This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3139302e38392e3130342e302f32322d3234203d3e20323632333931.roa
File:                     3139302e38392e3130342e302f32322d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          u304RNgF6iiNu+mPDqT0yDG4DIJBiFusuHbG4sK1zyI=
Subject key identifier:   E8:6A:83:F9:CE:B3:D5:94:B9:2E:E4:B6:1F:9A:A2:F0:04:3A:2E:4F
Certificate issuer:       /CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
Certificate serial:       7A7E535C29B2A4D680D65E8916D71CF159A86303
Authority key identifier: 87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3139302e38392e3130342e302f32322d3234203d3e20323632333931.roa
Signing time:             Fri 16 Jan 2026 17:26:02 +0000
ROA not before:           Fri 16 Jan 2026 17:21:02 +0000
ROA not after:            Fri 15 Jan 2027 17:26:02 +0000
asID:                     262391
IP address blocks:        190.89.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7e:53:5c:29:b2:a4:d6:80:d6:5e:89:16:d7:1c:f1:59:a8:63:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
        Validity
            Not Before: Jan 16 17:21:02 2026 GMT
            Not After : Jan 15 17:26:02 2027 GMT
        Subject: CN=E86A83F9CEB3D594B92EE4B61F9AA2F0043A2E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:5f:91:cb:f5:6f:63:d0:50:b7:a9:a9:98:
                    cb:ce:d1:cf:2f:da:ff:7d:de:b0:aa:ee:39:e9:3f:
                    b5:92:b9:30:a5:ba:ae:e1:03:9e:03:1a:b5:70:76:
                    a2:53:85:79:dc:3f:08:bb:86:38:d3:e7:06:da:0d:
                    95:9a:f4:46:7a:1f:76:ff:b2:98:47:27:f4:56:8e:
                    29:c1:63:4b:46:94:5a:6e:52:53:cf:26:60:b0:74:
                    98:37:16:22:21:c3:45:dd:23:d8:f1:7a:fa:e8:9e:
                    dc:0f:ec:1e:d0:d7:d4:b4:ae:3b:c9:87:b5:28:87:
                    89:7d:fb:06:d4:8f:ce:bb:a2:5b:b0:10:d4:5b:12:
                    b3:76:f5:c9:4c:20:89:06:c0:b3:11:3d:58:42:d5:
                    3b:8d:64:8d:2f:a0:78:d3:78:69:af:5f:48:03:15:
                    53:0c:ce:8d:21:27:4e:b2:34:d1:56:a8:41:1a:0c:
                    7c:a0:5c:27:f1:2b:19:77:ed:48:a4:cc:22:d4:1b:
                    20:44:ec:71:e8:ad:c8:c4:37:9c:40:96:91:fe:a5:
                    ea:a3:4a:d3:54:46:f0:cf:e7:24:aa:cc:d8:6c:3b:
                    55:69:a1:b7:3b:6d:f2:82:ff:62:4d:16:4e:c5:a6:
                    82:ef:af:e3:ef:09:b5:c3:8e:6f:c6:38:a4:bf:12:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6A:83:F9:CE:B3:D5:94:B9:2E:E4:B6:1F:9A:A2:F0:04:3A:2E:4F
            X509v3 Authority Key Identifier:
                keyid:87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/3139302e38392e3130342e302f32322d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:0d:e8:f5:5d:dd:01:68:49:15:5d:5b:7d:78:f2:ac:30:00:
         36:00:ba:64:74:2b:3c:c8:67:db:89:d9:04:68:fe:00:6c:17:
         12:6c:e4:45:7f:53:11:3b:15:3c:0e:30:ab:d5:7a:e8:32:c5:
         fb:0c:3e:06:0b:7f:01:7f:11:95:cb:86:06:38:cc:bf:90:8d:
         60:68:46:78:f4:29:00:53:32:7e:8b:49:fc:21:39:2b:b0:80:
         03:5f:f0:d2:80:b5:79:b8:0d:6c:dd:ef:28:ba:b0:28:d9:25:
         84:a5:e1:e5:cb:70:93:8f:4d:2e:c6:2b:7d:ac:4b:3d:c9:0b:
         52:34:5c:6b:c1:4c:a8:67:87:2e:94:85:a0:f9:72:18:92:56:
         49:61:5d:4d:77:e5:26:c2:16:0d:1c:f3:05:27:de:70:07:7e:
         03:e9:f0:a9:c8:19:cd:56:b4:8e:84:d2:6e:05:99:2b:2d:d6:
         8d:69:2d:dc:b5:46:4f:94:90:52:d7:8b:0e:cc:a5:6c:15:07:
         3b:bf:c1:ce:36:ad:ca:0c:c1:29:41:99:f6:a8:57:74:50:35:
         4c:23:26:37:9a:9d:0e:2a:43:bb:f4:a7:07:4a:71:4d:36:e4:
         89:e1:94:fc:a0:f1:07:6f:9f:1f:d9:f5:60:cb:69:3a:5f:95:
         63:02:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:01:27 2026 by rpki-client