This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa
File:                     3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          hnW/LL8COLkBGsMyNQnjzjJLpmBayM+0vGNKEy4ZJkk=
Subject key identifier:   A6:75:63:DB:35:2E:DC:09:87:E1:AD:D2:88:1B:4E:DA:B7:D1:D4:7B
Certificate issuer:       /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial:       2D18A6D73A5CBF14D0528553B85605E0913EA485
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa
Signing time:             Wed 28 Jan 2026 11:34:28 +0000
ROA not before:           Wed 28 Jan 2026 11:29:28 +0000
ROA not after:            Wed 27 Jan 2027 11:34:28 +0000
asID:                     53107
IP address blocks:        186.209.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Feb 2026 21:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:18:a6:d7:3a:5c:bf:14:d0:52:85:53:b8:56:05:e0:91:3e:a4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
        Validity
            Not Before: Jan 28 11:29:28 2026 GMT
            Not After : Jan 27 11:34:28 2027 GMT
        Subject: CN=A67563DB352EDC0987E1ADD2881B4EDAB7D1D47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:c6:8a:63:30:dd:2b:58:8b:da:e4:ae:0e:
                    0b:5e:bf:0a:e0:09:20:d3:7a:0b:e9:a4:dc:58:72:
                    14:63:af:ea:d5:9c:45:cb:c5:28:0b:e4:03:36:ed:
                    da:ea:2f:fc:4b:3d:2e:68:06:36:a0:9f:11:42:65:
                    e2:c2:38:8f:0c:86:ea:23:8d:f3:3d:60:5d:48:85:
                    fd:a2:cb:17:5a:b9:ca:96:9c:72:83:f0:03:df:c7:
                    16:cd:a6:0c:92:18:a2:d8:7f:f5:cc:29:0a:07:b2:
                    74:5a:00:65:f0:20:03:ef:ac:a3:7c:c0:43:04:28:
                    39:e0:b2:e1:ba:4d:cc:32:fa:21:a7:99:3e:50:62:
                    1c:60:8a:e6:6c:75:fd:79:49:e2:06:4b:ab:62:b3:
                    67:b1:ca:35:c6:62:fe:62:99:7a:86:c4:6c:c9:3c:
                    22:4a:de:c8:24:f6:15:da:fc:d3:c5:3c:61:cb:b7:
                    ef:56:f9:d1:9e:ed:46:f2:22:5d:77:3d:d1:84:88:
                    e6:a0:8f:65:21:1d:1c:42:3a:8c:71:f5:13:3e:3c:
                    65:6b:09:00:25:b2:73:38:6d:f4:1a:41:d1:11:79:
                    71:61:35:0e:0e:9b:50:53:2e:a5:3e:0d:c2:95:04:
                    c9:7d:86:19:8f:25:dc:d9:70:78:00:5f:fd:db:27:
                    29:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:75:63:DB:35:2E:DC:09:87:E1:AD:D2:88:1B:4E:DA:B7:D1:D4:7B
            X509v3 Authority Key Identifier:
                keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130372e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:42:ee:c6:6e:f1:c7:8c:c3:51:5c:18:fa:e5:24:b3:c1:a2:
         57:6f:7d:c8:9b:3e:62:4a:e1:b6:59:46:d1:82:26:74:26:8b:
         ac:9e:34:7e:81:58:1b:b0:3e:ce:6b:17:3c:64:1f:54:d4:9b:
         53:b1:27:2d:65:58:cb:b9:31:e1:4b:24:64:48:9a:05:25:c9:
         a9:b1:82:79:79:cc:b6:db:cc:0d:cd:50:eb:5d:58:8e:30:7b:
         2a:65:5f:49:8a:56:db:56:d0:44:95:9c:3a:ce:4c:ff:dc:32:
         08:a9:86:9f:d2:ad:f7:57:7b:ec:34:5c:19:00:f2:0e:64:f7:
         18:55:27:fc:c5:38:f6:21:19:b8:83:99:f5:55:c6:d7:de:49:
         c8:15:19:83:00:fc:cb:ad:7d:31:f3:af:99:03:fb:9b:84:2c:
         3d:42:d5:5c:7c:28:26:af:56:89:a3:43:ea:b5:1e:50:73:f7:
         55:6e:4d:f8:6a:84:42:5c:d7:16:b6:79:78:58:14:c5:8b:a7:
         29:43:7e:b5:c9:be:f8:41:e3:d4:42:86:14:12:bb:eb:86:06:
         e1:c1:52:c4:ef:b9:e0:db:f4:76:6a:6c:b1:b6:b0:ba:4f:1c:
         fd:75:39:9d:ed:43:09:61:82:33:eb:0f:3d:0a:ce:79:e6:a1:
         3d:e3:d2:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULRim1zpcvxTQUoVTuFYF4JE+pIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NTI5RkQzMjY0NzdBNUZFQjBBNjdBRkMxQzkzRjhG
ODNBODcwNzAeFw0yNjAxMjgxMTI5MjhaFw0yNzAxMjcxMTM0MjhaMDMxMTAvBgNV
BAMTKEE2NzU2M0RCMzUyRURDMDk4N0UxQUREMjg4MUI0RURBQjdEMUQ0N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqsaKYzDdK1iL2uSuDgtevwrg
CSDTegvppNxYchRjr+rVnEXLxSgL5AM27drqL/xLPS5oBjagnxFCZeLCOI8Mhuoj
jfM9YF1Ihf2iyxdaucqWnHKD8APfxxbNpgySGKLYf/XMKQoHsnRaAGXwIAPvrKN8
wEMEKDngsuG6Tcwy+iGnmT5QYhxgiuZsdf15SeIGS6tis2exyjXGYv5imXqGxGzJ
PCJK3sgk9hXa/NPFPGHLt+9W+dGe7UbyIl13PdGEiOagj2UhHRxCOoxx9RM+PGVr
CQAlsnM4bfQaQdEReXFhNQ4Om1BTLqU+DcKVBMl9hhmPJdzZcHgAX/3bJynDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpnVj2zUu3AmH4a3SiBtO2rfR1HswHwYDVR0j
BBgwFoAUCIUp/TJkd6X+sKZ6/ByT+Pg6hwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC8wODg1MjlGRDMyNjQ3N0E1RkVCMEE2N0FGQzFDOTNGOEY4M0E4NzA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4ODUyOUZEMzI2NDc3QTVG
RUIwQTY3QUZDMUM5M0Y4RjgzQTg3MDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM2MmUzMjMwMzkyZTMxMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC60WswDQYJKoZIhvcNAQELBQADggEBAFJC7sZu
8ceMw1FcGPrlJLPBoldvfcibPmJK4bZZRtGCJnQmi6yeNH6BWBuwPs5rFzxkH1TU
m1OxJy1lWMu5MeFLJGRImgUlyamxgnl5zLbbzA3NUOtdWI4weyplX0mKVttW0ESV
nDrOTP/cMgiphp/SrfdXe+w0XBkA8g5k9xhVJ/zFOPYhGbiDmfVVxtfeScgVGYMA
/MutfTHzr5kD+5uELD1C1Vx8KCavVomjQ+q1HlBz91VuTfhqhEJc1xa2eXhYFMWL
pylDfrXJvvhB49RChhQSu+uGBuHBUsTvueDb9HZqbLG2sLpPHP11OZ3tQwlhgjPr
Dz0KznnmoT3j0p8=
-----END CERTIFICATE-----
Generated at Fri Feb 6 00:13:34 2026 by rpki-client