This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa
File:                     3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          zB6eUg6igB8LlAcT6vaIoyKLPui0pid3mafOAmHtPqQ=
Subject key identifier:   B7:97:11:AC:89:7C:CD:25:55:E7:D8:1B:2F:B9:61:EC:A8:C7:2F:EB
Certificate issuer:       /CN=4940EEB21B4128216F8FFB3B0A997946697632F5
Certificate serial:       091AC0D4B841F453B1F44EE846F39F729F52001A
Authority key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa
Signing time:             Tue 20 Jan 2026 13:43:30 +0000
ROA not before:           Tue 20 Jan 2026 13:38:30 +0000
ROA not after:            Tue 19 Jan 2027 13:43:30 +0000
asID:                     2716
IP address blocks:        200.128.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Feb 2026 17:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1a:c0:d4:b8:41:f4:53:b1:f4:4e:e8:46:f3:9f:72:9f:52:00:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940EEB21B4128216F8FFB3B0A997946697632F5
        Validity
            Not Before: Jan 20 13:38:30 2026 GMT
            Not After : Jan 19 13:43:30 2027 GMT
        Subject: CN=B79711AC897CCD2555E7D81B2FB961ECA8C72FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:07:1a:68:b4:2e:b3:24:6c:8c:c7:53:cc:
                    3f:f0:b8:02:de:9a:bd:3a:be:1e:51:95:bb:05:eb:
                    5b:41:a7:3f:aa:2a:b4:e8:4f:95:6b:a5:59:4a:f7:
                    f7:52:87:2e:6a:89:eb:2c:da:93:3e:f4:40:74:bf:
                    44:77:be:0a:c3:e6:60:94:1d:0e:15:e8:77:7e:b3:
                    80:d5:df:52:2e:a7:b1:a0:e7:6a:76:a7:e1:2e:00:
                    98:40:bd:44:9d:cb:46:cf:5d:36:f1:0b:1e:4c:b2:
                    49:95:df:1f:22:de:9f:28:d9:93:cb:06:e1:da:82:
                    6e:d3:26:94:ba:d5:be:05:16:9b:df:c8:13:54:d5:
                    4a:24:e6:fc:a2:1d:86:6e:44:69:2b:04:b4:b4:9b:
                    b4:83:cd:9f:e3:36:91:83:5b:5e:9e:1e:94:e6:6b:
                    46:8a:3e:22:6f:b2:16:ca:3f:5e:cc:70:c9:1f:c6:
                    be:14:18:4f:e1:40:b4:2b:53:27:a3:d8:cb:0c:5e:
                    10:6a:f1:c6:0c:6b:14:ec:47:33:c9:70:9a:3d:c7:
                    d7:65:94:f6:c1:46:5c:8a:64:9d:66:39:90:22:7b:
                    40:d0:97:61:91:61:3d:b1:f5:6d:36:54:e6:56:e3:
                    2f:c9:f9:b1:4f:2c:ab:c6:83:b6:c2:8c:06:9d:ed:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:97:11:AC:89:7C:CD:25:55:E7:D8:1B:2F:B9:61:EC:A8:C7:2F:EB
            X509v3 Authority Key Identifier:
                keyid:49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:f6:32:36:e4:07:0e:ad:36:f2:e9:09:5d:e7:d7:79:3a:75:
         32:6a:9a:09:f2:4a:6d:6a:0f:2b:4c:74:e0:09:5f:ed:ef:5f:
         4c:24:43:97:21:67:ab:2e:d9:df:71:4a:db:cb:78:a2:82:e5:
         26:1c:00:bd:8b:d3:8d:23:c2:38:f0:e9:ab:65:4c:df:d7:db:
         e2:40:f4:9a:2b:42:f5:8b:26:c3:bd:6d:f3:2f:59:be:c8:3c:
         b3:19:c7:d1:41:30:f8:f2:eb:64:84:83:2a:47:71:d6:e7:c6:
         86:86:d4:bd:32:5e:88:ee:17:55:d6:b0:e3:7f:3c:f8:f5:4b:
         32:9b:d6:d0:71:7b:16:de:34:e6:a3:7b:dc:dc:1f:f0:ea:14:
         19:9d:36:26:0e:eb:76:32:d7:62:7a:c3:64:03:dd:bf:36:8f:
         e0:2e:9a:a0:5b:2c:bc:2a:a8:4c:a8:ca:3b:80:4f:d8:9a:94:
         14:9b:2f:4b:ce:32:31:46:07:4f:04:38:a1:9b:98:a9:ff:35:
         25:57:55:85:75:15:bb:2e:a0:a5:1d:ec:4d:f2:6f:17:5f:5c:
         bf:08:fb:a6:d8:5b:f1:d3:e0:47:1b:a7:8d:25:50:c4:25:11:
         0e:6a:75:c9:ee:c1:24:c2:68:69:5e:d8:ca:b4:e3:56:c4:e5:
         0b:a2:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:58:55 2026 by rpki-client