This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hn4vtUSL6zJuYqeiQZuL9zvKtg9hXihXGzZHXHG2KgiT/0/3138392e3132342e302e302f32312d3234203d3e203238323138.roa
File:                     3138392e3132342e302e302f32312d3234203d3e203238323138.roa (raw, json)
Hash identifier:          iPJVxrlAwFAjDwe7VvpcruxzhYmlNS9ZtoPJE2HPPoI=
Subject key identifier:   6D:D8:54:D8:AF:2E:79:50:23:D4:66:DC:E5:77:1A:26:DE:5B:A4:70
Certificate issuer:       /CN=FB528EEE633EA671D10CEB9033E647D947783BA1
Certificate serial:       56C087E692669368A485D646271660F6276B514D
Authority key identifier: FB:52:8E:EE:63:3E:A6:71:D1:0C:EB:90:33:E6:47:D9:47:78:3B:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB528EEE633EA671D10CEB9033E647D947783BA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hn4vtUSL6zJuYqeiQZuL9zvKtg9hXihXGzZHXHG2KgiT/0/3138392e3132342e302e302f32312d3234203d3e203238323138.roa
Signing time:             Wed 14 Jan 2026 15:34:52 +0000
ROA not before:           Wed 14 Jan 2026 15:29:52 +0000
ROA not after:            Wed 13 Jan 2027 15:34:52 +0000
asID:                     28218
IP address blocks:        189.124.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hn4vtUSL6zJuYqeiQZuL9zvKtg9hXihXGzZHXHG2KgiT/0/FB528EEE633EA671D10CEB9033E647D947783BA1.crl
                          rsync://rpki-repo.registro.br/repo/Hn4vtUSL6zJuYqeiQZuL9zvKtg9hXihXGzZHXHG2KgiT/0/FB528EEE633EA671D10CEB9033E647D947783BA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB528EEE633EA671D10CEB9033E647D947783BA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c0:87:e6:92:66:93:68:a4:85:d6:46:27:16:60:f6:27:6b:51:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB528EEE633EA671D10CEB9033E647D947783BA1
        Validity
            Not Before: Jan 14 15:29:52 2026 GMT
            Not After : Jan 13 15:34:52 2027 GMT
        Subject: CN=6DD854D8AF2E795023D466DCE5771A26DE5BA470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:57:9f:80:4b:81:2f:ee:85:e4:c4:f1:08:
                    61:3c:3a:70:de:a6:72:11:3d:47:71:99:63:86:9b:
                    6a:47:a4:4c:20:9a:45:f8:aa:c0:a2:d5:ed:69:91:
                    ab:42:ec:59:eb:3d:e9:d1:7f:24:f8:30:a4:a2:48:
                    08:56:b0:46:d7:b9:b9:8a:4b:bc:ec:a6:3a:96:b2:
                    46:fa:ac:9f:29:34:8f:6a:30:65:bd:73:bc:c4:a4:
                    4b:01:b7:7d:8e:79:93:73:d2:5a:6f:74:8e:02:08:
                    76:db:96:c5:d3:4a:5b:51:92:da:cf:a1:80:b2:de:
                    90:25:cf:9a:0e:40:3c:e5:cb:9b:ed:51:d6:ce:85:
                    9d:2d:9d:c0:b9:9e:96:6c:03:b6:7a:70:7d:ce:7b:
                    4c:e7:6f:b7:97:76:c5:22:09:a1:cf:87:03:6f:60:
                    19:7e:ae:ad:ff:23:50:71:db:d1:f0:16:50:d4:88:
                    22:4c:73:89:9c:b7:64:d3:42:3e:11:cd:87:a7:23:
                    2c:d0:1f:66:57:8f:8b:80:b8:af:aa:69:6e:22:d3:
                    fa:37:00:47:03:5d:73:6a:66:b0:f1:91:4c:a5:3b:
                    5e:75:36:1e:03:a4:b3:af:00:ae:8d:a6:7a:a1:20:
                    d9:7a:05:50:af:71:e8:2f:c6:9a:ad:ca:c5:58:75:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D8:54:D8:AF:2E:79:50:23:D4:66:DC:E5:77:1A:26:DE:5B:A4:70
            X509v3 Authority Key Identifier:
                keyid:FB:52:8E:EE:63:3E:A6:71:D1:0C:EB:90:33:E6:47:D9:47:78:3B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hn4vtUSL6zJuYqeiQZuL9zvKtg9hXihXGzZHXHG2KgiT/0/FB528EEE633EA671D10CEB9033E647D947783BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB528EEE633EA671D10CEB9033E647D947783BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hn4vtUSL6zJuYqeiQZuL9zvKtg9hXihXGzZHXHG2KgiT/0/3138392e3132342e302e302f32312d3234203d3e203238323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:2e:0b:d3:2e:17:65:d0:b9:f9:fe:47:a4:2f:1d:98:81:3b:
         1f:90:aa:d2:4a:66:05:57:d3:fb:14:b1:45:44:07:30:41:17:
         27:13:71:e9:14:8e:5e:d7:5d:2e:ea:73:a9:4c:5a:55:4c:23:
         cd:a3:d2:1c:bc:e6:5a:70:2f:dc:41:69:17:b0:cc:56:b1:45:
         01:db:29:2b:c3:c4:4a:43:3f:1b:61:ac:2a:86:c6:a9:a6:f9:
         ba:66:1b:ec:4d:80:9f:50:55:45:07:a7:1d:91:80:63:d8:b2:
         7e:1b:1e:06:fd:49:c5:d7:08:2b:53:db:99:7b:2e:8c:2a:16:
         62:16:35:57:0b:56:09:f3:60:b7:17:e1:93:a9:7a:83:6e:5a:
         7d:df:ff:d8:27:35:42:d6:23:73:89:89:08:06:a7:da:a5:a0:
         8d:2a:a2:bb:00:f4:90:f1:37:63:9e:13:98:73:54:35:30:69:
         dc:c2:85:dd:0c:c0:29:c5:e2:29:37:9a:cd:94:bc:6a:b6:83:
         dc:f1:1e:6b:a6:1a:32:1d:04:a4:ff:03:4a:65:8c:88:fb:32:
         a6:f0:d1:86:cf:b0:46:17:55:6f:09:5c:b7:04:31:71:eb:9a:
         df:b9:ef:0f:b0:84:93:24:35:b5:68:04:f7:14:f6:2f:4a:7b:
         0b:61:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:16 2026 by rpki-client