This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38332e302f32342d3234203d3e2032373136.roa
File:                     3230302e31372e38332e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          bRJL2RlVAJwF6yh33QWVhsi0o5WPQagJph541Sxrmak=
Subject key identifier:   69:BD:6B:70:43:B7:6A:38:77:C1:5B:6F:C2:28:4B:5E:D4:A3:FC:A0
Certificate issuer:       /CN=4940EEB21B4128216F8FFB3B0A997946697632F5
Certificate serial:       4081499109D934387B47E4A73068738669FD4FFB
Authority key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38332e302f32342d3234203d3e2032373136.roa
Signing time:             Tue 20 Jan 2026 13:47:25 +0000
ROA not before:           Tue 20 Jan 2026 13:42:25 +0000
ROA not after:            Tue 19 Jan 2027 13:47:25 +0000
asID:                     2716
IP address blocks:        200.17.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Feb 2026 17:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:81:49:91:09:d9:34:38:7b:47:e4:a7:30:68:73:86:69:fd:4f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940EEB21B4128216F8FFB3B0A997946697632F5
        Validity
            Not Before: Jan 20 13:42:25 2026 GMT
            Not After : Jan 19 13:47:25 2027 GMT
        Subject: CN=69BD6B7043B76A3877C15B6FC2284B5ED4A3FCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5b:d1:58:7d:d5:b0:7c:b4:6f:df:de:bb:b0:
                    aa:d9:54:8b:81:81:ad:20:1a:91:f6:02:42:73:69:
                    81:86:e6:23:df:31:72:fc:f9:88:ae:39:92:93:cb:
                    9b:d3:7e:60:e1:dd:f0:94:5c:2d:fc:4f:d6:6b:6c:
                    f6:db:d8:ae:4a:5e:85:c5:07:44:75:23:cf:7c:20:
                    c9:a0:c6:c9:8b:ef:93:34:04:4d:3d:bc:5c:77:be:
                    5b:70:47:5c:d1:23:28:3f:3f:4b:df:ea:ca:62:6b:
                    c2:e1:2b:d2:9e:93:ee:21:99:b0:87:a1:bf:4b:40:
                    80:1f:e3:6e:c8:cd:59:5c:95:ce:1e:46:69:3b:d0:
                    c6:ef:4f:b8:c3:81:dc:b0:b2:66:8a:85:d4:fc:d4:
                    4e:b6:33:27:96:ec:7a:68:af:6a:f0:99:c4:dc:9e:
                    c0:ff:87:1c:f8:62:ed:17:a4:0a:d5:90:2b:28:e8:
                    8c:91:69:f3:24:4c:d1:22:df:8e:be:4c:2e:2f:3e:
                    a4:05:1d:e3:fe:1a:c5:4e:a3:75:2d:be:c4:12:d8:
                    06:5e:40:b9:0a:bd:fe:ed:48:15:17:1a:23:5c:e5:
                    d1:05:6a:c8:8c:c6:74:ad:c2:09:98:87:17:93:bd:
                    48:90:66:53:45:ba:f1:ba:01:96:28:d6:17:85:0c:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BD:6B:70:43:B7:6A:38:77:C1:5B:6F:C2:28:4B:5E:D4:A3:FC:A0
            X509v3 Authority Key Identifier:
                keyid:49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31372e38332e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:6e:ca:60:4e:b3:d0:e3:d4:d6:09:68:76:05:96:24:e3:
         88:ea:d4:fc:29:1d:63:42:1f:ba:fe:b9:d2:04:e3:88:35:1e:
         e7:96:9a:e3:3c:20:0a:7f:8e:0c:77:57:88:19:35:84:aa:54:
         f9:89:6e:15:a7:77:62:ed:f4:37:8d:91:12:64:79:2f:77:f6:
         cf:36:01:cc:ca:07:db:a3:fb:2d:b5:92:d0:ac:39:4b:a8:ac:
         33:50:b0:0e:4e:c7:ff:d2:b3:a3:2f:ab:7e:5a:e4:26:ff:e2:
         ce:1f:47:4a:68:7e:d4:1e:f3:76:f2:9c:76:96:c9:9f:c7:57:
         2b:ad:6f:df:7a:87:82:71:c5:a8:1f:14:b9:5b:b5:72:c7:b3:
         59:1d:a2:f2:ff:35:c9:37:2a:bb:71:a3:09:54:83:db:a1:c3:
         9e:3c:e7:b7:1c:d6:f7:0a:d2:02:6a:16:03:34:86:db:83:b7:
         b1:a6:49:a6:f2:33:46:0b:62:cd:d4:dd:1b:c5:4e:e7:18:3b:
         f4:fb:a5:7c:eb:06:cd:2f:58:17:50:2a:67:85:43:70:28:bb:
         cf:0f:87:c4:9a:15:47:ba:b6:94:23:01:5e:a3:b5:43:b7:0b:
         5d:35:ed:09:97:90:0c:83:3e:8c:0d:55:b8:46:66:64:d4:52:
         b0:02:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:58:54 2026 by rpki-client