This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e35392e302f32342d3234203d3e2032373136.roa
File:                     3230302e3133322e35392e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          fz6B1lCWsgCD1+8Q2UfcFXO7egumxSwivpB9rG58Hyw=
Subject key identifier:   A2:FF:CB:6A:21:26:D1:F8:23:02:7B:49:1D:63:11:EF:BE:77:71:B8
Certificate issuer:       /CN=4940EEB21B4128216F8FFB3B0A997946697632F5
Certificate serial:       08C5BA47DA917DD7CAF109C39742C468058A1E46
Authority key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e35392e302f32342d3234203d3e2032373136.roa
Signing time:             Tue 20 Jan 2026 13:47:28 +0000
ROA not before:           Tue 20 Jan 2026 13:42:28 +0000
ROA not after:            Tue 19 Jan 2027 13:47:28 +0000
asID:                     2716
IP address blocks:        200.132.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Feb 2026 17:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c5:ba:47:da:91:7d:d7:ca:f1:09:c3:97:42:c4:68:05:8a:1e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940EEB21B4128216F8FFB3B0A997946697632F5
        Validity
            Not Before: Jan 20 13:42:28 2026 GMT
            Not After : Jan 19 13:47:28 2027 GMT
        Subject: CN=A2FFCB6A2126D1F823027B491D6311EFBE7771B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:97:3c:2d:02:ec:e8:dc:cf:72:3f:b0:2b:d1:
                    6e:12:9e:0e:66:fd:0a:c4:4b:9e:11:72:07:10:43:
                    f4:cd:5a:cb:cc:7f:13:0e:5e:a6:5c:87:ca:06:26:
                    0a:27:52:d3:3d:82:80:f3:16:3f:1b:8a:fd:e0:da:
                    a7:7b:d1:fc:79:45:62:48:28:0f:1c:6b:6f:28:37:
                    1c:84:9a:87:2f:ff:a8:ac:69:a7:f0:fd:06:2d:ff:
                    f6:d5:1b:e1:3b:ed:c1:ef:9b:55:d5:54:ed:51:6f:
                    b3:17:fa:2e:3c:34:30:3a:b1:44:94:8c:17:3e:4f:
                    4e:4b:18:bd:39:96:9a:a3:c4:c5:3c:44:74:70:bc:
                    f9:46:db:55:d0:31:97:13:99:7c:bc:82:98:aa:07:
                    b8:76:08:c7:39:d7:c8:31:61:0f:54:87:1f:e2:3f:
                    fe:91:22:49:94:b5:bc:b2:66:4c:8f:75:36:66:bb:
                    da:6e:59:11:ed:5f:48:44:ed:c1:4c:6b:5c:09:cd:
                    77:a4:2e:c9:e5:b1:71:fd:73:0f:b6:93:be:4c:bd:
                    da:5c:f2:10:21:df:f9:d9:16:f0:b7:35:49:af:93:
                    94:90:79:dc:c6:c5:4b:9d:74:9e:38:0a:38:2e:52:
                    a8:c3:d1:92:5a:89:cd:57:46:e5:c0:9d:6b:14:b5:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FF:CB:6A:21:26:D1:F8:23:02:7B:49:1D:63:11:EF:BE:77:71:B8
            X509v3 Authority Key Identifier:
                keyid:49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3133322e35392e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:aa:e8:32:fe:79:b1:29:bd:9d:00:f2:c8:ed:d4:24:d9:
         7b:a4:05:9d:ae:99:77:ca:d8:75:6c:15:29:f3:f5:b7:b8:75:
         c1:0a:52:de:26:c7:4d:d1:44:cb:3e:56:91:fd:1a:51:4b:b8:
         29:7a:34:56:93:e0:09:be:a2:ee:8e:90:19:d1:2f:fb:4e:6a:
         f0:f3:e2:06:20:4c:af:18:64:ed:0f:42:34:08:88:fa:c9:1d:
         23:14:ca:ca:f0:00:ae:93:8b:b8:b3:16:bc:c1:3f:80:3e:f7:
         ee:47:de:43:5a:73:17:9a:d4:63:d1:bc:5e:5a:d0:09:54:89:
         a0:a0:59:a1:e3:c8:60:0b:68:d0:18:09:87:4d:13:16:c6:4f:
         31:79:44:b8:1b:25:fd:1b:74:57:c8:12:6a:9f:39:06:f6:da:
         dc:f5:6d:28:77:14:94:47:aa:6e:7e:14:48:71:5b:10:d1:cf:
         4f:97:55:ce:61:ab:8f:70:6c:04:63:e0:5c:e8:82:1c:a4:93:
         4c:ec:34:42:3b:9a:ad:a4:37:8a:d7:73:ea:92:06:14:c6:ad:
         fc:e2:19:da:99:6a:b3:b2:1f:28:3a:3e:2c:50:4b:9b:0c:a6:
         d7:26:90:8a:77:7e:73:e9:08:9a:0a:1a:85:37:8f:37:d2:d9:
         ec:41:fa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:58:54 2026 by rpki-client