This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa
File:                     3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          RvUm9hjGmcdhCLUhSKEGYVkU+9m0uoMet3ZV5uGg3zs=
Subject key identifier:   FC:5F:A3:E0:8C:A4:37:7C:46:1F:BB:3E:DC:F1:8F:76:64:F9:00:BF
Certificate issuer:       /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial:       0D0C5615A67B267DF8858B002A5475A5641B9D86
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 28 Jan 2026 11:34:25 +0000
ROA not before:           Wed 28 Jan 2026 11:29:25 +0000
ROA not after:            Wed 27 Jan 2027 11:34:25 +0000
asID:                     53153
IP address blocks:        138.204.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Feb 2026 21:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0c:56:15:a6:7b:26:7d:f8:85:8b:00:2a:54:75:a5:64:1b:9d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
        Validity
            Not Before: Jan 28 11:29:25 2026 GMT
            Not After : Jan 27 11:34:25 2027 GMT
        Subject: CN=FC5FA3E08CA4377C461FBB3EDCF18F7664F900BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:41:42:17:07:de:4c:ad:d3:e6:76:9c:fc:
                    e3:35:84:a0:96:18:19:d9:50:18:90:0e:a3:ed:ac:
                    a8:d4:ed:16:c4:0e:d2:24:bd:a0:33:3c:ef:ed:ed:
                    09:3c:a6:0d:78:bd:19:20:3d:56:7a:d3:f4:34:05:
                    21:bb:0f:23:b9:12:ee:e0:44:8b:64:04:d8:6a:ee:
                    b1:cd:93:5e:26:18:45:db:9c:71:eb:80:7c:30:09:
                    f4:58:6d:97:ee:8a:45:0e:d5:ee:43:29:68:98:be:
                    e7:65:93:2d:13:63:ba:75:38:5e:b7:41:0f:a0:a1:
                    d0:0d:99:91:2a:ae:2c:09:d2:88:ac:1f:f8:80:81:
                    e5:29:0d:f0:3c:b1:97:12:29:a6:8c:c5:45:83:fc:
                    65:34:62:a7:7c:de:e4:93:76:e2:b2:88:90:65:07:
                    41:0a:55:01:df:c3:17:a6:f1:05:3a:c4:65:fc:a6:
                    04:42:33:b3:29:7f:e3:16:f2:d7:15:23:3f:78:50:
                    71:06:6f:d8:a6:27:58:9e:31:97:43:cb:65:d4:99:
                    62:c8:26:bf:41:e1:72:cb:ce:e8:c8:c8:38:64:e3:
                    21:29:ea:21:0f:e5:82:b7:41:89:f9:85:3f:b0:c8:
                    53:69:9e:84:a0:c1:92:8d:7b:f2:93:93:15:64:02:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5F:A3:E0:8C:A4:37:7C:46:1F:BB:3E:DC:F1:8F:76:64:F9:00:BF
            X509v3 Authority Key Identifier:
                keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:6c:58:c6:99:ac:cd:24:10:df:23:1e:ad:f8:23:71:f4:aa:
         6c:7a:29:6c:a2:af:3f:6f:ad:4b:2e:af:95:bd:ef:69:89:89:
         73:90:01:c2:73:ed:22:43:94:e4:c0:06:f6:89:e5:96:17:78:
         e9:a9:d2:6c:c7:14:f6:ce:68:b8:a8:20:54:9f:97:d9:fa:fb:
         25:fe:20:cf:b3:fe:2f:01:a6:74:7e:e2:15:f8:8b:88:9f:78:
         50:b5:01:ad:fe:e7:ac:f3:7e:06:c0:0c:46:4b:dd:cd:db:56:
         0c:1f:09:e1:a0:ae:db:a9:89:8c:81:a9:a1:1d:ef:84:34:fd:
         0d:c6:31:58:5b:34:09:7b:b6:c9:8c:dd:3a:7e:50:bc:89:f2:
         42:8b:f9:f9:d7:f5:51:30:e9:78:9c:8e:cb:61:6c:ed:55:06:
         bb:6a:a5:dd:c3:cd:e5:38:cf:86:22:88:b8:cf:15:49:9c:31:
         d3:fd:da:bc:35:41:76:d3:b7:7b:48:61:80:58:8a:8d:c0:0a:
         7c:4f:40:6c:60:4d:cf:5a:0d:4d:fe:bb:ed:58:4b:c2:02:54:
         9c:bf:6b:ff:21:e2:ed:f0:45:81:5f:5f:17:5a:4f:b3:cb:21:
         11:3f:36:7f:0d:e0:af:2f:56:85:02:91:09:e6:21:e6:61:46:
         ae:ac:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:03:59 2026 by rpki-client