This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130372e302f32342d3234203d3e203533313038.roa
File:                     3136372e3234392e3130372e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          6N4Voqb9OECvfdeeR1oVAwiefZLWdzStjkI6qYowBrE=
Subject key identifier:   B6:F8:BE:E2:24:6C:CE:9A:EE:D2:F7:12:CA:2A:CD:41:DF:DF:BF:AF
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       0C01B2B40558C9D618EB6288322966B6077331E4
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130372e302f32342d3234203d3e203533313038.roa
Signing time:             Tue 13 Jan 2026 13:00:02 +0000
ROA not before:           Tue 13 Jan 2026 12:55:02 +0000
ROA not after:            Tue 12 Jan 2027 13:00:02 +0000
asID:                     53108
IP address blocks:        167.249.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:01:b2:b4:05:58:c9:d6:18:eb:62:88:32:29:66:b6:07:73:31:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 13 12:55:02 2026 GMT
            Not After : Jan 12 13:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:01:db:87:7d:b3:a7:48:ac:f0:33:78:d0:
                    d1:34:0b:b9:26:b4:e8:6f:39:27:18:cf:ba:72:18:
                    9e:b9:e6:c1:04:8f:2a:1a:b0:a6:2e:c6:b5:8d:4f:
                    99:3c:51:79:d9:38:87:25:e1:02:5e:a1:b0:63:18:
                    2f:61:5e:0a:f6:e9:73:4c:dd:55:11:aa:e0:88:46:
                    bc:5b:aa:05:20:32:d3:5d:f0:98:31:01:48:1c:4b:
                    92:a5:ef:e2:e4:ff:fc:74:05:b7:37:4f:e9:e5:4f:
                    fd:ee:e3:4f:7f:b6:30:ec:2c:a8:f0:ad:12:5c:6d:
                    6f:f0:b2:25:18:d6:ce:47:c7:0c:2e:44:a2:78:cd:
                    4e:21:b4:46:7d:b3:e4:97:09:48:72:de:ea:e7:6d:
                    fd:c1:92:d3:34:f6:d7:2a:f4:ca:c3:c5:ab:34:4a:
                    35:ab:68:53:76:63:ae:f1:7a:db:fd:97:b4:c6:67:
                    e4:cd:d9:fd:c1:43:09:1e:69:1e:13:68:02:a2:63:
                    2e:92:42:0f:2a:ba:5c:00:dd:58:14:e6:ec:fd:58:
                    f8:98:43:e1:8c:0c:fc:3a:b7:98:98:86:7f:9c:65:
                    38:46:63:b9:19:e4:5e:f9:a7:cc:d4:c8:59:f9:13:
                    7d:47:7f:7a:d0:eb:b8:6c:b7:e7:04:09:56:05:94:
                    95:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F8:BE:E2:24:6C:CE:9A:EE:D2:F7:12:CA:2A:CD:41:DF:DF:BF:AF
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130372e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:f3:e9:7d:32:ad:e6:24:b9:74:d5:aa:a4:d9:e6:fa:94:
         72:65:fe:84:bc:ee:80:cd:cc:6a:4b:c8:2a:c4:ea:be:6c:92:
         0c:bc:ed:81:f7:5e:cd:71:6f:a8:23:61:6c:bc:2e:fc:fd:63:
         35:7a:eb:cd:46:28:60:31:ba:62:31:ed:49:aa:f7:22:39:09:
         1e:f4:d0:69:6f:1d:18:6f:24:f2:61:19:81:10:19:d7:92:91:
         32:a5:9a:1d:e3:9a:30:e3:d5:0f:75:2d:41:31:06:9c:78:bc:
         b4:bc:c4:5e:5a:0b:f1:b7:00:80:4c:1b:9c:e1:80:a2:b4:f0:
         68:13:e3:0d:1f:fe:a8:a1:42:69:87:d2:8f:ca:19:87:a1:c7:
         3b:d4:0b:25:02:1b:a6:6f:da:29:f9:8b:9f:92:ad:3d:39:a0:
         96:59:70:32:1d:92:c1:01:a8:f2:a3:56:40:96:84:9f:d8:48:
         ee:ec:3a:fd:bf:19:5f:5c:ef:f0:9b:b1:cf:c8:bd:46:43:e6:
         d6:a8:5a:0a:a7:15:40:af:b1:fd:f9:16:b5:f3:d7:0c:4b:a0:
         b8:42:8f:b2:c0:1c:a3:e0:3a:22:86:0c:55:e6:4c:cf:d2:e7:
         69:cd:06:65:c9:b8:14:37:3a:eb:92:4d:8a:18:49:12:b8:3c:
         d9:a3:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----