This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          qBDStmaA19e4M5iQH/8ZkxUM4PkvEAjURpXV+Rd3awc=
Subject key identifier:   DC:5B:E7:42:41:88:D5:A1:39:22:52:2E:DA:C3:F1:1A:E1:5F:F0:3E
Certificate issuer:       /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial:       0AE235BA25E259B1C1AA171FCC57748E27103294
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 28 Jan 2026 11:34:26 +0000
ROA not before:           Wed 28 Jan 2026 11:29:26 +0000
ROA not after:            Wed 27 Jan 2027 11:34:26 +0000
asID:                     53153
IP address blocks:        186.209.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Feb 2026 21:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e2:35:ba:25:e2:59:b1:c1:aa:17:1f:cc:57:74:8e:27:10:32:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
        Validity
            Not Before: Jan 28 11:29:26 2026 GMT
            Not After : Jan 27 11:34:26 2027 GMT
        Subject: CN=DC5BE7424188D5A13922522EDAC3F11AE15FF03E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:01:3c:c3:80:9e:e5:9b:f2:44:42:ba:13:
                    21:59:70:12:cd:e1:c2:3d:40:90:f7:1d:73:0e:07:
                    54:8f:bc:2b:6d:fb:f2:3d:fc:fb:8a:95:81:e1:f5:
                    ab:2c:ff:f6:2a:2c:85:8b:66:0d:db:30:8e:ee:cc:
                    cd:93:86:a6:84:fa:e8:c7:2c:26:22:9c:9c:48:46:
                    bb:36:a8:c5:99:da:ef:9e:b9:ed:36:b8:a4:1a:18:
                    ed:36:36:1e:2f:ce:1a:27:9a:1b:2c:d0:ef:a4:0b:
                    de:96:88:94:b0:44:47:f9:86:1d:49:49:90:d3:25:
                    93:ad:f0:27:d2:b5:f6:74:fe:a2:99:07:de:2e:f9:
                    10:10:0c:59:e0:ec:d4:30:d7:66:b9:06:31:6d:ce:
                    e8:f9:f0:1e:94:c4:70:29:1a:33:bf:c2:c7:7c:fe:
                    3a:16:08:57:18:02:6d:57:28:9d:a4:65:a5:b2:38:
                    14:d1:d0:60:60:39:2d:71:a6:50:bc:b6:6b:b9:6d:
                    a1:99:e9:02:a0:36:0f:66:ce:41:5d:6f:58:b2:fd:
                    a2:0e:5a:f5:2d:39:49:cb:91:76:fa:a2:a4:ce:06:
                    cb:e3:69:a5:c1:bf:e0:f2:32:12:3a:46:ab:ad:ec:
                    6c:bb:47:71:31:7f:e6:73:51:9d:e0:fd:dc:0d:bc:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5B:E7:42:41:88:D5:A1:39:22:52:2E:DA:C3:F1:1A:E1:5F:F0:3E
            X509v3 Authority Key Identifier:
                keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:a7:fa:67:31:ca:cc:dd:ba:c1:74:22:51:72:01:41:da:a1:
         5f:69:4c:be:10:be:bb:04:dc:ab:7e:bf:0f:44:7e:e5:98:99:
         ed:37:8e:9b:ce:08:f1:b0:bc:71:c9:85:2b:03:02:24:f1:34:
         f6:45:7e:18:4d:5c:76:e7:7e:ba:25:bd:1e:b6:85:b6:9e:c0:
         01:c2:0a:01:cb:60:65:dd:b2:27:9f:2d:70:1b:a1:c7:4f:99:
         8d:b3:fb:f7:95:1a:dd:43:1c:01:36:fb:a6:3a:ba:f2:53:f9:
         f0:10:4e:bf:a2:ae:5f:8a:d7:6e:2d:bc:72:26:1d:38:60:b9:
         29:10:dc:c6:8b:a9:7d:2d:08:f3:a2:47:73:a2:bd:70:bd:d8:
         8f:ee:da:21:4c:87:a9:b0:40:4e:45:39:2e:51:a4:2f:56:8d:
         b6:0c:59:61:87:8a:ac:77:35:bc:e7:40:5f:c4:29:4c:d7:41:
         b6:9e:61:ae:71:26:4a:ff:a5:c6:b1:2d:e6:e0:6d:e5:3d:dd:
         07:97:62:0d:4c:81:15:db:0f:84:83:94:22:5b:71:f1:ae:a3:
         eb:1c:71:11:1a:90:6c:f0:8f:c3:0d:5c:98:fd:d9:2c:3c:67:
         ef:6f:9e:e9:ef:fe:73:72:2a:33:f6:34:29:91:c6:ad:59:d8:
         c5:a1:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:04:44 2026 by rpki-client