This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          ++ugqH7qMsyxgNLQ32J4ivX4zvjk1Pqdamg3TT9MM3w=
Subject key identifier:   65:46:F9:77:9F:46:C5:7B:1A:38:18:38:76:DB:1B:B9:BD:BE:DE:E6
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       21DD55AE104FAFF0509728C68B46FB48E3BBDE17
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa
Signing time:             Wed 14 Jan 2026 13:46:00 +0000
ROA not before:           Wed 14 Jan 2026 13:41:00 +0000
ROA not after:            Wed 13 Jan 2027 13:46:00 +0000
asID:                     264886
IP address blocks:        201.49.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:dd:55:ae:10:4f:af:f0:50:97:28:c6:8b:46:fb:48:e3:bb:de:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jan 14 13:41:00 2026 GMT
            Not After : Jan 13 13:46:00 2027 GMT
        Subject: CN=6546F9779F46C57B1A38183876DB1BB9BDBEDEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:69:b6:e7:6e:ff:29:38:4a:78:e2:77:de:
                    09:4a:63:68:3c:a5:42:d8:07:3b:d9:4d:27:ff:5b:
                    2c:31:fb:3b:35:11:bb:16:79:4c:9b:98:3e:ea:1f:
                    f5:06:5b:06:ef:46:0e:ee:9c:32:e2:c5:4e:07:21:
                    b1:17:e7:07:66:77:53:9d:5c:5a:fb:94:9a:dc:73:
                    4b:78:5f:e0:da:5c:d2:08:e2:99:19:d1:82:2f:36:
                    47:f8:18:4b:06:6d:1c:ee:e7:d4:c9:29:53:92:5f:
                    0b:cd:c0:14:ee:93:3d:f7:41:8f:c5:64:64:1e:eb:
                    db:e8:d7:9f:13:ff:13:0a:c1:fb:0c:41:15:1e:a9:
                    87:f4:94:e8:76:a3:80:ca:4d:35:f6:fe:a0:60:14:
                    c8:6c:b8:71:f9:d6:65:a2:22:b6:0c:6b:56:d5:64:
                    b8:81:26:2a:62:f1:07:40:bd:8b:cb:4a:53:19:56:
                    ee:44:25:91:64:74:41:26:6d:68:3a:fd:12:b9:94:
                    5e:a4:f6:91:19:ae:e2:da:b8:3e:4a:5c:ca:f1:c4:
                    47:59:25:c2:4a:95:88:7c:d5:4d:2e:d8:9b:35:3a:
                    69:ee:0e:1c:2c:37:df:b0:8c:74:d7:bb:70:1f:21:
                    63:0a:96:27:1d:2e:0e:f9:b0:ba:6f:e9:1e:30:b5:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:46:F9:77:9F:46:C5:7B:1A:38:18:38:76:DB:1B:B9:BD:BE:DE:E6
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c6:2f:c1:37:69:f2:84:4b:8d:03:54:25:53:d8:94:d2:13:
         b6:4a:27:30:d2:5c:2d:99:83:67:e9:28:82:ed:b2:74:15:0b:
         7e:0b:0b:ff:87:8a:d3:ff:f8:55:a6:82:93:5b:88:a1:fe:f1:
         e3:40:27:4b:f3:fe:7c:fa:16:95:99:fa:9a:e6:35:ae:a3:f1:
         20:21:32:7a:96:a4:43:a6:7f:a8:26:02:dd:84:bb:b6:7f:4a:
         2d:d4:24:8a:11:d2:be:80:13:13:95:df:c3:a3:fa:51:73:5e:
         93:a2:5e:41:e2:7d:46:08:5f:5f:f6:b0:01:c1:04:5e:93:62:
         1b:5c:6a:f5:1d:56:eb:56:2f:b3:46:ee:a5:fb:6d:6b:f9:58:
         38:fb:7c:f0:72:21:89:41:c2:a5:c0:b2:4c:7f:60:79:b4:5c:
         4b:44:a7:df:c0:3a:4a:bf:11:d5:93:f6:17:f9:25:86:e8:a1:
         e8:dd:14:05:8e:48:c5:46:dd:2f:50:68:b2:17:42:d7:9e:29:
         71:08:86:0f:42:b4:7c:ad:73:73:fe:4d:d7:a3:d8:22:1d:b3:
         dd:8d:5a:c0:2c:eb:55:7c:b9:86:06:3a:30:3b:d1:b0:9a:d4:
         89:1a:5b:ab:a1:95:32:23:0d:77:3c:f7:29:27:4f:4f:49:d1:
         f6:1b:d6:da
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUId1VrhBPr/BQlyjGi0b7SOO73hcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNjAxMTQxMzQxMDBaFw0yNzAxMTMxMzQ2MDBaMDMxMTAvBgNV
BAMTKDY1NDZGOTc3OUY0NkM1N0IxQTM4MTgzODc2REIxQkI5QkRCRURFRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZ2m2527/KThKeOJ33glKY2g8
pULYBzvZTSf/Wywx+zs1EbsWeUybmD7qH/UGWwbvRg7unDLixU4HIbEX5wdmd1Od
XFr7lJrcc0t4X+DaXNII4pkZ0YIvNkf4GEsGbRzu59TJKVOSXwvNwBTukz33QY/F
ZGQe69vo158T/xMKwfsMQRUeqYf0lOh2o4DKTTX2/qBgFMhsuHH51mWiIrYMa1bV
ZLiBJipi8QdAvYvLSlMZVu5EJZFkdEEmbWg6/RK5lF6k9pEZruLauD5KXMrxxEdZ
JcJKlYh81U0u2Js1OmnuDhwsN9+wjHTXu3AfIWMKlicdLg75sLpv6R4wtR3vAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUZUb5d59GxXsaOBg4dtsbub2+3uYwHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz
MDMxMmUzNDM5MmUzMjMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQz
ODM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADJMeAwDQYJKoZIhvcNAQELBQADggEBAFTGL8E3afKE
S40DVCVT2JTSE7ZKJzDSXC2Zg2fpKILtsnQVC34LC/+HitP/+FWmgpNbiKH+8eNA
J0vz/nz6FpWZ+prmNa6j8SAhMnqWpEOmf6gmAt2Eu7Z/Si3UJIoR0r6AExOV38Oj
+lFzXpOiXkHifUYIX1/2sAHBBF6TYhtcavUdVutWL7NG7qX7bWv5WDj7fPByIYlB
wqXAskx/YHm0XEtEp9/AOkq/EdWT9hf5JYbooejdFAWOSMVG3S9QaLIXQteeKXEI
hg9CtHytc3P+Tdej2CIds92NWsAs61V8uYYGOjA70bCa1IkaW6uhlTIjDXc89ykn
T09J0fYb1to=
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:25:25 2026 by rpki-client