This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          yDVdGefqd/JPquVpOo1etJWmqeotROjXdnZ1AmqUSek=
Subject key identifier:   8A:AA:B8:6B:D1:E0:94:FF:88:33:CE:9A:AB:E2:18:D0:16:C8:98:ED
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       22577F47E284A75D7D18C38C87C42A5B1EE0B749
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa
Signing time:             Wed 14 Jan 2026 13:46:00 +0000
ROA not before:           Wed 14 Jan 2026 13:41:00 +0000
ROA not after:            Wed 13 Jan 2027 13:46:00 +0000
asID:                     264886
IP address blocks:        201.49.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:57:7f:47:e2:84:a7:5d:7d:18:c3:8c:87:c4:2a:5b:1e:e0:b7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jan 14 13:41:00 2026 GMT
            Not After : Jan 13 13:46:00 2027 GMT
        Subject: CN=8AAAB86BD1E094FF8833CE9AABE218D016C898ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:d8:d6:d2:63:52:f1:a1:50:ee:af:52:4e:
                    0d:fb:06:75:a9:b3:dc:0b:1c:de:7a:1c:1c:f3:0f:
                    c0:41:b1:d0:72:ea:b1:99:65:bc:18:8a:0e:78:5b:
                    b8:43:ae:a2:3b:85:6e:aa:6b:97:87:52:a7:54:8f:
                    c9:5f:23:d0:72:7d:a4:c6:3b:a7:54:6c:e4:8e:0a:
                    8c:76:c3:2c:ac:c7:3b:ae:f7:63:69:bf:75:f1:96:
                    bb:56:82:4b:58:dd:80:69:b5:64:c5:4e:df:68:e1:
                    2a:05:f2:92:ab:af:e8:03:a7:86:4f:09:f8:94:46:
                    75:a0:79:33:d9:75:60:70:7e:ea:06:03:94:13:56:
                    16:e8:3a:7c:9b:74:2a:79:ce:38:7b:8d:8f:4e:63:
                    22:f2:dd:a9:34:2e:f0:97:a7:10:60:fd:51:fa:fd:
                    a3:c4:55:b5:f5:bf:9c:a8:d8:40:32:63:1e:94:72:
                    46:7b:06:3f:7d:75:48:42:6f:a2:a0:d7:55:82:eb:
                    86:e9:b8:35:26:e3:e4:1a:60:e4:75:1c:b1:45:d2:
                    37:d0:f7:fe:d6:2e:da:09:fd:78:46:16:db:33:8a:
                    51:9a:a4:19:75:dd:f5:bb:24:34:4b:e8:58:eb:ca:
                    3e:fd:45:54:4f:8c:d0:48:0c:bf:f5:02:91:c2:7a:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AA:B8:6B:D1:E0:94:FF:88:33:CE:9A:AB:E2:18:D0:16:C8:98:ED
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:af:e2:90:96:b7:e5:3e:30:68:bd:5a:71:1e:d0:8c:e2:5e:
         8f:4e:83:96:76:52:f0:08:ee:7a:99:f3:11:30:c0:58:11:55:
         c9:19:fa:31:54:5c:21:2b:c2:97:a9:84:08:8c:f4:5a:b3:3d:
         a2:84:70:39:6d:03:43:c2:58:aa:35:7b:ce:cb:26:af:fc:74:
         a7:36:30:a8:a3:d9:3a:28:28:33:f3:f0:8f:c0:3c:ab:cd:e9:
         cd:dc:d1:ad:d1:b2:fc:91:92:f2:32:8f:ef:e3:bc:c9:b6:42:
         8c:dc:25:ce:df:1a:73:9f:f8:83:50:89:ec:1b:be:ff:59:07:
         a6:fc:e8:83:c2:4b:38:11:4e:18:62:a6:aa:09:5b:fc:da:bf:
         93:e4:87:b2:84:85:3e:fc:78:6f:df:af:5e:20:3c:b2:51:08:
         aa:84:33:2e:07:92:68:53:39:8d:57:2d:2d:ff:3e:dc:9c:1d:
         59:a6:20:11:ea:ae:ba:5f:3c:09:51:af:61:6a:73:ee:87:02:
         19:c4:a5:1f:37:4b:63:8d:91:91:6b:be:4a:a2:df:1a:aa:e0:
         e8:0d:c6:f3:1f:a3:38:3e:6f:c2:ca:d3:bd:38:42:f4:8b:cb:
         b8:8e:16:4f:fa:f2:db:28:5f:92:3b:ee:b8:9c:b8:16:f2:6e:
         4c:d7:7f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:26:03 2026 by rpki-client