This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa
File:                     3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa (raw, json)
Hash identifier:          6nSai82BJaPNq4K0RNqFhJyBOx580X/jd/bg/z91oVQ=
Subject key identifier:   FD:1B:BC:27:22:33:76:AE:A0:5B:A1:D2:1D:7D:E3:A7:97:21:A2:1A
Certificate issuer:       /CN=D57E60B6D121559190E71D8B78977B6B3567A1F3
Certificate serial:       32B51F2CD84D32D5C0B5CEA42A1C4F92CD7D83FA
Authority key identifier: D5:7E:60:B6:D1:21:55:91:90:E7:1D:8B:78:97:7B:6B:35:67:A1:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D57E60B6D121559190E71D8B78977B6B3567A1F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa
Signing time:             Fri 23 Jan 2026 15:29:15 +0000
ROA not before:           Fri 23 Jan 2026 15:24:15 +0000
ROA not after:            Fri 22 Jan 2027 15:29:15 +0000
asID:                     269167
IP address blocks:        138.118.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/D57E60B6D121559190E71D8B78977B6B3567A1F3.crl
                          rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/D57E60B6D121559190E71D8B78977B6B3567A1F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D57E60B6D121559190E71D8B78977B6B3567A1F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 00:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b5:1f:2c:d8:4d:32:d5:c0:b5:ce:a4:2a:1c:4f:92:cd:7d:83:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D57E60B6D121559190E71D8B78977B6B3567A1F3
        Validity
            Not Before: Jan 23 15:24:15 2026 GMT
            Not After : Jan 22 15:29:15 2027 GMT
        Subject: CN=FD1BBC27223376AEA05BA1D21D7DE3A79721A21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:b6:32:da:44:06:82:1d:f6:be:ef:0e:ed:
                    db:e0:70:5d:f3:84:d1:66:3e:e8:30:49:34:eb:a1:
                    23:67:d2:86:b9:64:2c:2d:50:7e:f0:eb:ff:97:db:
                    1d:cd:96:37:f7:f4:dc:6f:fa:0e:33:8e:72:81:94:
                    49:19:0d:49:1f:d2:1f:85:f7:77:2a:70:56:36:23:
                    58:1d:03:cb:70:6d:7b:16:65:fa:6b:87:91:ae:66:
                    5c:ea:82:c2:8d:8b:2c:b4:53:6d:d1:67:b8:bb:e4:
                    9d:5a:b7:a3:a5:71:9f:4f:51:94:3a:d5:98:51:1c:
                    8b:6b:25:fd:39:36:52:e5:81:ff:b9:0a:52:9e:b0:
                    86:ae:dd:38:0f:4f:5d:1b:6b:31:ca:98:71:a1:23:
                    25:cc:80:d3:93:ab:d6:5b:22:1c:04:74:6a:c6:93:
                    22:bc:60:42:c5:01:49:ee:c2:75:25:ad:9c:7f:39:
                    e5:4c:d6:61:46:cd:e5:ca:84:a3:9e:64:70:57:9e:
                    a7:1a:98:7a:29:da:6b:92:67:21:c5:51:f2:d5:26:
                    3e:37:b8:9c:94:e9:fb:06:52:fe:8a:2e:26:01:89:
                    1e:18:a8:ad:04:11:49:1f:77:e4:a1:1e:98:0f:d2:
                    4a:43:44:c4:2f:bd:a2:13:44:6c:08:9d:29:8b:6b:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1B:BC:27:22:33:76:AE:A0:5B:A1:D2:1D:7D:E3:A7:97:21:A2:1A
            X509v3 Authority Key Identifier:
                keyid:D5:7E:60:B6:D1:21:55:91:90:E7:1D:8B:78:97:7B:6B:35:67:A1:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/D57E60B6D121559190E71D8B78977B6B3567A1F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D57E60B6D121559190E71D8B78977B6B3567A1F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/0/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:6b:59:f8:6a:13:c9:95:9d:67:c2:5b:47:12:86:9e:2f:95:
         e7:1f:77:33:d3:50:ff:a1:c4:2a:57:9d:8e:25:79:94:15:a4:
         f0:9f:5a:4d:09:9f:03:10:8b:fa:a7:74:f5:87:e5:3d:ad:25:
         5f:28:e4:b3:0d:77:fa:97:d7:8d:96:f5:ab:aa:8b:91:c5:f2:
         cd:20:0f:ef:57:81:78:e6:02:9a:ae:81:ee:6b:31:9b:c9:99:
         03:cd:96:e1:6f:d0:a9:b8:22:9b:1c:cd:0d:bf:ed:3a:58:b2:
         66:85:cd:6a:41:b9:24:49:ca:f5:eb:8d:88:c5:43:1a:d6:a1:
         ea:20:4d:c7:71:56:2c:2f:67:80:26:d0:20:0a:95:cd:da:85:
         f1:9d:d5:c2:64:97:75:48:19:b7:65:79:94:fe:cb:9f:4f:88:
         bd:92:49:67:ff:d5:36:34:00:49:9c:95:3b:d2:73:a5:e4:13:
         47:8b:a1:a0:9d:13:d6:28:e0:a8:6a:cd:38:b0:4c:e7:86:2a:
         2b:a3:95:d8:eb:38:cd:8a:4e:44:93:65:a6:33:3c:c1:ec:ff:
         de:b4:c6:cb:35:1d:82:81:cf:de:34:e3:15:e6:9c:0c:88:92:
         b1:98:3b:90:ca:77:eb:e3:85:32:b2:a6:15:0c:93:bb:2e:98:
         c9:df:af:97
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMrUfLNhNMtXAtc6kKhxPks19g/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU3RTYwQjZEMTIxNTU5MTkwRTcxRDhCNzg5NzdCNkIz
NTY3QTFGMzAeFw0yNjAxMjMxNTI0MTVaFw0yNzAxMjIxNTI5MTVaMDMxMTAvBgNV
BAMTKEZEMUJCQzI3MjIzMzc2QUVBMDVCQTFEMjFEN0RFM0E3OTcyMUEyMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkB7Yy2kQGgh32vu8O7dvgcF3z
hNFmPugwSTTroSNn0oa5ZCwtUH7w6/+X2x3Nljf39Nxv+g4zjnKBlEkZDUkf0h+F
93cqcFY2I1gdA8twbXsWZfprh5GuZlzqgsKNiyy0U23RZ7i75J1at6OlcZ9PUZQ6
1ZhRHItrJf05NlLlgf+5ClKesIau3TgPT10bazHKmHGhIyXMgNOTq9ZbIhwEdGrG
kyK8YELFAUnuwnUlrZx/OeVM1mFGzeXKhKOeZHBXnqcamHop2muSZyHFUfLVJj43
uJyU6fsGUv6KLiYBiR4YqK0EEUkfd+ShHpgP0kpDRMQvvaITRGwInSmLa4fRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/Ru8JyIzdq6gW6HSHX3jp5chohowHwYDVR0j
BBgwFoAU1X5gttEhVZGQ5x2LeJd7azVnofMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJzN3h1QTIyak11TXNOUWZWYk56VHpQSDZOY0RWYU40d3RyTkFyR3dx
dlMvMC9ENTdFNjBCNkQxMjE1NTkxOTBFNzFEOEI3ODk3N0I2QjM1NjdBMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1N0U2MEI2RDEyMTU1OTE5
MEU3MUQ4Qjc4OTc3QjZCMzU2N0ExRjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSczd4dUEyMmpNdU1zTlFmVmJOelR6UEg2TmNEVmFONHd0ck5Bckd3cXZTLzAv
MzEzMzM4MmUzMTMxMzgyZTMxMzgzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzOTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop2vDANBgkqhkiG9w0BAQsFAAOCAQEAM2tZ
+GoTyZWdZ8JbRxKGni+V5x93M9NQ/6HEKledjiV5lBWk8J9aTQmfAxCL+qd09Yfl
Pa0lXyjksw13+pfXjZb1q6qLkcXyzSAP71eBeOYCmq6B7msxm8mZA82W4W/Qqbgi
mxzNDb/tOliyZoXNakG5JEnK9euNiMVDGtah6iBNx3FWLC9ngCbQIAqVzdqF8Z3V
wmSXdUgZt2V5lP7Ln0+IvZJJZ//VNjQASZyVO9JzpeQTR4uhoJ0T1ijgqGrNOLBM
54YqK6OV2Os4zYpORJNlpjM8wez/3rTGyzUdgoHP3jTjFeacDIiSsZg7kMp36+OF
MrKmFQyTuy6Yyd+vlw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:02:14 2026 by rpki-client