This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3136382e39302e3136342e302f32322d3332203d3e203533303035.roa
File:                     3136382e39302e3136342e302f32322d3332203d3e203533303035.roa (raw, json)
Hash identifier:          i9nu9UZcjPlG/OEbgEcaP2+r0qXkGMyPHbQCrh50Y/E=
Subject key identifier:   10:28:29:6A:F4:40:FE:FF:A3:9A:34:99:30:5B:05:25:D3:75:C0:D4
Certificate issuer:       /CN=AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A
Certificate serial:       5CEE14B749B057F74EDF4E5CCC9538E430D974C5
Authority key identifier: AF:8C:9B:C6:ED:BF:FD:E9:8F:E3:84:11:B6:AB:6C:7B:9F:52:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3136382e39302e3136342e302f32322d3332203d3e203533303035.roa
Signing time:             Sun 28 Dec 2025 10:02:14 +0000
ROA not before:           Sun 28 Dec 2025 09:57:14 +0000
ROA not after:            Sun 27 Dec 2026 10:02:14 +0000
asID:                     53005
IP address blocks:        168.90.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.crl
                          rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 07:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ee:14:b7:49:b0:57:f7:4e:df:4e:5c:cc:95:38:e4:30:d9:74:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A
        Validity
            Not Before: Dec 28 09:57:14 2025 GMT
            Not After : Dec 27 10:02:14 2026 GMT
        Subject: CN=1028296AF440FEFFA39A3499305B0525D375C0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ce:b7:ee:71:8a:3d:cb:0a:57:d2:9f:65:c7:
                    5a:37:9c:01:3f:61:b0:d0:b4:38:d3:69:e5:6e:a8:
                    46:5b:b8:ef:d2:29:01:10:0b:90:7e:81:86:ec:57:
                    ba:c3:ca:5a:4e:b0:da:15:28:86:48:f8:ed:e4:7f:
                    c8:5a:b4:11:7a:34:47:47:af:d2:00:fd:03:8a:57:
                    d0:42:f5:0a:ea:ad:16:58:90:5b:92:76:84:ef:10:
                    22:68:48:30:1a:4d:3b:ed:82:9c:22:d7:f2:e3:ca:
                    33:7e:b6:8e:d9:66:16:87:6f:65:c1:1e:8b:c8:be:
                    ac:19:78:97:27:00:93:b5:13:4d:b9:ab:8b:d3:c2:
                    f8:38:48:3d:f0:3c:da:e1:2c:4f:b3:31:eb:31:d9:
                    7f:d3:8c:d1:39:f2:49:b0:08:24:38:f1:9c:a1:95:
                    c8:96:d5:ef:f1:43:9e:bd:89:e0:88:b5:d1:af:6d:
                    5b:dd:3a:2b:06:fc:d1:62:0c:c9:60:71:63:d1:ed:
                    90:d0:49:fd:52:f2:b8:97:ab:03:28:7c:80:dc:38:
                    94:b5:f7:9e:61:ab:02:9a:f7:c7:07:cd:da:84:e5:
                    6e:f1:07:11:dd:f6:ea:a3:8a:68:ee:c8:5d:04:00:
                    22:13:85:b2:04:41:c2:46:e7:72:04:79:92:d8:92:
                    1c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:28:29:6A:F4:40:FE:FF:A3:9A:34:99:30:5B:05:25:D3:75:C0:D4
            X509v3 Authority Key Identifier:
                keyid:AF:8C:9B:C6:ED:BF:FD:E9:8F:E3:84:11:B6:AB:6C:7B:9F:52:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3136382e39302e3136342e302f32322d3332203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:ba:b4:c1:13:4c:0b:c7:61:bd:be:9e:b6:9b:3c:1d:0d:1b:
         bb:4b:f2:72:ce:3d:5f:42:7e:a7:61:ee:50:6a:99:23:5f:53:
         78:73:2c:18:71:f7:99:b0:97:f4:b5:df:85:db:7f:09:1b:17:
         bd:39:d7:da:df:34:66:32:b1:36:c7:54:57:11:41:a8:5a:c5:
         c3:6b:0f:1a:11:71:7d:12:73:34:ef:7a:76:46:a6:41:1c:ef:
         4d:bd:1f:8b:43:c1:b6:9c:98:8a:8f:74:42:aa:02:25:bd:dc:
         5d:32:e8:a6:a0:77:b7:e8:ee:a4:fd:48:c6:f8:f8:99:1b:28:
         ec:08:8d:41:52:00:f7:12:83:42:63:46:7a:6c:6d:07:ae:86:
         df:fc:0a:74:24:af:9d:54:06:1f:e0:26:f6:f3:5d:3c:df:39:
         4b:3a:a2:65:a7:c1:ed:ee:1d:b1:b4:ab:3d:6d:af:47:76:a9:
         90:5a:b4:f5:e9:b2:0b:74:97:48:c4:20:73:05:17:e1:b7:58:
         f6:45:30:7a:18:51:6f:88:f5:7e:50:74:a0:58:d6:2a:e3:34:
         01:d6:59:64:de:b1:db:af:af:83:ea:58:62:03:0d:05:d5:1b:
         6c:ae:58:33:64:a9:fa:03:fa:7c:27:ff:8a:1b:b0:50:c7:ec:
         42:79:11:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:29:00 2026 by rpki-client