This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130302e302f32322d3332203d3e20323636323536.roa
File:                     3139322e3134302e3130302e302f32322d3332203d3e20323636323536.roa (raw, json)
Hash identifier:          pWUSDaTMefyXoURX03APG0xKFXBlgtzI/ZV8wjitJyE=
Subject key identifier:   2C:D5:51:97:AD:1F:3D:3A:DF:FE:6D:16:EB:A8:AC:17:35:D8:9E:19
Certificate issuer:       /CN=4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5
Certificate serial:       7BA42B936729CBE055A4F93FADB08F02A657274D
Authority key identifier: 4E:FC:29:A3:CA:C6:2D:B4:E3:A7:70:31:15:B3:41:CC:74:89:C9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130302e302f32322d3332203d3e20323636323536.roa
Signing time:             Mon 05 Jan 2026 18:10:20 +0000
ROA not before:           Mon 05 Jan 2026 18:05:20 +0000
ROA not after:            Mon 04 Jan 2027 18:10:20 +0000
asID:                     266256
IP address blocks:        192.140.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.crl
                          rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 15:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a4:2b:93:67:29:cb:e0:55:a4:f9:3f:ad:b0:8f:02:a6:57:27:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5
        Validity
            Not Before: Jan  5 18:05:20 2026 GMT
            Not After : Jan  4 18:10:20 2027 GMT
        Subject: CN=2CD55197AD1F3D3ADFFE6D16EBA8AC1735D89E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:16:78:62:72:a5:f2:57:09:32:cc:12:cb:
                    ad:f5:5c:37:21:a3:b5:17:ce:a0:36:70:0e:79:03:
                    7c:49:d7:2d:29:24:8b:17:f5:20:3f:1c:dd:3c:60:
                    6e:07:c1:aa:8e:f3:2f:62:85:cb:30:1c:26:6f:1c:
                    67:30:5b:9b:a0:17:97:5d:10:ee:9a:50:d2:f4:b9:
                    af:32:93:49:73:b5:a6:56:d9:75:88:e8:cc:f3:42:
                    49:18:eb:1c:3e:8d:a2:fb:14:3a:06:b8:d2:a2:31:
                    98:c8:96:af:b9:30:41:25:68:97:e4:d2:6e:02:f7:
                    be:97:7b:1e:ec:8d:22:c9:c4:7d:b6:b1:18:f9:f3:
                    88:51:9c:5d:00:3d:e3:de:65:cc:66:30:ef:b3:bc:
                    34:43:ec:0a:da:c9:0f:d6:cc:e8:c4:bf:ce:25:a6:
                    e5:38:02:e4:52:51:6f:1c:2a:c2:b3:db:72:1c:f3:
                    3d:17:78:9f:e6:d2:e6:9f:4c:3b:a5:21:46:6a:2f:
                    87:bb:34:4d:08:81:1a:cb:eb:2d:35:8a:40:12:b2:
                    c7:65:6c:2e:27:05:de:f8:b7:00:49:28:11:ec:6c:
                    87:df:86:d2:d7:12:45:d3:1a:4e:a1:9d:0e:12:5b:
                    9a:7b:9f:66:90:5e:48:a8:ab:53:90:2d:b4:fb:c4:
                    4c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D5:51:97:AD:1F:3D:3A:DF:FE:6D:16:EB:A8:AC:17:35:D8:9E:19
            X509v3 Authority Key Identifier:
                keyid:4E:FC:29:A3:CA:C6:2D:B4:E3:A7:70:31:15:B3:41:CC:74:89:C9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/3139322e3134302e3130302e302f32322d3332203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:5c:a9:a3:50:59:ab:df:9e:8f:d5:67:b7:0c:ae:a1:34:
         9a:6a:2b:5d:cb:68:fe:e5:05:7a:0c:1c:46:78:10:aa:9c:9b:
         1d:8c:29:58:0e:c5:99:8d:72:4b:13:ad:7d:63:10:44:7c:04:
         4b:49:3a:5b:0c:23:ce:ca:f4:5d:46:2f:f6:dd:76:c2:57:39:
         c8:b7:75:88:2d:71:dc:3e:55:e4:bc:fc:d3:09:01:70:fd:88:
         f3:89:a7:d0:c2:d3:63:aa:40:68:ff:a1:21:80:b3:2c:87:93:
         64:ee:35:e9:02:5f:e3:7b:bc:64:67:64:3e:3c:18:77:4d:4a:
         bb:ce:72:9d:57:cf:b5:fc:db:69:d7:00:53:fb:1b:9f:73:c3:
         7c:97:81:a2:56:dc:89:9f:e0:7c:dc:2c:64:75:68:92:6f:e7:
         c9:33:8a:d2:3d:bd:a2:0a:93:04:80:a8:1b:8d:df:95:3c:28:
         50:3e:66:79:24:25:11:4f:11:69:12:bc:82:e4:71:99:86:ad:
         42:44:32:5b:07:98:80:6c:37:de:35:eb:a9:fe:f8:ac:08:79:
         64:8f:3f:0a:ed:60:3c:a0:a8:2a:a8:87:fc:ee:f7:17:92:9f:
         44:93:51:76:ec:ce:3e:d2:85:4f:a6:3a:de:d4:64:3b:2a:e7:
         47:b4:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:02:28 2026 by rpki-client