This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa
File:                     3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa (raw, json)
Hash identifier:          3nnWp4z0u0F/ZBeeps01X/Te4+igufch9fuAk1P89do=
Subject key identifier:   46:1F:1A:62:35:B1:08:A0:03:D0:FC:32:B2:DC:7D:6F:71:8D:07:6B
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       2152E42D13A3429567A56B9499C2FC3452C0F233
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa
Signing time:             Thu 25 Dec 2025 10:40:48 +0000
ROA not before:           Thu 25 Dec 2025 10:35:48 +0000
ROA not after:            Thu 24 Dec 2026 10:40:48 +0000
asID:                     265187
IP address blocks:        168.90.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 05:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:52:e4:2d:13:a3:42:95:67:a5:6b:94:99:c2:fc:34:52:c0:f2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Dec 25 10:35:48 2025 GMT
            Not After : Dec 24 10:40:48 2026 GMT
        Subject: CN=461F1A6235B108A003D0FC32B2DC7D6F718D076B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:d5:be:f8:58:0a:38:fc:72:7f:a8:4d:89:
                    6f:cc:96:62:7f:ee:17:6c:0a:a3:d0:10:31:cd:d1:
                    10:14:18:87:88:12:4b:67:71:67:e8:78:7e:87:a3:
                    69:43:c5:77:8e:f7:3f:4d:0c:fd:0e:5a:2e:6b:a8:
                    bf:d3:57:aa:f5:e1:f6:81:c0:22:8c:ce:54:03:a2:
                    d4:52:2c:09:67:e4:25:cf:97:7f:b4:f5:94:f4:61:
                    39:2a:44:ef:6e:90:37:86:01:56:b9:a6:aa:7c:16:
                    50:ac:86:28:d8:5d:b0:9c:e8:00:4f:e8:3e:25:34:
                    61:1b:5d:e6:45:f9:91:3b:be:da:e7:d3:02:0b:5c:
                    09:70:d6:52:e5:d1:27:5d:25:75:1e:cd:b5:ee:18:
                    2b:9c:cf:df:1f:51:c9:da:5c:c7:b8:56:fd:33:6b:
                    5e:44:99:54:b2:09:58:72:43:83:50:e2:06:27:5b:
                    33:4f:a2:d1:55:e1:3e:f3:c5:e4:71:d4:34:59:32:
                    f4:b4:1d:70:d8:eb:0a:84:c3:00:2e:d6:7d:db:01:
                    bc:e7:e8:f2:7c:67:f5:91:64:d5:16:ee:41:93:6d:
                    19:14:b1:c7:ff:c3:47:8b:d1:c5:e0:3d:e6:f2:f9:
                    0e:5d:d6:22:05:44:2e:50:5b:98:e9:eb:c4:d1:19:
                    38:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1F:1A:62:35:B1:08:A0:03:D0:FC:32:B2:DC:7D:6F:71:8D:07:6B
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:59:c8:53:f6:5f:49:3c:6d:07:a2:bf:a6:0a:d4:74:7b:f7:
         ff:b4:c3:50:aa:9b:e6:01:a8:75:6c:53:74:91:cf:42:63:5a:
         1f:99:eb:6e:92:ab:74:c5:60:1d:a8:99:da:64:25:b8:57:21:
         43:30:ef:87:09:de:11:9e:7c:5f:ad:ef:70:8b:51:d8:1e:1f:
         33:70:3c:23:ff:ed:3e:74:88:71:b2:79:b3:a2:65:53:de:1b:
         9e:07:77:9b:6f:f3:0b:c6:aa:b9:2a:ef:e2:f5:c9:bf:e8:da:
         bb:43:aa:9d:13:ba:a4:44:7f:a5:5a:ce:94:01:5f:22:f7:a3:
         75:1e:43:5a:9e:b7:fa:9f:cd:53:74:88:0c:e3:9e:ad:d3:51:
         24:9a:d5:27:01:8f:b3:68:55:66:78:db:be:c5:4f:aa:87:14:
         a2:7c:62:37:66:ea:c4:a5:02:44:e6:8d:38:29:0c:9c:d5:99:
         17:ee:54:51:18:2f:7e:ac:a9:0c:e4:62:4d:88:84:e9:25:40:
         ee:b6:57:a3:b1:eb:ff:6e:f8:5b:6e:f7:e8:78:ce:bc:58:81:
         7f:01:71:ba:ad:6f:74:55:99:e3:c7:37:74:ac:49:79:02:36:
         df:05:03:40:ea:a4:a9:43:45:a2:4a:e7:20:c8:27:32:8f:64:
         83:f8:37:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 11:09:48 2026 by rpki-client