This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230302e31312e382e302f32312d3234203d3e20323632393037.roa
File:                     3230302e31312e382e302f32312d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          p8vL7KX0dUxQGCALsElCBO/qAqp93sEpzREI3dYMd+M=
Subject key identifier:   73:64:C8:EB:F9:8E:DA:86:BA:64:41:3D:80:B2:79:95:0F:53:B6:99
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       40D7F325AA63494940DEBBD5E5CFBBDB28A2F669
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230302e31312e382e302f32312d3234203d3e20323632393037.roa
Signing time:             Thu 08 Jan 2026 12:16:13 +0000
ROA not before:           Thu 08 Jan 2026 12:11:13 +0000
ROA not after:            Thu 07 Jan 2027 12:16:13 +0000
asID:                     262907
IP address blocks:        200.11.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d7:f3:25:aa:63:49:49:40:de:bb:d5:e5:cf:bb:db:28:a2:f6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Jan  8 12:11:13 2026 GMT
            Not After : Jan  7 12:16:13 2027 GMT
        Subject: CN=7364C8EBF98EDA86BA64413D80B279950F53B699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:1c:70:a7:53:47:41:cc:ee:9b:06:47:bb:
                    cb:94:f8:da:e2:ac:4b:fd:89:72:99:07:a8:28:2f:
                    24:1a:9f:64:3b:1b:64:39:20:70:fa:29:87:bd:67:
                    ca:7a:c2:5b:7a:a4:af:43:2c:0b:65:ab:50:cf:03:
                    d6:13:30:78:9f:2a:da:80:c5:17:f8:09:22:98:01:
                    b9:16:20:6f:6d:2a:fe:1c:19:cc:48:8b:0e:6b:d5:
                    b6:72:52:3b:0d:12:ee:d8:06:a9:da:8f:12:81:c8:
                    72:82:24:8f:1a:46:1e:7f:8c:1f:1d:2e:89:f2:fc:
                    80:32:4b:00:7a:a7:e6:54:21:72:e9:8b:b1:47:9c:
                    1d:49:da:a2:c1:ee:6b:65:03:c7:1a:70:f9:63:fd:
                    b8:0f:32:4f:00:3a:63:73:c2:ec:df:e5:2a:0f:d1:
                    3f:53:1e:69:7e:fe:b0:49:b5:e3:7e:e4:aa:3b:64:
                    0c:d4:8e:79:35:41:05:4e:b7:5e:8f:fe:12:66:3f:
                    32:a6:35:8a:82:e4:23:5b:1b:88:e0:e8:3b:6d:a8:
                    8d:05:e8:2f:c4:86:df:8e:f4:41:8f:80:c0:1c:a9:
                    4b:6e:93:dd:ba:f6:ea:8b:09:88:e1:96:a7:03:b0:
                    72:83:be:f8:aa:a7:c7:d2:57:f4:c5:21:a6:8d:70:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:64:C8:EB:F9:8E:DA:86:BA:64:41:3D:80:B2:79:95:0F:53:B6:99
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230302e31312e382e302f32312d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:89:27:81:ee:72:69:42:e0:27:a7:f5:72:0c:d0:13:b7:
         1a:9d:92:25:13:b8:75:04:8a:cf:a1:aa:da:bd:ab:d8:18:f7:
         a8:74:cd:b4:7f:f9:6e:b7:54:f1:87:09:dd:2f:bc:f9:76:e3:
         7b:3e:14:4f:30:ba:4f:36:2b:65:fe:07:ba:79:1e:e0:78:62:
         0d:4a:be:43:bf:75:97:a2:c3:f2:31:80:2b:89:05:5c:64:1b:
         f3:b0:84:7f:18:10:e9:b4:8e:bf:8f:8f:1b:35:29:cf:8d:f1:
         14:0d:f7:8b:a4:d7:b7:28:41:87:55:02:a3:79:9a:81:2f:8c:
         ab:02:44:65:ea:9b:05:eb:a0:a1:2d:a6:c1:99:94:22:05:d1:
         e5:37:1b:25:e7:e8:df:16:65:b4:2a:1b:75:b6:c8:54:00:cb:
         31:9b:1c:8f:74:e3:84:61:ef:b1:1e:64:a5:bd:21:4d:4c:51:
         8a:b6:37:40:38:10:14:a1:21:79:a4:c1:a4:06:4c:4b:69:2a:
         02:c5:b7:58:6b:d4:ea:43:60:fb:34:3b:d3:9b:dd:a7:ae:6e:
         aa:3d:b2:60:4f:5c:62:a2:84:86:dd:a2:8b:e7:19:b7:b3:92:
         99:7d:bf:e5:88:0f:07:d3:1b:77:26:1a:e2:64:9d:58:1f:54:
         13:06:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:44:30 2026 by rpki-client