This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa
File:                     3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          d4qoEQSszpqoYdnZSKyNIgO92fduB3MKMy0erJyBoSU=
Subject key identifier:   10:E7:3C:EE:4D:33:02:25:CD:9D:5C:F8:B2:E1:37:CB:9B:C0:72:12
Certificate issuer:       /CN=AB7AEBDEBAAB6625809B85019FF0CC21DB02F9D0
Certificate serial:       294D3C00B580C1439856B9F7E2BBDB2615423BC6
Authority key identifier: AB:7A:EB:DE:BA:AB:66:25:80:9B:85:01:9F:F0:CC:21:DB:02:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB7AEBDEBAAB6625809B85019FF0CC21DB02F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa
Signing time:             Wed 24 Dec 2025 13:01:01 +0000
ROA not before:           Wed 24 Dec 2025 12:56:01 +0000
ROA not after:            Wed 23 Dec 2026 13:01:01 +0000
asID:                     264297
IP address blocks:        138.121.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/AB7AEBDEBAAB6625809B85019FF0CC21DB02F9D0.crl
                          rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/AB7AEBDEBAAB6625809B85019FF0CC21DB02F9D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB7AEBDEBAAB6625809B85019FF0CC21DB02F9D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4d:3c:00:b5:80:c1:43:98:56:b9:f7:e2:bb:db:26:15:42:3b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB7AEBDEBAAB6625809B85019FF0CC21DB02F9D0
        Validity
            Not Before: Dec 24 12:56:01 2025 GMT
            Not After : Dec 23 13:01:01 2026 GMT
        Subject: CN=10E73CEE4D330225CD9D5CF8B2E137CB9BC07212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:19:b7:53:83:f1:b1:37:5f:2c:97:6f:b6:
                    95:53:d0:13:ec:1c:f5:32:a6:21:d3:50:52:50:ee:
                    9d:86:2e:87:3d:c3:03:d7:b9:4d:1f:1a:f6:8a:72:
                    f6:2a:62:8a:70:4a:c0:51:a6:df:bb:cb:8e:64:93:
                    2c:99:84:be:07:a0:d5:88:12:0d:2c:44:63:2a:bf:
                    b1:42:f8:67:79:89:f3:f3:54:ed:22:e8:20:26:98:
                    db:a9:26:be:77:55:c7:d0:cd:4a:d5:57:bf:b7:b8:
                    b4:b5:41:3e:d0:6b:51:68:93:39:ef:50:dd:bb:46:
                    fa:23:1a:b8:ce:20:bb:2a:ae:c2:23:5c:18:31:e5:
                    b4:15:30:d3:7a:e9:d6:7f:59:5b:0c:25:ac:77:03:
                    6f:49:7a:eb:b9:0c:e7:0c:c0:6d:61:e8:90:a8:4c:
                    91:90:23:25:26:ab:30:21:6c:9e:b5:1e:91:5c:48:
                    ff:63:f7:be:0d:c4:3f:ca:15:54:7c:c9:5a:6b:87:
                    91:5c:ae:e3:07:51:50:2f:30:3e:e3:05:d7:20:6e:
                    ff:74:15:6e:38:55:b2:35:f7:5d:b0:78:25:57:93:
                    64:6e:0c:75:08:94:b2:4c:77:90:44:6d:a5:2c:48:
                    e8:ad:d0:65:5d:d5:18:12:d4:da:16:f6:7d:c9:e5:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E7:3C:EE:4D:33:02:25:CD:9D:5C:F8:B2:E1:37:CB:9B:C0:72:12
            X509v3 Authority Key Identifier:
                keyid:AB:7A:EB:DE:BA:AB:66:25:80:9B:85:01:9F:F0:CC:21:DB:02:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/AB7AEBDEBAAB6625809B85019FF0CC21DB02F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB7AEBDEBAAB6625809B85019FF0CC21DB02F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:1e:b1:b9:74:21:99:5e:bd:53:ec:1b:97:22:97:51:72:
         85:1f:12:c5:20:95:2f:fe:f3:06:3e:59:7b:59:c5:63:f7:38:
         aa:e0:c5:c6:b4:cd:f7:5a:31:55:7e:ec:05:16:3d:f9:e7:0c:
         31:44:f1:9d:55:56:22:aa:16:89:34:f2:93:4f:2b:78:c0:58:
         fb:9d:8b:98:19:fc:98:77:37:e3:ae:38:12:11:e0:eb:9f:01:
         79:c4:f8:6b:80:d8:ba:5e:ab:cb:41:b2:eb:32:cc:c5:a5:9f:
         fa:9d:64:09:3d:1b:7b:f8:e5:6a:00:5a:c1:b6:04:50:5b:18:
         40:84:9e:ef:e9:64:17:2d:09:88:86:d1:cb:6d:ae:cd:ce:96:
         76:09:df:f4:9c:ee:9c:f0:ea:73:79:34:cb:72:79:ad:ef:1a:
         a1:67:ee:3a:e9:53:f8:92:e5:0e:31:51:8c:07:d5:15:70:6f:
         55:71:b8:a9:fe:ad:5d:cb:7b:91:ed:e6:02:9c:18:45:a1:02:
         c1:7f:30:79:99:9c:fe:79:f9:04:13:00:5c:46:04:c5:9c:c1:
         1c:5a:19:66:cf:35:7e:cc:59:5a:c6:59:d9:aa:e2:a2:c6:8d:
         7e:69:cf:e3:b3:c8:e3:22:78:a8:c2:de:ee:d9:fe:33:29:d0:
         57:fa:7c:37
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKU08ALWAwUOYVrn34rvbJhVCO8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI3QUVCREVCQUFCNjYyNTgwOUI4NTAxOUZGMENDMjFE
QjAyRjlEMDAeFw0yNTEyMjQxMjU2MDFaFw0yNjEyMjMxMzAxMDFaMDMxMTAvBgNV
BAMTKDEwRTczQ0VFNEQzMzAyMjVDRDlENUNGOEIyRTEzN0NCOUJDMDcyMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PRm3U4PxsTdfLJdvtpVT0BPs
HPUypiHTUFJQ7p2GLoc9wwPXuU0fGvaKcvYqYopwSsBRpt+7y45kkyyZhL4HoNWI
Eg0sRGMqv7FC+Gd5ifPzVO0i6CAmmNupJr53VcfQzUrVV7+3uLS1QT7Qa1Fokznv
UN27RvojGrjOILsqrsIjXBgx5bQVMNN66dZ/WVsMJax3A29Jeuu5DOcMwG1h6JCo
TJGQIyUmqzAhbJ61HpFcSP9j974NxD/KFVR8yVprh5FcruMHUVAvMD7jBdcgbv90
FW44VbI1912weCVXk2RuDHUIlLJMd5BEbaUsSOit0GVd1RgS1NoW9n3J5ZmDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEOc87k0zAiXNnVz4suE3y5vAchIwHwYDVR0j
BBgwFoAUq3rr3rqrZiWAm4UBn/DMIdsC+dAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJ5TnhKOTNKS2U3c3NiN3hLaTZOTjFjTXNGcDgxRndNb0d3UllaQjdn
eHUvMC9BQjdBRUJERUJBQUI2NjI1ODA5Qjg1MDE5RkYwQ0MyMURCMDJGOUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCN0FFQkRFQkFBQjY2MjU4
MDlCODUwMTlGRjBDQzIxREIwMkY5RDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSeU54SjkzSktlN3NzYjd4S2k2Tk4xY01zRnA4MUZ3TW9Hd1JZWkI3Z3h1LzAv
MzEzMzM4MmUzMTMyMzEyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop5iDANBgkqhkiG9w0BAQsFAAOCAQEAOKEe
sbl0IZlevVPsG5cil1FyhR8SxSCVL/7zBj5Ze1nFY/c4quDFxrTN91oxVX7sBRY9
+ecMMUTxnVVWIqoWiTTyk08reMBY+52LmBn8mHc34644EhHg658BecT4a4DYul6r
y0Gy6zLMxaWf+p1kCT0be/jlagBawbYEUFsYQISe7+lkFy0JiIbRy22uzc6Wdgnf
9JzunPDqc3k0y3J5re8aoWfuOulT+JLlDjFRjAfVFXBvVXG4qf6tXct7ke3mApwY
RaECwX8weZmc/nn5BBMAXEYExZzBHFoZZs81fsxZWsZZ2ariosaNfmnP47PI4yJ4
qMLe7tn+MynQV/p8Nw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:01 2026 by rpki-client