This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa
File:                     3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa (raw, json)
Hash identifier:          s6ol0rD2mKxuW23tNpj/XhXqtq0c7rUoyap48tJKL44=
Subject key identifier:   A2:27:8F:EB:39:DB:F4:C6:F1:4F:47:BC:0D:19:76:E0:03:E2:CE:E5
Certificate issuer:       /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial:       49D74B5A53853B9C4FEE5154EB8D9BFF4ABB4524
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa
Signing time:             Tue 06 Jan 2026 20:31:08 +0000
ROA not before:           Tue 06 Jan 2026 20:26:08 +0000
ROA not after:            Tue 05 Jan 2027 20:31:08 +0000
asID:                     265936
IP address blocks:        164.163.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
                          rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d7:4b:5a:53:85:3b:9c:4f:ee:51:54:eb:8d:9b:ff:4a:bb:45:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
        Validity
            Not Before: Jan  6 20:26:08 2026 GMT
            Not After : Jan  5 20:31:08 2027 GMT
        Subject: CN=A2278FEB39DBF4C6F14F47BC0D1976E003E2CEE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:cc:bb:8d:e2:23:fe:02:9c:40:e0:6e:97:
                    8c:eb:3f:02:42:03:55:5b:aa:e8:c9:9f:41:4a:a7:
                    19:43:63:85:01:5f:8b:a8:c5:93:9f:19:50:6d:3d:
                    8c:15:81:28:7e:c8:84:cc:1e:e1:e8:c5:21:94:5a:
                    fa:cb:49:a4:7d:53:8b:88:ed:78:35:55:09:7e:ba:
                    8a:11:1b:3b:86:49:74:b0:75:1b:9c:2a:47:ca:1a:
                    7e:44:fe:b5:0d:37:cf:40:dd:87:a4:7d:b2:30:8a:
                    48:a9:f1:f3:7f:10:00:13:71:0b:88:b5:0f:38:d4:
                    75:a8:c7:95:14:cc:3c:66:5d:3a:f9:3a:97:ab:8a:
                    10:94:4e:01:d9:b8:5b:cf:5d:3d:12:f7:ee:00:23:
                    72:ac:2c:41:7d:73:12:b0:97:ec:9f:52:1b:20:39:
                    7c:57:28:8e:ba:9f:2e:76:ec:5d:91:d9:85:72:f4:
                    50:06:1b:7a:4c:0b:e2:b2:74:c8:d3:57:08:64:6c:
                    f5:43:9c:93:94:44:fb:33:e9:38:63:23:74:3a:7d:
                    3e:8e:d8:06:54:0b:1a:43:df:5a:81:53:f4:c8:28:
                    1c:30:65:2d:94:7d:74:82:d4:7f:d7:ab:3f:f2:5d:
                    26:50:51:a2:05:d8:ef:35:29:bf:a2:2c:c2:fc:ef:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:27:8F:EB:39:DB:F4:C6:F1:4F:47:BC:0D:19:76:E0:03:E2:CE:E5
            X509v3 Authority Key Identifier:
                keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:a8:fe:66:03:e2:29:65:82:a8:b8:9e:88:9a:0b:d0:6e:8f:
         57:27:06:8c:d0:dd:ec:f6:ee:9a:cd:0f:8f:2f:5b:47:e0:3d:
         66:88:97:61:3a:e4:13:b7:c9:d2:dd:ca:96:be:d3:a3:da:7c:
         1b:cf:96:95:8e:69:66:24:79:90:d0:d9:6a:bf:5f:7c:73:b0:
         67:ed:79:f8:09:b1:29:9e:50:41:5b:e2:5b:8b:c4:bd:a0:30:
         4b:09:aa:f9:7b:2d:ea:46:da:61:9a:58:9f:26:05:da:6c:aa:
         b7:9b:18:76:ba:54:82:61:e5:b4:01:82:55:ca:c9:28:7f:ef:
         32:50:a8:d1:c6:15:b8:87:19:3a:f2:a2:c3:03:7a:b1:14:23:
         a2:46:a4:5b:4f:1e:e1:97:a2:56:f7:3a:8b:76:72:ea:29:e0:
         62:a7:a0:87:91:6b:36:57:e1:ef:a3:c5:26:ce:ad:72:2a:d2:
         a1:0e:80:73:d0:6f:26:f0:8e:1d:7c:8b:50:b9:f3:06:49:40:
         67:3c:a4:02:2d:27:8e:f6:c7:36:82:80:2f:04:24:8c:7d:b2:
         30:6a:55:4b:cb:a2:e6:6c:15:04:42:fc:68:56:18:40:ad:fd:
         05:4e:ad:a7:03:9e:ac:1c:9c:fd:fa:2e:28:9a:d9:32:85:fa:
         0e:af:82:b7
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSddLWlOFO5xP7lFU642b/0q7RSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFCRTIxN0EzNTJBOUMxOTBFNUMwREE2NTQxMTE5RkFB
ODQ5Q0NFODAeFw0yNjAxMDYyMDI2MDhaFw0yNzAxMDUyMDMxMDhaMDMxMTAvBgNV
BAMTKEEyMjc4RkVCMzlEQkY0QzZGMTRGNDdCQzBEMTk3NkUwMDNFMkNFRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbMy7jeIj/gKcQOBul4zrPwJC
A1VbqujJn0FKpxlDY4UBX4uoxZOfGVBtPYwVgSh+yITMHuHoxSGUWvrLSaR9U4uI
7Xg1VQl+uooRGzuGSXSwdRucKkfKGn5E/rUNN89A3YekfbIwikip8fN/EAATcQuI
tQ841HWox5UUzDxmXTr5OperihCUTgHZuFvPXT0S9+4AI3KsLEF9cxKwl+yfUhsg
OXxXKI66ny527F2R2YVy9FAGG3pMC+KydMjTVwhkbPVDnJOURPsz6ThjI3Q6fT6O
2AZUCxpD31qBU/TIKBwwZS2UfXSC1H/Xqz/yXSZQUaIF2O81Kb+iLML87yYJAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUoieP6znb9MbxT0e8DRl24APizuUwHwYDVR0j
BBgwFoAUur4hejUqnBkOXA2mVBEZ+qhJzOgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91a1pIWmUyVkNhUGtvZUNROUF3eDJwOGRZNExwWnZqTVJpUERxUUN4Y3d3
LzAvQkFCRTIxN0EzNTJBOUMxOTBFNUMwREE2NTQxMTE5RkFBODQ5Q0NFOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQUJFMjE3QTM1MkE5QzE5MEU1
QzBEQTY1NDExMTlGQUE4NDlDQ0U4LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
a1pIWmUyVkNhUGtvZUNROUF3eDJwOGRZNExwWnZqTVJpUERxUUN4Y3d3LzAvMzEz
NjM0MmUzMTM2MzMyZTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUz
OTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACkoxkwDQYJKoZIhvcNAQELBQADggEBAK+o/mYD4ill
gqi4noiaC9Buj1cnBozQ3ez27prND48vW0fgPWaIl2E65BO3ydLdypa+06PafBvP
lpWOaWYkeZDQ2Wq/X3xzsGftefgJsSmeUEFb4luLxL2gMEsJqvl7LepG2mGaWJ8m
BdpsqrebGHa6VIJh5bQBglXKySh/7zJQqNHGFbiHGTryosMDerEUI6JGpFtPHuGX
olb3Oot2cuop4GKnoIeRazZX4e+jxSbOrXIq0qEOgHPQbybwjh18i1C58wZJQGc8
pAItJ472xzaCgC8EJIx9sjBqVUvLouZsFQRC/GhWGECt/QVOracDnqwcnP36Liia
2TKF+g6vgrc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:44:04 2026 by rpki-client