This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130332e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130332e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          GNISvNrMb/T4C3XEa+E7ucixv9VIWIdx25FwDNArW4A=
Subject key identifier:   69:55:87:1C:57:10:EB:AD:81:7A:73:C9:53:A3:ED:1E:6A:06:84:3B
Certificate issuer:       /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial:       207D274CBB6E01AE04C01B40F01E0CEF6FC69C05
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130332e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 28 Jan 2026 11:34:30 +0000
ROA not before:           Wed 28 Jan 2026 11:29:30 +0000
ROA not after:            Wed 27 Jan 2027 11:34:30 +0000
asID:                     53153
IP address blocks:        187.61.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Feb 2026 21:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7d:27:4c:bb:6e:01:ae:04:c0:1b:40:f0:1e:0c:ef:6f:c6:9c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
        Validity
            Not Before: Jan 28 11:29:30 2026 GMT
            Not After : Jan 27 11:34:30 2027 GMT
        Subject: CN=6955871C5710EBAD817A73C953A3ED1E6A06843B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:26:0d:0c:20:5a:dd:92:a2:16:44:7c:8e:
                    9c:c8:ed:25:61:d2:dc:88:be:31:9d:71:c9:a7:a9:
                    e3:6d:85:ad:98:75:42:be:6d:e4:3e:0a:fb:50:69:
                    48:65:3a:25:31:d1:59:66:c4:8f:6b:b9:a6:a7:16:
                    39:70:f9:4b:a6:f0:28:77:32:89:a9:76:ec:4f:53:
                    12:fa:17:81:3f:c9:87:26:e8:8f:c9:30:13:75:a4:
                    3a:0b:d0:66:32:49:95:ea:93:7e:0f:66:ae:df:de:
                    a0:3f:3c:f8:e9:39:69:06:4d:30:f5:c9:21:e7:b9:
                    74:ac:7b:ca:19:ed:16:7d:57:2f:3a:2e:6f:a1:8c:
                    9b:0c:3d:43:ea:2e:eb:72:43:86:38:3d:e2:49:90:
                    a3:dd:11:bb:3c:a2:51:5c:f8:63:fc:28:2b:dc:7a:
                    60:a0:28:96:42:02:e4:a4:36:dc:b9:67:c9:01:87:
                    68:01:a5:a9:42:99:75:0e:28:38:78:2f:9c:17:50:
                    99:0d:62:71:48:53:b6:a4:52:7b:a2:66:16:20:3f:
                    e5:4e:bf:53:c8:25:78:db:a4:fa:5c:84:81:3c:db:
                    50:89:b6:b4:61:b6:21:b8:b0:64:41:e5:c6:7e:8b:
                    f9:b1:6a:68:97:65:8e:a1:33:7a:24:3b:8e:38:11:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:55:87:1C:57:10:EB:AD:81:7A:73:C9:53:A3:ED:1E:6A:06:84:3B
            X509v3 Authority Key Identifier:
                keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130332e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:90:2a:a4:f2:36:f3:78:a8:eb:a6:49:14:03:f1:9e:53:
         34:3d:5c:cb:0d:ea:71:ae:45:26:75:29:63:f3:ec:a8:aa:85:
         32:bb:1e:6a:20:be:de:3f:ae:02:5e:f2:80:87:04:42:e7:a9:
         fa:72:9d:54:a1:e0:5b:47:29:81:3b:c3:8b:35:ca:ff:4c:09:
         0f:e6:d9:38:35:f8:15:b0:a7:ac:fc:04:1b:90:87:66:b7:49:
         77:ea:d0:db:c7:8c:39:4c:d9:98:09:44:8b:ef:4c:3f:5b:b7:
         e8:6d:4f:60:f4:cb:af:07:c5:e0:33:73:1c:20:12:56:42:a4:
         15:67:1d:4d:ea:df:50:fb:c0:c6:a3:44:47:72:7c:73:bd:6f:
         32:87:87:27:da:e3:7d:69:e5:b2:05:68:bb:42:28:c7:40:65:
         14:24:1c:39:25:30:2d:fc:1c:cc:65:3b:9b:90:06:8e:35:04:
         b3:5e:aa:4a:fb:58:4b:c1:fd:e5:14:f1:f8:a1:26:2d:6c:31:
         dd:2f:4b:a8:e3:4b:41:0c:f6:df:db:7a:3f:c6:ff:51:2e:eb:
         f1:11:64:87:5b:7d:06:db:39:98:30:ba:a9:b6:95:66:6e:58:
         7b:4e:62:3c:75:7f:22:ad:31:9f:e9:6e:ad:e2:3b:85:28:6d:
         af:ac:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:02:57 2026 by rpki-client