This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
File:                     3230302e3133322e322e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          8q6Cxo/c5FjMmGnoRd1IkyHlLU7jrIERsUnxwOpC6ic=
Subject key identifier:   31:F4:4C:72:61:77:57:A4:04:B8:7A:F5:3A:F3:F1:19:09:85:0C:EA
Certificate issuer:       /CN=4940EEB21B4128216F8FFB3B0A997946697632F5
Certificate serial:       0CDE844B3E097C4D41D29125DDE8202E12358402
Authority key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
Signing time:             Tue 20 Jan 2026 13:47:27 +0000
ROA not before:           Tue 20 Jan 2026 13:42:27 +0000
ROA not after:            Tue 19 Jan 2027 13:47:27 +0000
asID:                     2716
IP address blocks:        200.132.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Feb 2026 12:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:de:84:4b:3e:09:7c:4d:41:d2:91:25:dd:e8:20:2e:12:35:84:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940EEB21B4128216F8FFB3B0A997946697632F5
        Validity
            Not Before: Jan 20 13:42:27 2026 GMT
            Not After : Jan 19 13:47:27 2027 GMT
        Subject: CN=31F44C72617757A404B87AF53AF3F11909850CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:79:a2:f8:68:6e:fd:06:09:0f:5a:11:dc:
                    57:c5:36:0e:a7:c1:14:f8:9e:d3:6a:db:2b:56:62:
                    e2:ce:c2:e2:8d:ee:bc:03:6f:24:25:c9:e1:7f:b0:
                    2b:97:75:1c:df:4d:74:ea:cd:f7:a6:2c:a9:61:8a:
                    9b:3a:ba:59:8d:de:eb:c3:7e:b8:3e:f5:67:ef:ba:
                    37:93:e6:17:15:60:82:fa:2f:04:d8:04:1d:f5:3c:
                    96:26:60:95:8d:75:17:c9:60:a2:72:b1:22:2f:31:
                    e1:14:8e:33:c9:0b:87:8d:a7:ae:df:58:07:c5:5f:
                    4f:2f:a9:7a:31:b0:d9:2b:ad:b5:bc:30:cb:3d:4e:
                    06:a3:88:0c:75:55:ca:bc:58:fc:e0:b6:97:cb:22:
                    de:94:84:66:6c:17:52:2e:94:05:33:ba:11:24:f7:
                    0a:61:ec:cd:06:3b:88:ee:f0:b4:75:c3:45:a2:5b:
                    48:05:09:5f:3a:55:76:43:79:a8:a6:65:5d:8b:ca:
                    c4:d3:57:cf:46:28:7b:5c:5e:d9:18:ff:6d:5c:f4:
                    e1:f4:8f:a9:af:b7:5b:9b:a2:0b:94:e9:7c:79:37:
                    7a:45:4d:3b:0d:88:a6:ba:47:f7:06:2e:44:10:e8:
                    97:64:8e:74:66:03:7b:4d:67:28:47:05:f5:1f:27:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:4C:72:61:77:57:A4:04:B8:7A:F5:3A:F3:F1:19:09:85:0C:EA
            X509v3 Authority Key Identifier:
                keyid:49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e322e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:85:d7:80:5a:14:e6:21:85:7c:5a:71:7a:0e:7a:cc:5a:1f:
         6d:43:be:34:f1:49:81:ba:d2:40:e9:3e:fa:12:6b:72:91:ff:
         73:16:4b:aa:1f:59:cf:cf:4a:c6:0d:fc:e4:91:9e:e9:03:43:
         c8:3b:c6:50:b0:61:b4:38:fa:30:49:bb:8e:64:28:61:6e:30:
         17:e2:68:56:f0:e0:07:8a:b2:02:fe:f8:d2:cb:5d:70:68:d7:
         98:38:a8:8a:14:05:8b:73:70:6a:3e:72:a3:e0:96:99:dc:60:
         23:bc:d4:27:f5:f2:7c:5d:ec:b6:3e:7e:ed:aa:7f:72:bc:76:
         7f:19:ed:de:8a:47:18:31:6e:53:33:5f:7a:4d:96:a7:75:ef:
         be:77:df:ac:9b:5a:d2:56:18:81:96:b8:4d:c5:b5:f7:08:26:
         1d:dc:70:75:63:d9:2f:ce:a0:06:6c:31:b5:55:dc:ba:e5:c4:
         48:c4:31:6a:80:35:78:db:dc:a5:2f:ae:da:77:37:60:41:2d:
         e0:6e:fb:7f:1a:b1:5d:76:76:68:40:8b:2d:73:bd:e5:45:aa:
         d3:4f:44:4a:bf:07:30:36:27:24:cb:12:66:51:e9:f4:65:98:
         2b:65:f0:df:70:eb:e0:d8:f0:0c:5a:92:4d:39:7f:fd:83:42:
         8f:a8:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:58:53 2026 by rpki-client