This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3139312e3234302e3230382e302f32312d3234203d3e20323637303033.roa
File:                     3139312e3234302e3230382e302f32312d3234203d3e20323637303033.roa (raw, json)
Hash identifier:          ay8kr3rZ8NQsxUA5TLjv78BN11lKNDgWf3X+Bb8x3yg=
Subject key identifier:   AB:E1:0D:4F:69:83:EB:B4:30:90:E7:32:AE:FD:DE:F5:C2:DD:A9:39
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       5DDEF96B58DE7DFD242A0841EB05F07F720A0848
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3139312e3234302e3230382e302f32312d3234203d3e20323637303033.roa
Signing time:             Tue 20 Jan 2026 13:27:56 +0000
ROA not before:           Tue 20 Jan 2026 13:22:56 +0000
ROA not after:            Tue 19 Jan 2027 13:27:56 +0000
asID:                     267003
IP address blocks:        191.240.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:de:f9:6b:58:de:7d:fd:24:2a:08:41:eb:05:f0:7f:72:0a:08:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Jan 20 13:22:56 2026 GMT
            Not After : Jan 19 13:27:56 2027 GMT
        Subject: CN=ABE10D4F6983EBB43090E732AEFDDEF5C2DDA939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:36:52:5d:29:4f:53:1a:b5:92:07:0b:c3:
                    62:80:cc:21:c7:ae:79:22:8f:33:5e:60:20:67:11:
                    78:ec:6f:70:22:17:37:09:c1:0d:cb:57:b1:e8:7f:
                    5c:89:95:18:06:88:18:e1:f1:f0:cc:1b:1c:cd:86:
                    98:35:07:8d:69:2a:28:6a:86:d8:c7:82:5b:c6:26:
                    a9:0d:bf:1d:70:3b:77:ff:7d:22:2a:af:18:62:ec:
                    65:e7:14:6c:99:67:3d:bd:bf:69:a5:98:aa:e0:3e:
                    2a:45:32:a5:de:7f:e3:82:2c:61:99:79:d6:58:d4:
                    56:5d:ef:8f:6d:ec:37:b2:5a:be:fe:37:60:6d:af:
                    e3:df:3f:04:38:92:e8:d6:8f:39:9b:90:29:25:b8:
                    fa:f2:f0:f6:48:47:6a:fc:32:24:31:68:68:fe:63:
                    d6:ba:ed:e9:35:66:44:ee:3d:8b:08:46:0a:78:ef:
                    7e:d4:e7:84:5c:75:97:5d:40:48:50:ec:07:62:9e:
                    c0:f6:69:6b:00:6b:6e:3e:0b:12:43:fd:a3:32:28:
                    51:34:69:be:9b:6a:e7:e2:b0:55:37:16:33:63:52:
                    ec:a1:07:ff:05:cd:ab:ec:e3:7d:2a:03:13:7b:5f:
                    ff:cb:33:a0:3e:03:41:dd:38:5e:67:98:c2:9b:34:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:0D:4F:69:83:EB:B4:30:90:E7:32:AE:FD:DE:F5:C2:DD:A9:39
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3139312e3234302e3230382e302f32312d3234203d3e20323637303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:2b:f8:7e:bc:98:a8:6c:29:5a:3b:12:c6:ef:8a:c0:56:
         25:0d:77:ec:7a:16:d5:10:15:e1:c3:26:d4:03:ad:20:21:cf:
         04:2b:24:33:4d:16:98:0b:48:16:35:af:11:6c:d8:9b:97:2b:
         d8:32:e6:9a:1c:7b:af:23:37:89:97:1b:c3:86:ea:7c:13:69:
         79:9b:ee:31:70:48:0b:bb:f7:01:7d:4e:64:48:71:55:c9:7e:
         ce:88:f6:fb:74:5c:35:74:89:64:64:5d:02:b3:77:fb:f1:21:
         4f:f6:10:5f:11:0b:44:1d:08:c3:bb:4a:29:1f:57:70:42:f0:
         7a:6d:04:e8:bf:27:59:b1:18:26:f6:05:d9:e3:de:6e:b8:2e:
         20:1d:73:70:61:37:40:b2:02:ec:91:04:72:8e:a7:c2:ba:ec:
         ee:3b:59:2d:08:ca:7b:33:b3:90:80:8c:a6:98:43:be:eb:cf:
         4d:22:45:6e:f7:91:47:3d:cb:8a:c7:c5:4c:ff:f7:4e:45:61:
         6e:38:53:33:13:be:c2:e5:33:aa:6d:b0:b3:98:91:09:3e:53:
         c8:74:80:71:20:c1:63:1f:12:10:35:b1:c9:24:26:b8:e6:e9:
         5b:74:1f:75:17:4d:cf:04:b2:05:45:6e:d4:8e:76:54:38:9a:
         c8:a4:a4:ce
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXd75a1jeff0kKghB6wXwf3IKCEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlBRUE0MDRBRkRBQzdENUE5QTE3NTVGM0EyN0ZGNUNB
RTEyREE3QjAeFw0yNjAxMjAxMzIyNTZaFw0yNzAxMTkxMzI3NTZaMDMxMTAvBgNV
BAMTKEFCRTEwRDRGNjk4M0VCQjQzMDkwRTczMkFFRkRERUY1QzJEREE5MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlzZSXSlPUxq1kgcLw2KAzCHH
rnkijzNeYCBnEXjsb3AiFzcJwQ3LV7Hof1yJlRgGiBjh8fDMGxzNhpg1B41pKihq
htjHglvGJqkNvx1wO3f/fSIqrxhi7GXnFGyZZz29v2mlmKrgPipFMqXef+OCLGGZ
edZY1FZd749t7DeyWr7+N2Btr+PfPwQ4kujWjzmbkCkluPry8PZIR2r8MiQxaGj+
Y9a67ek1ZkTuPYsIRgp4737U54RcdZddQEhQ7AdinsD2aWsAa24+CxJD/aMyKFE0
ab6baufisFU3FjNjUuyhB/8Fzavs430qAxN7X//LM6A+A0HdOF5nmMKbNC8hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUq+ENT2mD67QwkOcyrv3e9cLdqTkwHwYDVR0j
BBgwFoAU6a6kBK/ax9WpoXVfOif/XK4S2nswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1NCdEVXbTJrRWJFc0VpeVpYZlRGMmJjMTRpVHpDem1NOFNUaWgxakp2
VHYvMC9FOUFFQTQwNEFGREFDN0Q1QTlBMTc1NUYzQTI3RkY1Q0FFMTJEQTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5QUVBNDA0QUZEQUM3RDVB
OUExNzU1RjNBMjdGRjVDQUUxMkRBN0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NTQnRFV20ya0ViRXNFaXlaWGZURjJiYzE0aVR6Q3ptTThTVGloMWpKdlR2LzAv
MzEzOTMxMmUzMjM0MzAyZTMyMzAzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzNzMwMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7/w0DANBgkqhkiG9w0BAQsFAAOCAQEAPc0r
+H68mKhsKVo7EsbvisBWJQ137HoW1RAV4cMm1AOtICHPBCskM00WmAtIFjWvEWzY
m5cr2DLmmhx7ryM3iZcbw4bqfBNpeZvuMXBIC7v3AX1OZEhxVcl+zoj2+3RcNXSJ
ZGRdArN3+/EhT/YQXxELRB0Iw7tKKR9XcELwem0E6L8nWbEYJvYF2ePebrguIB1z
cGE3QLIC7JEEco6nwrrs7jtZLQjKezOzkICMpphDvuvPTSJFbveRRz3LisfFTP/3
TkVhbjhTMxO+wuUzqm2ws5iRCT5TyHSAcSDBYx8SEDWxySQmuObpW3QfdRdNzwSy
BUVu1I52VDiayKSkzg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:08 2026 by rpki-client