This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132362e302f32342d3234203d3e203631383736.roa
File:                     3230312e3135302e3132362e302f32342d3234203d3e203631383736.roa (raw, json)
Hash identifier:          +3vhzuj0zKSjQBykJ6XYkm/ONY0PUIqMBms9Hbo/dPk=
Subject key identifier:   EC:D7:AE:83:B6:C3:64:33:8C:20:96:46:9E:FF:10:3A:CF:36:E0:89
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       2DAC86A8001E61D5514BE0BBCE92B72BB2F4E2E7
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132362e302f32342d3234203d3e203631383736.roa
Signing time:             Tue 23 Dec 2025 17:48:07 +0000
ROA not before:           Tue 23 Dec 2025 17:43:07 +0000
ROA not after:            Tue 22 Dec 2026 17:48:07 +0000
asID:                     61876
IP address blocks:        201.150.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 23:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ac:86:a8:00:1e:61:d5:51:4b:e0:bb:ce:92:b7:2b:b2:f4:e2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Dec 23 17:43:07 2025 GMT
            Not After : Dec 22 17:48:07 2026 GMT
        Subject: CN=ECD7AE83B6C364338C2096469EFF103ACF36E089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:d4:98:c8:3b:bc:b9:9a:30:b9:c2:c3:b5:
                    ce:bc:c7:56:4f:39:51:1c:14:2d:c4:47:fd:f0:fb:
                    05:1a:0c:cb:e9:69:82:05:ea:30:3f:5b:b0:0f:f4:
                    b0:45:ae:d6:83:b1:ee:c7:38:c0:4b:cd:6a:05:d0:
                    0a:6b:75:a4:14:ca:07:d0:0d:60:5c:e0:17:bb:50:
                    19:57:47:da:a3:e6:fc:27:95:c0:5e:70:c7:37:f3:
                    4a:03:74:7e:54:da:a1:b7:cc:3a:6f:47:a5:1e:a5:
                    c9:c5:16:50:dd:0c:6f:1d:7c:15:99:ae:af:22:83:
                    78:26:af:63:2e:ed:a9:cc:e2:9f:85:45:91:40:f4:
                    31:3a:8b:6d:ee:29:d0:8c:22:73:69:e4:41:b9:ce:
                    02:18:b9:86:65:d0:89:21:ed:56:09:5b:88:85:27:
                    b9:4e:c4:3b:3b:43:0e:13:d9:48:03:04:e3:f7:42:
                    11:4f:47:b2:08:89:25:4b:e3:d3:cb:e0:c7:3c:6c:
                    ee:aa:bd:d5:72:e5:07:06:12:5e:c1:f1:52:0d:df:
                    a9:57:20:05:83:67:87:b2:68:15:2d:cd:5d:1f:88:
                    36:88:4a:8d:46:49:6a:bb:1b:36:40:11:c9:b1:3b:
                    52:27:9f:e4:e5:32:7d:06:b7:ec:88:c8:22:19:63:
                    20:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D7:AE:83:B6:C3:64:33:8C:20:96:46:9E:FF:10:3A:CF:36:E0:89
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132362e302f32342d3234203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:4d:87:53:55:01:20:8c:04:b3:35:1d:9d:0b:e1:64:5a:
         89:0b:af:26:8d:d8:e8:3f:45:a0:1e:57:8a:6f:46:6c:27:41:
         7e:b7:47:c6:a4:0d:dd:40:04:ab:f7:af:24:7b:e0:bd:54:ee:
         9e:46:e9:b0:ce:ec:81:ca:13:22:eb:e0:09:ea:a2:77:e6:f8:
         26:14:92:6f:31:ce:b7:50:dd:69:3a:56:02:0e:d9:5c:66:e3:
         ae:d4:58:3f:79:80:c4:c7:65:03:a9:1f:28:06:da:4e:f0:12:
         6a:ea:07:8b:f8:69:da:b2:a5:d0:2b:55:98:ff:49:d2:33:7f:
         51:51:ae:09:94:69:1f:5a:6d:62:58:ed:64:fa:05:aa:95:fd:
         b1:02:0a:6b:97:f1:50:2d:06:cb:bb:74:b6:4c:c7:a7:6c:e5:
         9c:d0:4e:4b:15:27:32:ed:e0:71:75:35:ea:7d:ec:a3:c0:b7:
         22:d8:32:5b:bc:ba:08:07:81:dc:0a:77:74:b6:5f:99:a7:f6:
         92:4b:d0:f4:2a:24:3f:59:6a:fa:81:26:cc:76:8a:43:41:5a:
         41:96:6b:65:72:3f:10:33:4f:fe:f8:96:ba:22:ae:f6:b7:77:
         df:6c:07:b1:fc:79:bd:91:c5:88:09:d2:ed:d1:e0:78:d1:22:
         79:91:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:19:50 2026 by rpki-client