This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3138312e3139312e3139322e302f32322d3234203d3e20323637303033.roa
File:                     3138312e3139312e3139322e302f32322d3234203d3e20323637303033.roa (raw, json)
Hash identifier:          j1ukzGYrb7milMgcLRTUhcJoJJoc1fEX2Bvm6WnonZM=
Subject key identifier:   DD:02:4A:74:67:56:4F:4F:3A:3A:63:6A:57:D2:51:A7:FE:8F:82:A4
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       6A8ED50CB5932DBBDCAC2A119334588EBC1E832E
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3138312e3139312e3139322e302f32322d3234203d3e20323637303033.roa
Signing time:             Tue 20 Jan 2026 14:16:31 +0000
ROA not before:           Tue 20 Jan 2026 14:11:31 +0000
ROA not after:            Tue 19 Jan 2027 14:16:31 +0000
asID:                     267003
IP address blocks:        181.191.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8e:d5:0c:b5:93:2d:bb:dc:ac:2a:11:93:34:58:8e:bc:1e:83:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Jan 20 14:11:31 2026 GMT
            Not After : Jan 19 14:16:31 2027 GMT
        Subject: CN=DD024A7467564F4F3A3A636A57D251A7FE8F82A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:fd:7c:5a:ea:0a:a4:e4:50:bf:ca:83:4c:
                    d0:05:b1:db:35:1e:ee:34:b3:e4:2c:3b:7c:c6:fe:
                    1a:b2:43:ce:ba:52:85:64:43:c3:e3:1d:72:9a:b0:
                    ed:f8:9b:e0:1c:12:bc:fc:42:2d:a9:c3:ba:9b:02:
                    68:e7:d4:c4:c1:32:f0:d1:9f:09:1d:3c:45:6d:94:
                    19:8d:73:cf:ea:96:9c:2c:fa:a1:c2:f4:ac:94:0c:
                    8c:1a:78:8b:47:42:7d:d4:80:c5:2d:4a:c9:cc:30:
                    2d:22:89:c3:a7:48:45:2b:2c:44:a4:f4:57:8d:c5:
                    fa:f5:6a:b5:17:d0:5d:6f:da:e6:44:9c:13:8b:3a:
                    ce:49:92:26:f6:34:b9:52:11:8d:1c:b1:57:e8:68:
                    ef:5b:fe:80:0e:ff:45:1d:d8:a6:8c:26:95:7b:a7:
                    a9:cb:f8:5b:ea:62:79:43:30:b0:23:ae:8c:74:40:
                    52:70:50:62:3b:93:f4:5f:48:7c:44:26:82:7d:59:
                    db:e8:eb:bf:64:6d:2d:bc:85:14:e7:7e:11:3b:6c:
                    73:91:4e:16:83:3d:06:de:f8:09:c1:94:4e:b9:f9:
                    eb:0d:3a:f3:80:d9:42:19:98:9e:b6:f1:a3:8f:a2:
                    fd:c1:55:02:36:79:9a:3a:54:4d:a0:40:98:6a:c5:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:02:4A:74:67:56:4F:4F:3A:3A:63:6A:57:D2:51:A7:FE:8F:82:A4
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3138312e3139312e3139322e302f32322d3234203d3e20323637303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:40:59:dc:8f:72:56:e1:07:61:98:b1:ba:2a:9e:73:ee:11:
         34:6d:31:b9:8e:b2:3b:fa:ef:9d:40:ab:5f:f8:7e:2a:35:53:
         11:2e:b3:05:f1:d9:85:63:13:54:29:f7:86:fc:f3:75:b1:a4:
         58:97:ab:73:b9:9d:ac:c1:de:6b:99:9d:ef:e4:d2:9f:0d:73:
         cb:ea:e8:d8:31:49:d7:98:6b:a9:ca:93:be:a8:c3:61:e8:fd:
         3d:6e:bb:de:b6:dc:08:2f:68:ec:97:3f:46:7f:6b:04:a4:56:
         ed:5c:28:55:d3:2f:c0:54:0f:98:c7:d5:19:de:6e:0f:7b:78:
         30:fa:f1:e8:63:a1:14:ae:1c:5b:9c:8b:da:2a:b1:de:dc:24:
         ae:89:c9:2c:78:bc:79:b6:91:89:a3:60:3d:ab:18:03:80:94:
         a3:23:3a:2c:22:83:24:27:8d:4f:5c:5e:03:8f:d0:cd:56:fb:
         5d:ed:05:46:b4:0e:80:39:69:4b:94:02:c5:f7:f2:a5:37:d7:
         7e:8f:9d:b4:0c:12:5a:0c:50:ac:21:e5:e2:47:af:24:73:3f:
         43:06:3b:3c:5b:e4:68:fe:e5:da:73:64:2b:22:72:d9:8b:15:
         41:7c:f0:97:68:f1:24:76:54:db:56:e1:8b:e8:10:a4:98:af:
         07:4a:c2:aa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUao7VDLWTLbvcrCoRkzRYjrwegy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlBRUE0MDRBRkRBQzdENUE5QTE3NTVGM0EyN0ZGNUNB
RTEyREE3QjAeFw0yNjAxMjAxNDExMzFaFw0yNzAxMTkxNDE2MzFaMDMxMTAvBgNV
BAMTKEREMDI0QTc0Njc1NjRGNEYzQTNBNjM2QTU3RDI1MUE3RkU4RjgyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6m/18WuoKpORQv8qDTNAFsds1
Hu40s+QsO3zG/hqyQ866UoVkQ8PjHXKasO34m+AcErz8Qi2pw7qbAmjn1MTBMvDR
nwkdPEVtlBmNc8/qlpws+qHC9KyUDIwaeItHQn3UgMUtSsnMMC0iicOnSEUrLESk
9FeNxfr1arUX0F1v2uZEnBOLOs5Jkib2NLlSEY0csVfoaO9b/oAO/0Ud2KaMJpV7
p6nL+FvqYnlDMLAjrox0QFJwUGI7k/RfSHxEJoJ9Wdvo679kbS28hRTnfhE7bHOR
ThaDPQbe+AnBlE65+esNOvOA2UIZmJ628aOPov3BVQI2eZo6VE2gQJhqxfjHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3QJKdGdWT086OmNqV9JRp/6PgqQwHwYDVR0j
BBgwFoAU6a6kBK/ax9WpoXVfOif/XK4S2nswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1NCdEVXbTJrRWJFc0VpeVpYZlRGMmJjMTRpVHpDem1NOFNUaWgxakp2
VHYvMC9FOUFFQTQwNEFGREFDN0Q1QTlBMTc1NUYzQTI3RkY1Q0FFMTJEQTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5QUVBNDA0QUZEQUM3RDVB
OUExNzU1RjNBMjdGRjVDQUUxMkRBN0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NTQnRFV20ya0ViRXNFaXlaWGZURjJiYzE0aVR6Q3ptTThTVGloMWpKdlR2LzAv
MzEzODMxMmUzMTM5MzEyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNzMwMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArW/wDANBgkqhkiG9w0BAQsFAAOCAQEASkBZ
3I9yVuEHYZixuiqec+4RNG0xuY6yO/rvnUCrX/h+KjVTES6zBfHZhWMTVCn3hvzz
dbGkWJerc7mdrMHea5md7+TSnw1zy+ro2DFJ15hrqcqTvqjDYej9PW673rbcCC9o
7Jc/Rn9rBKRW7VwoVdMvwFQPmMfVGd5uD3t4MPrx6GOhFK4cW5yL2iqx3twkronJ
LHi8ebaRiaNgPasYA4CUoyM6LCKDJCeNT1xeA4/QzVb7Xe0FRrQOgDlpS5QCxffy
pTfXfo+dtAwSWgxQrCHl4kevJHM/QwY7PFvkaP7l2nNkKyJy2YsVQXzwl2jxJHZU
21bhi+gQpJivB0rCqg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:09 2026 by rpki-client