This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa
File:                     3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa (raw, json)
Hash identifier:          5qvvtSGaFf5wISwQWZ8BZ85obWb8+jvaKgujZOnIWfA=
Subject key identifier:   4B:13:E9:44:B0:63:68:E4:33:43:2C:3A:5B:9B:65:69:E9:5D:AE:C6
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       22FA006FE2099515C6BD3EDB38932BCED5128A84
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa
Signing time:             Thu 22 Jan 2026 12:00:59 +0000
ROA not before:           Thu 22 Jan 2026 11:55:59 +0000
ROA not after:            Thu 21 Jan 2027 12:00:59 +0000
asID:                     263891
IP address blocks:        138.204.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fa:00:6f:e2:09:95:15:c6:bd:3e:db:38:93:2b:ce:d5:12:8a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Jan 22 11:55:59 2026 GMT
            Not After : Jan 21 12:00:59 2027 GMT
        Subject: CN=4B13E944B06368E433432C3A5B9B6569E95DAEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0e:33:2f:28:d5:5f:82:3f:8f:76:5e:74:09:
                    bd:4c:3e:6e:d2:0a:c5:e9:71:d5:db:ef:7a:7c:a0:
                    10:ee:5b:ef:2a:b3:9e:e2:33:87:cc:9a:ac:8a:56:
                    dc:7e:e2:28:b2:af:a8:de:92:78:20:9d:3e:cf:c9:
                    74:d6:71:aa:3b:ac:9c:aa:6b:e0:8d:99:8b:98:0d:
                    2e:79:4b:8b:86:6d:9f:f4:51:90:94:9f:49:6f:5f:
                    3e:97:cc:28:a6:82:73:fc:7a:e5:04:07:d4:20:ae:
                    e4:9d:69:52:db:92:af:21:f3:d8:99:71:0e:9e:e4:
                    e6:15:7f:ca:a2:26:41:7d:d8:ba:d1:ce:1f:01:39:
                    ed:41:ee:0c:72:bf:0a:1c:a3:aa:a3:a7:59:80:ef:
                    b2:6e:90:fd:61:12:d3:37:86:7a:18:66:dd:69:dd:
                    52:e0:c1:7f:df:81:3c:b7:94:cb:79:5a:18:d9:66:
                    51:aa:c2:55:c4:56:0b:20:77:14:60:18:e8:77:79:
                    c6:e0:7d:0b:db:6c:ed:51:7e:ce:03:8f:b3:07:4f:
                    44:7d:20:96:f3:d3:5a:2c:10:46:7c:20:cf:bf:c4:
                    ae:65:80:0d:07:ff:8a:6c:b4:61:83:fd:2b:f2:d8:
                    26:95:61:e5:6e:be:0b:d4:90:82:79:1c:92:1f:69:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:13:E9:44:B0:63:68:E4:33:43:2C:3A:5B:9B:65:69:E9:5D:AE:C6
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:c9:c1:b3:2b:2a:62:05:8d:e6:ce:96:4d:13:20:e2:d6:
         6c:c1:08:2c:66:87:c3:e2:6c:c5:c0:d4:31:2c:21:67:26:28:
         d3:f3:21:8f:ec:41:8a:fa:41:b0:9b:f3:1b:19:34:15:09:6a:
         68:26:23:93:11:1d:be:f5:bc:22:bc:00:2a:97:ca:0b:c5:e9:
         2d:b2:ba:14:5b:36:94:10:f3:67:2d:c3:4e:86:f2:b5:46:fb:
         05:0c:87:9e:2c:d3:a5:0a:72:40:cb:fe:bc:48:e0:86:a6:74:
         98:fb:b8:a9:27:9f:1f:25:07:08:f3:fe:5f:5c:77:6a:d1:f7:
         1e:7a:82:cc:1d:95:97:22:9a:3a:b6:b2:d9:a7:2b:33:7c:c6:
         14:24:cc:85:7c:e8:ec:ce:0b:03:38:39:48:be:bc:04:5e:bd:
         02:08:7e:6a:64:63:46:20:6e:bf:49:20:2c:d8:d6:15:55:dd:
         07:53:ce:d0:7c:e3:f5:08:2e:07:ba:93:d0:99:3f:14:ee:37:
         70:50:2e:41:5a:91:e5:20:14:1e:4d:99:c6:3c:ed:be:7c:1d:
         50:ce:74:c9:d8:a2:6c:c6:05:3a:6e:e6:ba:5e:0a:70:85:05:
         db:13:dd:14:60:d4:ef:66:f2:7c:4f:2b:3e:e8:84:8b:44:94:
         fc:8a:b4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:36 2026 by rpki-client