This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130322e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130322e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          b7FNorR8/p/nU/f6NCTpCf74XiTpKncMfu3NDkU7V7w=
Subject key identifier:   C4:DD:6C:04:3E:FA:97:3F:0B:2D:6C:1C:61:3B:61:F0:71:26:87:80
Certificate issuer:       /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial:       725A64DD29D2A4EB043D4A269E27D3E08D29CE6A
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130322e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 28 Jan 2026 11:34:27 +0000
ROA not before:           Wed 28 Jan 2026 11:29:27 +0000
ROA not after:            Wed 27 Jan 2027 11:34:27 +0000
asID:                     53153
IP address blocks:        187.61.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Feb 2026 21:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5a:64:dd:29:d2:a4:eb:04:3d:4a:26:9e:27:d3:e0:8d:29:ce:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
        Validity
            Not Before: Jan 28 11:29:27 2026 GMT
            Not After : Jan 27 11:34:27 2027 GMT
        Subject: CN=C4DD6C043EFA973F0B2D6C1C613B61F071268780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:ea:4c:74:f2:7e:59:61:d2:54:6d:7a:2d:
                    6f:cc:79:b2:d6:9a:e3:76:5a:e1:b5:ba:01:9a:19:
                    e8:c9:b5:ba:c7:ef:f3:0e:0a:1e:de:d4:74:6a:2b:
                    a8:91:d0:5f:4a:fa:a3:ba:c3:02:3e:7f:4a:dd:c7:
                    ac:fc:0f:83:35:2f:dc:77:96:44:57:b4:ae:18:58:
                    e3:9e:8d:45:a7:96:7d:46:43:9c:66:b1:57:e2:0f:
                    e1:49:1a:3d:aa:cc:7c:72:70:a5:c1:5a:b5:84:dd:
                    4b:c5:8a:6c:d2:2c:91:4d:de:e5:60:84:c5:2e:f4:
                    cb:f1:b8:be:18:9b:d7:4c:17:62:cb:4d:b2:89:a0:
                    bc:86:10:46:0e:6f:59:1f:0c:1c:d6:3e:fb:bb:9f:
                    0c:af:18:0b:0a:35:3f:5d:bb:a4:c9:f9:60:95:67:
                    9d:c4:5d:98:e5:ea:20:a8:4a:d4:68:9f:ef:76:d7:
                    99:e7:b4:b5:a3:45:a7:db:35:23:3b:33:d5:fa:59:
                    96:fc:cc:75:6e:ea:03:10:6d:43:71:53:89:c4:22:
                    a0:2a:17:ae:52:ef:bf:52:03:8d:4e:a9:ec:12:54:
                    5c:92:39:27:01:c1:2c:dd:44:17:13:8f:77:e9:9f:
                    ce:d6:43:fd:8b:87:b3:32:e2:a8:00:fe:33:11:6f:
                    a0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DD:6C:04:3E:FA:97:3F:0B:2D:6C:1C:61:3B:61:F0:71:26:87:80
            X509v3 Authority Key Identifier:
                keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130322e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:c2:64:f1:db:2b:84:d5:1e:be:8d:b3:65:45:45:59:80:f5:
         cf:5e:0a:c7:a4:9e:6c:ce:40:fc:ad:d1:6f:22:1e:2f:72:c7:
         3b:5a:5e:20:bf:45:ec:10:71:8e:c9:76:0f:a0:9b:c3:94:b2:
         0c:2e:8c:f4:fb:4d:82:7b:5d:7d:a1:14:ef:9f:4b:da:f4:4a:
         0b:40:f2:4f:57:c3:6b:27:b5:96:43:d9:6c:7d:ea:b3:5b:cc:
         b2:b9:ae:bc:64:cd:77:4f:9d:ad:d6:8f:a4:7d:16:fd:58:7e:
         15:71:c4:de:d2:3a:91:e1:76:f0:c2:ce:21:7c:0a:54:9e:76:
         22:6e:0d:7e:ad:4f:27:b4:12:1c:4a:83:db:7e:40:cb:ce:c3:
         1e:6f:22:68:07:e2:78:79:c4:d2:e0:3a:8e:fa:30:d0:f3:e3:
         26:f1:62:13:ce:0f:29:60:9c:b6:50:a1:52:6a:35:50:4e:0e:
         9f:33:47:06:ca:64:1e:ad:ac:c1:cd:f3:9a:16:fd:ce:81:a2:
         cc:34:ba:0a:ef:17:76:a8:43:00:1f:17:d4:ec:7a:5e:46:c9:
         a7:d7:f4:da:0a:29:0f:8f:77:8b:2d:39:7a:88:90:7d:8d:08:
         fd:66:d6:c0:82:f0:74:2a:67:ad:d3:7d:0b:71:e1:d4:4f:54:
         4f:f6:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:06:00 2026 by rpki-client