This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130392e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          thyGiRWuvRpZZ9Ucj6eB2OGwGBJtFCL0X6Ls2mp22+Y=
Subject key identifier:   1D:DD:3E:14:D6:F0:FF:AA:88:A6:27:85:F2:4A:02:6A:FD:AD:0C:9B
Certificate issuer:       /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial:       41F237000AE7399FA7A0B3B198F57744D643C8C8
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130392e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 28 Jan 2026 11:34:26 +0000
ROA not before:           Wed 28 Jan 2026 11:29:26 +0000
ROA not after:            Wed 27 Jan 2027 11:34:26 +0000
asID:                     53153
IP address blocks:        187.61.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Feb 2026 21:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f2:37:00:0a:e7:39:9f:a7:a0:b3:b1:98:f5:77:44:d6:43:c8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
        Validity
            Not Before: Jan 28 11:29:26 2026 GMT
            Not After : Jan 27 11:34:26 2027 GMT
        Subject: CN=1DDD3E14D6F0FFAA88A62785F24A026AFDAD0C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:1d:6b:9b:e2:41:3e:35:f6:5e:5b:15:10:
                    ae:53:ec:d9:c3:55:0e:72:08:a2:17:84:c0:b3:3b:
                    95:e5:90:ae:3a:cc:94:85:22:93:5e:d2:af:a9:29:
                    6c:47:9c:51:d0:a6:9f:41:d5:d4:24:4a:af:a2:ca:
                    cd:a8:c6:2f:91:07:61:1c:a9:fd:74:9b:08:20:ab:
                    16:2d:cc:68:bb:f1:97:83:5a:4f:ef:04:8f:41:3f:
                    89:a2:7a:7f:f4:90:3a:e4:f5:5a:a9:14:27:92:f4:
                    ff:8d:bd:d4:a1:25:ee:dc:ea:a2:29:3b:75:e3:84:
                    e3:c0:ae:53:6b:13:a1:2d:c5:85:2f:17:25:24:91:
                    bd:64:ef:c5:5f:c3:ed:54:16:ac:3a:c3:70:71:f8:
                    64:b8:49:d5:de:15:cd:bf:a0:a3:fb:ab:52:41:76:
                    5e:98:46:91:73:a8:76:66:d3:a6:07:9b:12:07:9e:
                    4f:dc:dd:ec:3e:1b:06:e9:74:c4:c1:88:d3:7f:3c:
                    ec:ab:88:8d:ba:45:45:74:a7:8a:8b:8c:da:22:c9:
                    38:9c:cf:30:78:5a:46:8f:fb:6d:35:c4:b8:bc:7b:
                    d5:69:2c:eb:4d:45:8c:04:53:fd:d6:97:a5:1e:82:
                    61:7f:6b:ec:db:b1:35:44:b5:74:97:0a:72:92:3b:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DD:3E:14:D6:F0:FF:AA:88:A6:27:85:F2:4A:02:6A:FD:AD:0C:9B
            X509v3 Authority Key Identifier:
                keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130392e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:2c:4c:58:6a:f3:75:6e:ad:63:4f:b2:77:f2:90:8b:4a:0f:
         8b:e4:83:4d:d2:17:5c:10:f4:4d:2b:c9:32:a9:95:b8:b0:b7:
         d5:6d:26:23:b8:db:bc:ea:3f:94:0b:bb:97:3d:fb:3a:0d:2f:
         4c:14:84:cd:da:94:81:0b:69:6f:20:cd:95:1a:00:5e:69:8d:
         ae:52:88:c7:d4:74:06:16:39:02:ff:98:ee:db:f9:06:e4:7c:
         49:bd:9f:1b:b9:03:a4:09:65:13:c3:aa:bc:45:b3:2d:a2:f0:
         52:25:71:ac:8f:61:0b:50:be:ce:57:03:ff:7a:bd:2e:0f:4a:
         95:93:f8:f8:7c:31:6e:26:d0:3b:cc:bf:73:74:dc:9a:c5:d4:
         f2:76:fd:66:02:28:cb:55:0b:90:42:97:4e:46:c0:72:9a:59:
         c7:21:73:db:00:28:dc:b6:a1:70:d0:97:e4:5f:2e:ce:23:f8:
         59:57:f4:de:b2:b0:47:58:17:80:a6:a0:65:3a:07:d3:0f:61:
         ef:43:9b:36:e5:fc:dc:b3:7a:66:eb:b8:e7:39:c6:4b:7f:18:
         3d:d7:b7:d4:14:cd:c1:d6:51:fd:ed:1a:89:84:02:a2:41:c3:
         40:09:c8:f3:56:77:fd:f2:85:1e:27:5d:b3:5d:bd:97:72:84:
         f7:f9:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:04:28 2026 by rpki-client