This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/3230302e3130362e3231322e302f32322d3233203d3e20323731323437.roa
File:                     3230302e3130362e3231322e302f32322d3233203d3e20323731323437.roa (raw, json)
Hash identifier:          3bi9+5vHjtEEQrwIFp4/Xix3vFyohqw85OORa3vGQaI=
Subject key identifier:   94:ED:23:33:2D:8C:DA:DD:F1:9C:73:4E:FC:13:55:C9:70:20:C5:52
Certificate issuer:       /CN=AC154D8D44795F5E54B65B3B1FF4584355304522
Certificate serial:       21489F54B29426CD9166621D916307546F6381E3
Authority key identifier: AC:15:4D:8D:44:79:5F:5E:54:B6:5B:3B:1F:F4:58:43:55:30:45:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/3230302e3130362e3231322e302f32322d3233203d3e20323731323437.roa
Signing time:             Fri 09 Jan 2026 15:47:37 +0000
ROA not before:           Fri 09 Jan 2026 15:42:37 +0000
ROA not after:            Fri 08 Jan 2027 15:47:37 +0000
asID:                     271247
IP address blocks:        200.106.212.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.crl
                          rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:48:9f:54:b2:94:26:cd:91:66:62:1d:91:63:07:54:6f:63:81:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC154D8D44795F5E54B65B3B1FF4584355304522
        Validity
            Not Before: Jan  9 15:42:37 2026 GMT
            Not After : Jan  8 15:47:37 2027 GMT
        Subject: CN=94ED23332D8CDADDF19C734EFC1355C97020C552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:14:0b:5e:38:4c:59:f4:27:2c:ab:f6:34:
                    47:14:ef:cd:10:a4:33:bd:b2:18:b5:6c:7a:0e:54:
                    18:ef:4f:56:14:fd:15:fa:9d:fe:b6:c6:98:70:67:
                    81:65:19:37:c3:63:7b:60:a2:cd:b3:3c:7f:99:a5:
                    24:21:72:46:ac:44:48:0f:a0:a0:e5:40:e0:4f:e3:
                    ca:c8:1b:f9:08:6d:d8:2d:1a:7e:a6:d5:15:cf:f0:
                    04:f9:31:7a:b7:82:ab:33:8b:7b:a9:39:28:e3:2c:
                    b8:e1:41:f0:ac:60:fd:91:50:b3:e5:21:f8:d7:35:
                    4d:55:b4:b3:8f:99:9c:6e:f8:01:1a:75:b4:c4:2d:
                    e1:ea:47:cb:67:e6:4f:3c:c4:a7:a9:0f:98:bf:f0:
                    48:df:9f:ef:a6:e2:b8:a4:e3:05:d6:2b:92:29:78:
                    a4:83:22:35:02:c9:16:1d:be:1d:42:b7:78:7e:a7:
                    bf:cf:ed:31:9d:8f:d9:a7:51:d4:2b:46:9c:a0:f4:
                    71:ed:03:c2:ad:23:bd:97:8a:82:5b:6a:41:e0:05:
                    6a:53:9e:c2:94:97:69:2e:c6:51:4c:aa:dd:e4:d8:
                    7a:9d:b1:a0:5b:b9:6c:d8:6e:b9:85:95:7c:5c:6e:
                    8d:af:1c:42:c8:a6:fd:26:d3:ba:a4:2d:8a:73:9f:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:23:33:2D:8C:DA:DD:F1:9C:73:4E:FC:13:55:C9:70:20:C5:52
            X509v3 Authority Key Identifier:
                keyid:AC:15:4D:8D:44:79:5F:5E:54:B6:5B:3B:1F:F4:58:43:55:30:45:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/AC154D8D44795F5E54B65B3B1FF4584355304522.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC154D8D44795F5E54B65B3B1FF4584355304522.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFke2hKCpZSEJUpstTXD86MPZLyEpP2fXf85ZdYd29XK/1/3230302e3130362e3231322e302f32322d3233203d3e20323731323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:c3:7d:68:25:da:1b:ce:fd:0e:58:76:a7:cd:d6:8a:c2:ce:
         6f:8d:e3:a6:2a:17:38:90:76:ad:11:fb:74:50:cf:0c:0f:16:
         3c:fe:91:7f:b5:cb:8c:af:c3:0c:ce:1c:b4:03:34:ad:a2:6d:
         e6:05:54:25:0f:ca:de:8d:39:09:ab:62:6e:13:e3:ab:22:b7:
         68:ca:95:cd:b2:27:bc:e0:4f:26:2a:b2:da:cc:7b:2f:ed:fd:
         43:9c:ea:c6:71:29:a5:0f:52:6f:63:a7:bd:25:06:04:21:6b:
         00:40:ba:67:72:49:68:32:ad:d3:3b:a9:d4:61:01:7e:47:e0:
         b1:66:70:29:de:f3:94:3d:9d:3b:bc:7c:41:f3:8c:c6:8e:62:
         05:14:67:f9:7d:ea:f3:cf:0b:54:f3:7a:b7:2f:d8:7a:3f:7b:
         d2:f0:db:84:12:3b:cb:77:1e:5e:3c:bf:11:6c:29:e3:b7:3f:
         66:a0:bd:c4:97:a7:55:4c:58:0b:aa:95:02:e3:25:e2:92:11:
         cd:79:0e:3d:0c:fa:15:35:7c:ba:da:2e:62:81:5c:f7:d0:b8:
         48:fb:ef:85:c4:b6:33:08:19:af:52:ec:c6:e1:97:e0:56:cc:
         d5:d4:2c:29:41:6e:0c:0c:00:d9:56:ed:d9:ab:39:34:e9:dd:
         49:34:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:38:59 2026 by rpki-client