAzw39tP4hWh+c4DHpWL0TtFo3ncHalKxhQc=
Subject key identifier:   B0:5B:A1:EE:85:FB:D8:A3:90:5B:80:71:62:CA:28:47:10:19:37:19
Certificate issuer:       /CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1
Certificate serial:       47058BF12A9C9AEA2C27150C868106016C94C1BE
Authority key identifier: AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e33302e302f32332d3233203d3e203631373933.roa
Signing time:             Fri 23 Jan 2026 16:43:16 +0000
ROA not before:           Fri 23 Jan 2026 16:38:16 +0000
ROA not after:            Fri 22 Jan 2027 16:43:16 +0000
asID:                     61793
IP address blocks:        201.130.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl
                          rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 22:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:05:8b:f1:2a:9c:9a:ea:2c:27:15:0c:86:81:06:01:6c:94:c1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1
        Validity
            Not Before: Jan 23 16:38:16 2026 GMT
            Not After : Jan 22 16:43:16 2027 GMT
        Subject: CN=B05BA1EE85FBD8A3905B807162CA284710193719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:8c:fa:09:74:c6:61:10:f8:05:78:e0:fa:
                    c1:4a:02:9b:d8:98:43:80:59:06:f1:24:39:a8:36:
                    a5:ec:4e:70:42:36:b7:39:c4:34:69:36:99:57:80:
                    5f:ef:c8:f3:43:54:ea:29:d2:60:03:d7:5e:28:3e:
                    36:43:89:8d:d0:8d:8e:c3:23:62:a3:66:69:89:9c:
                    8c:98:ac:3f:ca:c1:30:96:ba:70:dd:d9:60:73:ba:
                    67:16:71:a4:92:ef:00:76:c6:29:0c:10:12:e0:a0:
                    75:86:04:6e:2f:9c:54:1c:6a:5d:db:2d:ec:81:6f:
                    d9:e3:65:af:e4:d9:c8:31:23:c6:a0:33:10:55:13:
                    f5:2e:58:74:de:23:fb:b2:fa:13:18:81:08:e5:a6:
                    91:dc:65:57:e0:c9:8c:1e:2a:2f:4a:b5:2a:3c:2c:
                    ed:65:df:16:8a:45:81:16:df:80:4b:a1:b9:6e:a9:
                    72:b0:21:42:ec:d2:d6:59:97:d4:9a:80:b5:eb:ce:
                    4c:d1:25:9d:32:b4:2f:48:79:10:3c:fa:ec:d4:a6:
                    64:87:63:34:05:03:6d:ba:1c:41:04:ce:7d:39:76:
                    ad:52:9f:e6:88:f6:63:72:f6:f5:67:9d:c7:c3:1d:
                    5b:52:d3:6e:8e:8e:93:db:f6:8a:85:bc:d7:da:8d:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5B:A1:EE:85:FB:D8:A3:90:5B:80:71:62:CA:28:47:10:19:37:19
            X509v3 Authority Key Identifier:
                keyid:AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/3230312e3133302e33302e302f32332d3233203d3e203631373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:57:9f:92:77:60:3a:e0:bd:d1:23:85:75:43:5b:12:48:a7:
         a0:38:3b:84:dd:bc:37:59:e6:5d:37:46:86:ac:4a:cc:d3:4a:
         1a:14:4a:65:b1:8b:f1:75:a7:17:1c:92:68:a0:b0:30:95:e0:
         a6:3b:4f:e0:36:22:e2:30:62:00:71:92:68:d6:58:5d:70:97:
         21:2a:fb:a7:44:80:eb:e0:19:c4:06:19:2c:33:ad:1d:6f:99:
         ed:3c:42:1b:9a:f6:90:6e:6c:58:bf:39:0f:0e:16:12:90:95:
         e2:48:31:ee:e5:d0:bd:d7:7f:5d:04:5c:81:3c:da:e6:4d:ea:
         75:2e:b6:97:e6:fd:80:19:39:9c:a0:22:29:ba:0c:94:98:ae:
         78:c0:1a:1f:1c:b0:91:84:5b:39:0d:18:e6:bf:3f:3f:7d:6b:
         69:48:90:f4:5b:7f:11:e3:26:c1:7d:bc:7e:0f:f8:d3:0c:a3:
         43:22:a9:f0:0f:3f:62:52:9f:3f:68:48:06:01:b3:c7:de:e6:
         bb:f0:eb:f2:88:e6:2c:08:c8:00:79:96:86:b3:5e:bd:7f:ea:
         65:36:57:de:16:dc:67:f6:ef:1a:87:d0:82:03:b1:59:8b:a5:
         00:c6:61:a7:e0:15:42:e1:6d:ca:4e:8d:fb:49:cf:08:89:ea:
         25:df:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:28 2026 by rpki-client