This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          tVLtDmXKT/YZf/DWdg/uPP/Mdq9jDrzrF/uRrhsuEvE=
Subject key identifier:   FE:1E:62:42:27:87:B5:87:2D:64:B7:C6:7F:BB:B5:8F:60:B3:E3:0C
Certificate issuer:       /CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
Certificate serial:       41DBA36FC882FFAC9150C4684BD1B158636677D3
Authority key identifier: B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa
Signing time:             Fri 02 Jan 2026 21:33:35 +0000
ROA not before:           Fri 02 Jan 2026 21:28:35 +0000
ROA not after:            Fri 01 Jan 2027 21:33:35 +0000
asID:                     263518
IP address blocks:        191.243.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl
                          rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 16:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:db:a3:6f:c8:82:ff:ac:91:50:c4:68:4b:d1:b1:58:63:66:77:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
        Validity
            Not Before: Jan  2 21:28:35 2026 GMT
            Not After : Jan  1 21:33:35 2027 GMT
        Subject: CN=FE1E62422787B5872D64B7C67FBBB58F60B3E30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:be:17:20:f8:17:76:71:17:bc:b9:ae:e9:86:
                    97:4b:b2:1e:91:36:50:12:f7:7d:1c:4c:53:61:05:
                    ca:b2:22:0a:93:f3:fc:e1:37:34:cb:cb:46:fc:fb:
                    c3:94:cd:9c:dc:f2:01:d2:ec:36:af:76:01:3c:99:
                    70:6b:33:3e:7c:58:32:e6:8b:a2:38:bc:56:d4:28:
                    c3:54:47:3f:54:2e:08:bf:6a:09:9c:6c:f7:08:78:
                    9e:99:0a:04:a9:da:43:cb:d8:8a:f8:f1:a7:84:70:
                    ac:cb:57:54:1f:e2:b1:97:28:07:ac:15:67:a4:b2:
                    76:ec:7f:90:f2:f5:9a:ca:e3:ca:b0:83:d3:37:89:
                    ae:d9:a7:c5:20:7e:ea:7c:d8:02:11:9d:01:ab:03:
                    e1:80:84:eb:78:e0:27:e8:a0:16:80:56:da:3d:2e:
                    fc:ba:f0:44:73:bd:46:8c:9f:04:92:3e:9a:53:8f:
                    8e:31:a0:1c:67:94:01:41:dc:ed:2f:e2:67:20:67:
                    83:d3:65:63:0d:d5:41:bc:67:d4:d1:df:43:5e:ae:
                    43:f3:47:7d:1d:e4:b3:d3:b3:23:55:ba:c7:c0:88:
                    59:3c:2a:b3:ce:2f:86:28:6e:45:09:34:cb:ba:a8:
                    81:8a:03:47:b0:e9:f4:7c:3d:b4:02:ad:57:f1:87:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1E:62:42:27:87:B5:87:2D:64:B7:C6:7F:BB:B5:8F:60:B3:E3:0C
            X509v3 Authority Key Identifier:
                keyid:B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:0e:40:32:93:5b:01:5c:a8:89:bb:5c:5a:7f:2c:70:40:d1:
         4b:f4:b0:a2:62:8a:99:80:70:20:f7:c4:e4:5b:f7:ef:14:d3:
         d5:87:b1:14:a3:59:89:c4:64:9d:9f:68:e4:b7:f0:20:21:85:
         f6:2c:4b:13:23:e8:31:2e:d3:db:bc:90:17:92:17:b3:3e:85:
         55:8e:17:0c:81:ba:42:a2:ff:9d:cd:49:5d:aa:2a:c3:7c:ef:
         b8:09:ef:ac:56:42:43:0d:b1:28:79:e8:96:2f:50:8f:11:77:
         09:12:53:bd:8a:b3:44:14:d3:a5:cc:cd:38:c4:19:df:b2:a5:
         ac:12:a4:d6:e3:3c:23:c4:f7:d9:2d:71:1b:14:1e:bf:d8:c0:
         c2:b1:89:0e:42:f5:48:b6:78:93:d0:b3:0e:06:c9:17:f7:dc:
         ea:e9:a2:24:b6:bc:c4:c9:d3:10:d4:1b:1e:d5:c3:a4:c9:fe:
         36:ee:00:61:a7:d0:0f:c4:1e:13:9c:b2:17:c4:58:41:ea:57:
         3b:12:53:de:8a:37:83:ec:6f:e1:51:36:62:10:97:ce:38:6c:
         a1:3e:50:00:e4:d3:a8:bc:52:1b:31:a5:d0:d6:a9:68:7e:44:
         6e:33:96:9f:cf:94:7d:e7:23:0a:8f:9f:ee:ef:62:22:82:1d:
         10:3f:1f:5e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQdujb8iC/6yRUMRoS9GxWGNmd9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4OTI4MDA2RDlFRDI4RjdFQzk4OTE3NEZDOUM0MEVB
NDQ4MzhDMTAeFw0yNjAxMDIyMTI4MzVaFw0yNzAxMDEyMTMzMzVaMDMxMTAvBgNV
BAMTKEZFMUU2MjQyMjc4N0I1ODcyRDY0QjdDNjdGQkJCNThGNjBCM0UzMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDivhcg+Bd2cRe8ua7phpdLsh6R
NlAS930cTFNhBcqyIgqT8/zhNzTLy0b8+8OUzZzc8gHS7DavdgE8mXBrMz58WDLm
i6I4vFbUKMNURz9ULgi/agmcbPcIeJ6ZCgSp2kPL2Ir48aeEcKzLV1Qf4rGXKAes
FWeksnbsf5Dy9ZrK48qwg9M3ia7Zp8Ugfup82AIRnQGrA+GAhOt44CfooBaAVto9
Lvy68ERzvUaMnwSSPppTj44xoBxnlAFB3O0v4mcgZ4PTZWMN1UG8Z9TR30NerkPz
R30d5LPTsyNVusfAiFk8KrPOL4YobkUJNMu6qIGKA0ew6fR8PbQCrVfxh5QFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/h5iQieHtYctZLfGf7u1j2Cz4wwwHwYDVR0j
BBgwFoAUsokoAG2e0o9+yYkXT8nEDqRIOMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW5nZWVqY2NQYXozaW1WbWUzcUQ0N2lQeDZYdFZ2eXJrS1ZMMURUM2p1
UHovMC9CMjg5MjgwMDZEOUVEMjhGN0VDOTg5MTc0RkM5QzQwRUE0NDgzOEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyODkyODAwNkQ5RUQyOEY3
RUM5ODkxNzRGQzlDNDBFQTQ0ODM4QzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzluZ2VlamNjUGF6M2ltVm1lM3FENDdpUHg2WHRWdnlya0tWTDFEVDNqdVB6LzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/z1jANBgkqhkiG9w0BAQsFAAOCAQEAzA5A
MpNbAVyoibtcWn8scEDRS/SwomKKmYBwIPfE5Fv37xTT1YexFKNZicRknZ9o5Lfw
ICGF9ixLEyPoMS7T27yQF5IXsz6FVY4XDIG6QqL/nc1JXaoqw3zvuAnvrFZCQw2x
KHnoli9QjxF3CRJTvYqzRBTTpczNOMQZ37KlrBKk1uM8I8T32S1xGxQev9jAwrGJ
DkL1SLZ4k9CzDgbJF/fc6umiJLa8xMnTENQbHtXDpMn+Nu4AYafQD8QeE5yyF8RY
QepXOxJT3oo3g+xv4VE2YhCXzjhsoT5QAOTTqLxSGzGl0NapaH5EbjOWn8+Ufecj
Co+f7u9iIoIdED8fXg==
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:06 2026 by rpki-client