This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa
File:                     3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa (raw, json)
Hash identifier:          ayaNax4Cw2y8qb4GbPzr68tbqtw7CyLzvM4rGoe554A=
Subject key identifier:   CF:B5:07:8F:81:65:EA:2B:C2:01:A1:59:7A:94:79:30:7A:CD:84:A8
Certificate issuer:       /CN=CE4A495E5B6607ACF501EEC8AD41166BA1F809FC
Certificate serial:       5AA7B68EF1B36445C6C2C01C6CB4B1E83265534F
Authority key identifier: CE:4A:49:5E:5B:66:07:AC:F5:01:EE:C8:AD:41:16:6B:A1:F8:09:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa
Signing time:             Sun 18 Jan 2026 14:06:21 +0000
ROA not before:           Sun 18 Jan 2026 14:01:21 +0000
ROA not after:            Sun 17 Jan 2027 14:06:21 +0000
asID:                     270632
IP address blocks:        189.126.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.crl
                          rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a7:b6:8e:f1:b3:64:45:c6:c2:c0:1c:6c:b4:b1:e8:32:65:53:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4A495E5B6607ACF501EEC8AD41166BA1F809FC
        Validity
            Not Before: Jan 18 14:01:21 2026 GMT
            Not After : Jan 17 14:06:21 2027 GMT
        Subject: CN=CFB5078F8165EA2BC201A1597A9479307ACD84A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:80:f6:90:13:db:7d:c4:63:ac:2f:7f:7e:
                    8e:3d:5a:c4:81:0a:fe:ae:3a:a0:91:b6:e2:4f:fb:
                    b2:0e:bb:88:d8:0a:5f:91:30:2a:2d:c5:9e:64:bc:
                    4a:93:6c:c9:9d:e3:0c:b9:68:a9:a7:13:e2:ce:8c:
                    90:61:1a:6e:e0:2d:76:03:15:b0:c5:5d:58:c2:aa:
                    6c:70:04:37:48:8e:57:b4:09:1b:b4:67:40:bf:e2:
                    81:a6:8f:2e:6e:1e:64:fe:bc:52:bf:c6:b9:95:4e:
                    9f:72:bc:57:2d:ec:6e:90:86:a5:0b:a5:3c:ec:c2:
                    89:d9:39:3d:5c:38:ed:68:8f:fb:cc:0b:f6:9c:19:
                    19:7d:d0:ac:8c:48:80:cb:58:8f:40:b5:6d:bb:91:
                    ea:2b:5e:60:2e:e6:91:c1:60:f3:15:30:60:22:22:
                    3e:94:6b:27:95:96:6b:fc:ed:14:af:17:62:3f:18:
                    c9:73:92:76:42:20:e0:33:20:2f:68:8d:2f:06:c0:
                    c2:39:67:fb:a1:15:0c:f9:0b:df:3a:8a:17:38:b4:
                    52:6c:12:9a:47:e7:00:f9:d5:fe:9b:a8:61:b3:21:
                    e0:57:d4:ea:39:7a:10:3e:7f:37:0e:35:47:cc:68:
                    65:b5:3f:7c:fe:f2:1c:95:3b:4a:5b:cc:66:5e:f6:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B5:07:8F:81:65:EA:2B:C2:01:A1:59:7A:94:79:30:7A:CD:84:A8
            X509v3 Authority Key Identifier:
                keyid:CE:4A:49:5E:5B:66:07:AC:F5:01:EE:C8:AD:41:16:6B:A1:F8:09:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:fa:fa:10:d2:bc:ce:8e:56:83:11:5a:b2:23:cd:ff:1b:
         13:e9:e9:5f:1d:1c:cd:6a:2d:80:e0:21:a4:b3:a2:5d:46:d9:
         ae:4c:ee:b9:01:76:c1:7e:67:26:3f:c2:01:74:67:cf:0e:14:
         1f:67:20:5e:c0:e1:6a:db:84:9f:c1:f1:18:2d:f9:1e:52:31:
         5e:58:e1:87:b1:d9:e4:08:64:b8:56:7f:a6:7b:53:81:db:c4:
         d6:57:22:f6:4f:84:f2:ec:53:55:ce:fb:b9:54:eb:97:5c:9b:
         33:59:a6:cf:9b:09:af:77:08:18:7b:29:36:4d:0f:9d:8b:a2:
         f7:3e:69:02:67:a4:fd:52:43:c0:cf:1a:74:22:9b:64:85:90:
         e0:8f:ac:30:d0:57:e1:52:ac:9c:f8:25:dd:a4:1c:8b:00:6e:
         f3:a2:06:29:f9:c1:d8:4c:34:c7:09:be:2c:26:7c:3a:8f:a9:
         a3:31:e6:a5:19:3a:d9:02:bb:38:10:e3:8f:8f:fb:ee:f2:61:
         ff:55:aa:46:85:54:b3:c1:f7:9a:63:64:d1:45:7a:38:5a:1d:
         98:f4:cd:a0:33:e8:38:a3:b8:2b:1f:95:c5:1f:69:00:fe:32:
         5b:54:e9:a6:b4:3f:2e:06:50:e6:bd:de:66:6f:03:ca:b5:c8:
         e8:b1:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:32 2026 by rpki-client