This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa
File:                     3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa (raw, json)
Hash identifier:          jJvAcZnxl5A1rodcanlEJmpyx+L7OCCXxkexcBxu+Xs=
Subject key identifier:   8F:5D:8A:22:88:9B:E4:CF:C0:D2:0E:3B:72:7B:10:8F:3F:EC:99:FF
Certificate issuer:       /CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
Certificate serial:       231F0C26BF07FE699094B37830806844BBCEDCEF
Authority key identifier: FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa
Signing time:             Wed 04 Feb 2026 23:22:14 +0000
ROA not before:           Wed 04 Feb 2026 23:17:14 +0000
ROA not after:            Wed 03 Feb 2027 23:22:14 +0000
asID:                     52756
IP address blocks:        170.245.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl
                          rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Feb 2026 11:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1f:0c:26:bf:07:fe:69:90:94:b3:78:30:80:68:44:bb:ce:dc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEBA73E668F06EB3E835940A05E3FE7036390D15
        Validity
            Not Before: Feb  4 23:17:14 2026 GMT
            Not After : Feb  3 23:22:14 2027 GMT
        Subject: CN=8F5D8A22889BE4CFC0D20E3B727B108F3FEC99FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:96:b2:05:da:f3:00:68:61:d8:b4:f6:ba:
                    92:43:3c:28:9b:54:db:90:1d:80:20:b2:16:79:52:
                    28:ac:32:40:76:12:4e:e6:2f:c5:b1:d0:57:02:15:
                    37:11:9f:aa:2f:60:b3:de:4d:d9:4c:a5:de:f3:e0:
                    8d:70:e0:58:9b:4d:fa:7b:1a:d0:6d:4f:4f:4f:11:
                    95:2a:0a:a2:3c:15:72:9a:d0:3f:f5:71:5a:db:1a:
                    98:24:16:4e:56:53:88:a3:c9:5c:6b:89:95:10:8c:
                    d8:46:27:3f:48:56:4d:e3:cd:72:6d:b4:ba:bd:f6:
                    8a:b6:7d:83:69:83:18:05:1d:23:f4:12:f2:18:59:
                    cb:30:f3:91:4a:1c:45:a3:4e:a1:e9:23:d8:30:0e:
                    a1:23:c4:7c:69:d3:68:2e:ae:06:ca:e4:ee:93:b5:
                    19:90:c8:32:a1:0a:a7:62:c9:b8:cb:65:92:49:c4:
                    38:71:39:3b:fd:b9:8d:63:e3:17:c1:73:8c:4d:86:
                    76:61:fb:35:53:4d:d5:a5:e9:f6:b3:9e:03:d6:0f:
                    75:76:27:b5:09:f6:14:ed:c5:eb:fa:60:68:a8:fc:
                    c9:49:50:ed:aa:5c:3e:94:6c:b2:1d:e2:fe:df:88:
                    94:a4:b8:85:3e:b5:ba:87:1c:fc:ac:de:19:b3:f4:
                    76:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5D:8A:22:88:9B:E4:CF:C0:D2:0E:3B:72:7B:10:8F:3F:EC:99:FF
            X509v3 Authority Key Identifier:
                keyid:FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:2f:8c:01:b9:27:f9:1e:d7:64:67:d6:28:14:f4:ba:82:ff:
         6e:ba:79:8c:63:e8:cf:a5:dd:72:3d:fc:85:2e:f1:ca:89:10:
         a8:3c:0c:ad:e3:7f:47:ed:20:14:9f:04:2b:bc:12:92:ad:37:
         b9:24:10:f4:7c:61:5a:74:f4:03:e2:51:c5:e3:9e:da:40:5f:
         07:55:dd:b9:16:5e:77:51:36:9a:7a:14:cf:42:ad:1d:8d:9f:
         2a:58:b5:c0:98:53:3d:d8:c7:42:f9:e4:ae:e6:64:01:e4:2d:
         5b:26:1e:2e:bd:75:ec:bb:36:ff:07:9f:13:94:c9:d4:cf:b5:
         1f:14:66:3b:83:86:c0:00:4c:84:28:22:5d:ed:d9:3f:01:41:
         7d:79:b1:cd:cf:c6:59:9d:74:0f:aa:12:10:81:ba:dd:cb:14:
         0e:fe:58:4b:fd:8b:23:93:95:da:b4:7f:35:0d:ea:0a:33:65:
         1b:f2:98:20:3f:22:63:f7:38:37:d8:db:30:c2:c5:48:fc:29:
         ca:3c:15:ef:90:74:ad:7a:a9:86:42:13:19:22:f8:6c:df:9f:
         55:98:bc:4d:09:aa:6f:b5:47:1a:d8:86:52:67:3d:bb:b7:68:
         23:51:1b:f3:bb:40:99:66:3a:6c:c3:8b:c9:e3:95:8b:c9:c9:
         e3:52:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:30:30 2026 by rpki-client