This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa
File:                     3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa (raw, json)
Hash identifier:          MbaZbO0dSet4MJuYf4z3E0rWSfNDnbLuPdALAgu2DkU=
Subject key identifier:   9F:EF:EE:96:BD:E1:58:80:BF:AC:B1:C8:43:31:6C:DB:81:5E:22:8A
Certificate issuer:       /CN=84FD8F1989410A974714F8A8E867D28365445A3B
Certificate serial:       2FA3FC872CB6E9DB8BE67F495756D3D1FADA595B
Authority key identifier: 84:FD:8F:19:89:41:0A:97:47:14:F8:A8:E8:67:D2:83:65:44:5A:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa
Signing time:             Mon 05 Jan 2026 18:12:11 +0000
ROA not before:           Mon 05 Jan 2026 18:07:11 +0000
ROA not after:            Mon 04 Jan 2027 18:12:11 +0000
asID:                     265011
IP address blocks:        170.84.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.crl
                          rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a3:fc:87:2c:b6:e9:db:8b:e6:7f:49:57:56:d3:d1:fa:da:59:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FD8F1989410A974714F8A8E867D28365445A3B
        Validity
            Not Before: Jan  5 18:07:11 2026 GMT
            Not After : Jan  4 18:12:11 2027 GMT
        Subject: CN=9FEFEE96BDE15880BFACB1C843316CDB815E228A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:b4:6a:4e:dd:63:a1:f5:c0:70:7d:01:ef:
                    27:d4:cb:e0:cf:77:b5:b4:fa:ab:21:60:92:21:b4:
                    4a:47:3d:68:51:a0:8c:a4:9c:14:e7:b1:44:51:0e:
                    35:e6:d7:0b:65:f2:e5:56:c6:0a:c0:85:09:3e:c9:
                    fc:67:62:82:f4:6e:61:61:eb:f5:39:d5:e3:52:e1:
                    af:95:1a:3c:2f:54:ef:81:7c:15:5d:1a:0b:2a:45:
                    09:ff:61:2e:70:e5:5d:cf:a0:39:e1:73:22:e3:21:
                    d2:9e:d2:c6:f2:64:f5:00:ef:95:0a:48:3d:aa:b1:
                    b5:46:e6:b3:9e:b8:7f:3d:fa:a6:10:a9:73:bb:3d:
                    5f:5c:21:ee:e5:df:08:bd:11:77:63:98:7b:28:57:
                    3b:a2:63:eb:f5:48:6a:48:86:50:0f:a5:e2:05:5a:
                    8f:46:30:5f:99:52:19:87:60:1c:96:15:62:0e:d3:
                    d9:4a:9b:25:1e:75:2a:dd:0a:60:b3:b4:b0:db:31:
                    50:fc:95:04:0d:a5:37:58:79:ad:b1:a9:40:68:4d:
                    58:c2:ff:d8:a3:7a:2a:0f:80:69:21:60:ec:37:c7:
                    81:08:4b:27:2c:db:fd:4d:24:79:0c:96:75:74:cc:
                    8d:6f:c1:ac:63:6f:41:bb:df:64:5f:e8:c8:8d:c2:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EF:EE:96:BD:E1:58:80:BF:AC:B1:C8:43:31:6C:DB:81:5E:22:8A
            X509v3 Authority Key Identifier:
                keyid:84:FD:8F:19:89:41:0A:97:47:14:F8:A8:E8:67:D2:83:65:44:5A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:32:12:f8:1d:a3:61:c8:6c:45:f7:fc:64:79:71:ab:b2:5e:
         18:25:c0:84:6b:ef:ab:27:7d:e4:c7:4d:bc:ee:eb:26:0f:6d:
         18:b4:98:64:76:fa:64:c5:3b:ed:83:27:b3:55:e8:1d:15:1c:
         29:28:32:85:c8:76:33:47:a6:e4:0d:24:0c:fa:7e:3b:a6:74:
         08:30:1a:1a:b2:77:67:db:42:03:5f:16:a8:24:8f:6f:88:97:
         bf:51:16:0d:7d:8f:c6:a3:8a:c5:17:43:9d:81:0a:55:9d:76:
         c9:c1:7d:b4:0a:58:af:37:20:ab:b8:28:1e:32:29:c9:4c:69:
         95:ce:ce:6a:79:28:39:dd:40:2e:4c:2d:5a:07:be:45:78:e7:
         76:f2:0a:ce:1c:f9:d5:8e:2e:71:fa:f4:b8:41:da:e3:90:1e:
         bc:50:ca:1e:4d:0f:d8:02:82:a4:41:7e:6f:85:10:d2:6b:1a:
         19:c2:d8:53:eb:c9:1a:05:e5:b6:bc:6b:f1:c6:bc:b4:4d:b3:
         62:3c:cc:47:4a:4d:04:7b:d1:51:59:0f:ab:e2:c8:7e:b2:92:
         71:43:98:0a:ea:1b:c3:f1:58:57:0a:b1:3f:eb:fb:cb:ae:d7:
         87:6e:7c:bd:0e:3d:2e:99:6b:c5:ec:ab:2a:ea:e0:df:75:f0:
         60:7d:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:22 2026 by rpki-client