This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130362e302f32342d3234203d3e203533313038.roa
File:                     3136372e3234392e3130362e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          xDhGJOisNOboSPeNcQBVe/pqh85jDyk47w7dm2lfOAw=
Subject key identifier:   BC:1D:06:27:DB:E0:6E:8F:58:92:CC:7A:D9:3D:BD:31:AF:5A:BD:D1
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       4AAFA38DB06DF88FC4CCCDD7A8FB00831E6541A3
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130362e302f32342d3234203d3e203533313038.roa
Signing time:             Tue 13 Jan 2026 13:00:02 +0000
ROA not before:           Tue 13 Jan 2026 12:55:02 +0000
ROA not after:            Tue 12 Jan 2027 13:00:02 +0000
asID:                     53108
IP address blocks:        167.249.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:af:a3:8d:b0:6d:f8:8f:c4:cc:cd:d7:a8:fb:00:83:1e:65:41:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 13 12:55:02 2026 GMT
            Not After : Jan 12 13:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:82:ce:41:27:f8:48:ea:09:7f:60:b7:45:
                    09:4c:20:f2:a3:b0:cb:08:e9:c2:e8:67:0d:1d:65:
                    45:92:62:1c:67:e2:18:5d:0b:7c:ed:a3:8f:0c:b9:
                    bd:69:1f:18:a6:47:09:34:1f:67:1f:5c:67:8a:2c:
                    2b:fe:56:5e:12:9b:ef:34:be:0c:64:a3:45:a3:6b:
                    bf:3a:af:3a:cd:22:2b:d4:c6:f7:68:85:4b:7a:78:
                    c5:78:17:e5:07:4e:54:be:5d:e5:8e:aa:62:78:4e:
                    df:0c:99:e4:a2:2d:f3:12:02:72:bb:62:60:a2:4c:
                    49:65:30:66:49:4d:a0:b3:1d:fc:b5:d8:99:32:fa:
                    c9:06:86:d4:53:3d:93:92:23:4f:b1:21:8f:17:b4:
                    60:71:98:e2:ec:a0:c9:84:5a:6f:0b:58:84:ce:8f:
                    59:63:b9:61:d4:e0:e6:2d:dd:50:4b:6e:89:41:ba:
                    1f:9b:0f:30:14:e5:a8:bb:68:ac:a4:5d:41:02:42:
                    e3:c4:f6:3d:ad:e6:46:a3:a5:86:f2:a3:3c:68:06:
                    64:37:00:3d:65:02:0b:68:62:e1:56:f8:b0:37:67:
                    6d:db:5c:10:d8:2f:b7:85:82:16:dc:bb:50:7c:ec:
                    4d:2d:91:6f:38:10:6c:b7:2b:c7:97:71:34:42:f1:
                    54:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:06:27:DB:E0:6E:8F:58:92:CC:7A:D9:3D:BD:31:AF:5A:BD:D1
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130362e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:9a:bd:5b:aa:9c:20:71:45:ed:b2:b8:55:3a:75:d5:46:4b:
         cc:f6:dc:bf:83:94:cd:04:05:d2:ed:c4:db:79:2f:bb:39:49:
         ea:75:55:d5:bb:50:97:f5:71:86:f3:f7:6c:15:eb:4b:79:42:
         02:7f:49:68:1c:f1:fc:7f:26:f3:e5:f3:0d:68:1c:b5:b3:92:
         a4:f7:9e:14:82:6b:98:21:c6:93:31:7e:08:28:7b:61:be:49:
         32:6d:f7:6c:16:4c:de:fe:42:1d:f6:0d:86:bf:06:65:ca:fe:
         f8:9d:69:ff:84:63:51:79:b9:10:c4:ee:c7:32:ab:d1:93:74:
         53:e6:f7:b1:1d:4d:f4:28:2b:df:04:cd:dd:28:a1:0f:18:e8:
         a0:5f:76:bb:e2:3e:7f:a9:b2:d4:4e:92:b4:e2:c6:f1:3a:3c:
         2b:36:f5:a3:3d:76:15:cb:dd:bd:de:bd:a0:69:b4:49:56:80:
         9c:98:13:d3:b7:31:3d:bb:59:93:64:3b:9a:97:c9:96:39:12:
         c7:44:43:f8:2d:64:9c:b6:1f:15:a2:82:fc:ff:2d:d8:4c:a2:
         c2:4d:4e:38:a2:23:8a:ed:00:84:f5:5d:de:26:8e:e6:f7:50:
         65:f2:2a:74:bf:7b:19:37:ab:27:8f:20:66:c1:0e:5c:17:06:
         94:c4:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:32 2026 by rpki-client