This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa
File:                     3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa (raw, json)
Hash identifier:          qb5CEyMM5Bsyj+QUacujxzF+SjW2ntuhn2byZVb2KWQ=
Subject key identifier:   FC:8C:B3:21:39:C2:53:DE:AC:93:F9:5A:15:73:4C:EC:42:B2:B2:35
Certificate issuer:       /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
Certificate serial:       0A00349FBE8042ACE5497F3251BB9B032FBDF371
Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa
Signing time:             Fri 09 Jan 2026 15:47:37 +0000
ROA not before:           Fri 09 Jan 2026 15:42:37 +0000
ROA not after:            Fri 08 Jan 2027 15:47:37 +0000
asID:                     271367
IP address blocks:        200.36.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl
                          rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 07:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:00:34:9f:be:80:42:ac:e5:49:7f:32:51:bb:9b:03:2f:bd:f3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
        Validity
            Not Before: Jan  9 15:42:37 2026 GMT
            Not After : Jan  8 15:47:37 2027 GMT
        Subject: CN=FC8CB32139C253DEAC93F95A15734CEC42B2B235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fb:9f:6e:38:2f:fe:e1:4e:d3:31:ea:54:6f:
                    75:40:ce:8e:0b:1b:7a:05:0f:54:b3:97:97:b9:d6:
                    09:42:7e:3c:fc:e0:49:34:fd:3d:dc:84:c7:56:57:
                    d6:18:c9:8c:7a:33:0b:7e:f9:ad:3b:ca:04:3d:e9:
                    29:45:ca:9b:dd:43:b2:ed:7f:cb:07:86:9d:fe:4b:
                    12:b0:0f:c0:24:fc:55:c9:45:c4:4d:1d:ac:cd:3c:
                    5c:eb:57:41:4b:32:72:87:b3:de:b5:91:4d:cc:e5:
                    19:02:90:64:a5:2a:23:35:2d:29:7f:38:db:83:a3:
                    d1:a2:6f:c7:6e:c9:c7:43:93:a9:ee:57:48:cf:5b:
                    7f:5f:6e:47:03:a4:6a:8e:63:13:75:21:04:00:6b:
                    3d:64:9a:88:fb:ad:30:3b:cc:8d:29:c2:0e:ff:1f:
                    d4:42:40:ba:fb:72:6c:a4:86:e0:59:5c:dd:80:7d:
                    5e:5b:58:07:4b:9a:05:47:85:6f:5f:1c:a7:e1:92:
                    7f:a2:53:6b:e3:74:77:1e:00:63:80:00:4f:1f:52:
                    fd:0f:cb:4a:49:86:8c:c7:1d:d6:d5:45:13:35:24:
                    91:74:00:51:27:2a:7b:af:02:6e:06:45:a9:e8:45:
                    83:29:11:5e:09:c6:43:7c:cd:c1:0b:0b:5c:f9:8d:
                    43:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8C:B3:21:39:C2:53:DE:AC:93:F9:5A:15:73:4C:EC:42:B2:B2:35
            X509v3 Authority Key Identifier:
                keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:00:b3:0d:4f:27:6e:91:88:2a:97:3c:99:39:61:7b:db:de:
         ab:35:2f:60:c8:21:2e:f0:68:bc:ad:d9:4b:cf:87:12:89:bd:
         78:54:1c:53:52:a0:6b:47:4a:08:85:67:22:c9:d5:0b:55:b9:
         a6:78:3f:74:ee:29:79:1a:f1:b2:5d:1a:12:e0:c3:1a:84:52:
         a0:be:9a:2e:b3:71:3d:89:47:2e:60:5c:eb:30:a2:56:a8:0f:
         ce:15:01:55:24:36:5d:f3:3b:91:30:f1:19:f7:aa:b1:99:75:
         9c:89:69:b3:08:1f:1b:4b:09:24:97:20:6e:4c:b4:c1:d2:06:
         fd:37:84:8c:71:d1:13:5e:3b:43:15:e9:ca:05:64:7b:12:1b:
         7c:a8:3a:cb:5a:8c:5e:44:35:74:09:af:f0:86:70:c5:dd:41:
         fe:72:94:57:85:08:bf:3b:a6:c3:a2:8d:79:25:08:f0:9d:4a:
         a2:ec:4f:67:46:4f:42:82:11:9e:e8:84:4f:f5:a7:45:c6:75:
         0f:79:e0:cc:f4:68:d1:1d:da:fa:63:00:88:13:ba:69:30:ba:
         d0:7c:ba:f8:48:30:b2:dd:f3:8c:89:b0:bf:4d:80:18:25:b7:
         a1:f2:59:2c:84:ab:92:96:6a:52:c8:f4:fc:8e:09:9b:32:b3:
         56:cc:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:47:42 2026 by rpki-client