This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38362e302f32342d3234203d3e20323634313933.roa
File:                     3133382e33362e38362e302f32342d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          jQKgLiEcHT1jQi25uVZOEFzBkMfvCZwfybJ3uqAF+vg=
Subject key identifier:   4F:F7:35:9C:BC:9B:36:58:19:E5:B6:ED:E5:03:CE:36:0A:00:3D:75
Certificate issuer:       /CN=19070C100CE160EA1A2AA743323AC5B5B152D553
Certificate serial:       4711111F2484072AF73C2C54C580C39E6E2837D9
Authority key identifier: 19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38362e302f32342d3234203d3e20323634313933.roa
Signing time:             Sun 28 Dec 2025 20:51:20 +0000
ROA not before:           Sun 28 Dec 2025 20:46:20 +0000
ROA not after:            Sun 27 Dec 2026 20:51:20 +0000
asID:                     264193
IP address blocks:        138.36.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl
                          rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 16:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:11:11:1f:24:84:07:2a:f7:3c:2c:54:c5:80:c3:9e:6e:28:37:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19070C100CE160EA1A2AA743323AC5B5B152D553
        Validity
            Not Before: Dec 28 20:46:20 2025 GMT
            Not After : Dec 27 20:51:20 2026 GMT
        Subject: CN=4FF7359CBC9B365819E5B6EDE503CE360A003D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:cb:b2:8e:6f:c5:8a:48:45:96:49:76:d6:
                    d9:37:f4:f6:ad:80:ad:89:9f:1f:da:ee:0e:55:13:
                    ee:be:4f:14:be:b5:03:b2:38:99:3c:aa:87:1f:69:
                    c6:ee:df:f1:35:00:90:41:e7:c0:a6:84:e3:b5:7e:
                    0c:ec:9d:36:dc:b4:05:14:17:85:a3:87:b9:65:35:
                    c4:b2:a3:cc:79:5c:e8:4b:32:c6:d2:30:09:77:e1:
                    5c:28:64:5f:01:f0:3d:ed:bd:8a:e1:9f:54:b5:7a:
                    65:d6:97:44:08:f5:2c:7c:b8:b9:cb:78:8d:a8:cb:
                    37:b3:73:5c:01:9f:35:4e:d5:ec:34:09:8c:98:f1:
                    b2:d8:3f:d8:d3:37:a7:69:7b:de:0a:d3:a2:ec:3e:
                    56:50:2a:25:8e:cd:d5:2a:09:ce:a0:cb:c9:74:e7:
                    fc:8f:49:e7:ab:fc:8b:3e:1c:92:c2:51:e9:50:02:
                    c9:a1:e3:ed:cf:4b:84:28:f0:f7:ee:d1:f3:49:a6:
                    d7:5a:5f:9f:12:a3:8f:e1:33:59:48:8f:c4:de:ea:
                    98:0a:2c:0a:0f:fb:48:bc:56:c0:d7:f8:e2:53:87:
                    ac:cd:cf:f6:cb:4f:ea:cb:9a:da:11:3b:f8:b1:e9:
                    91:66:f9:e6:df:71:5f:26:68:d2:9a:dc:49:c6:50:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F7:35:9C:BC:9B:36:58:19:E5:B6:ED:E5:03:CE:36:0A:00:3D:75
            X509v3 Authority Key Identifier:
                keyid:19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38362e302f32342d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:4c:e6:15:d5:08:ff:f8:8d:d9:43:da:e4:01:84:80:d6:9a:
         90:a7:65:3f:81:6f:3e:3d:e2:1f:13:85:59:22:40:8b:6d:ff:
         e2:63:c0:7e:a3:fe:d0:76:57:d4:0f:84:7c:bb:bd:af:9e:b7:
         d6:2e:bb:49:2f:a2:80:19:de:ff:c2:62:0d:ed:f6:16:c4:3e:
         8d:7c:cc:6f:c7:2e:11:a8:08:85:85:b5:3b:21:25:c7:3d:79:
         9f:ff:c8:66:c6:8b:fb:42:2a:5c:ab:44:c1:d4:55:ee:8a:82:
         20:cb:ff:84:60:e7:ef:26:dc:e9:e4:54:50:f8:21:75:fa:1e:
         6b:88:43:62:44:2b:47:55:a1:a7:b0:c8:c8:2d:c6:17:97:fb:
         3f:98:a7:2b:28:90:fc:f3:cd:53:50:f6:d8:dd:f3:c4:49:4c:
         0c:3d:13:7d:25:ec:83:d8:50:69:17:fb:1f:e7:30:55:bc:de:
         69:54:9f:25:f5:40:68:a0:9e:52:b1:5f:8e:0f:d1:c5:0e:9b:
         61:5f:c0:dc:06:b5:e3:63:91:a4:af:c7:b7:db:f1:8a:8c:5e:
         f0:ae:e3:f6:90:55:b5:d0:c0:f6:8a:c6:89:39:3a:df:46:0b:
         1b:1e:bb:d5:09:c5:16:b8:65:b0:2f:2d:d3:86:55:84:1d:3a:
         d1:3b:c9:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURxERHySEByr3PCxUxYDDnm4oN9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwNzBDMTAwQ0UxNjBFQTFBMkFBNzQzMzIzQUM1QjVC
MTUyRDU1MzAeFw0yNTEyMjgyMDQ2MjBaFw0yNjEyMjcyMDUxMjBaMDMxMTAvBgNV
BAMTKDRGRjczNTlDQkM5QjM2NTgxOUU1QjZFREU1MDNDRTM2MEEwMDNENzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/n8uyjm/FikhFlkl21tk39Pat
gK2Jnx/a7g5VE+6+TxS+tQOyOJk8qocfacbu3/E1AJBB58CmhOO1fgzsnTbctAUU
F4Wjh7llNcSyo8x5XOhLMsbSMAl34VwoZF8B8D3tvYrhn1S1emXWl0QI9Sx8uLnL
eI2oyzezc1wBnzVO1ew0CYyY8bLYP9jTN6dpe94K06LsPlZQKiWOzdUqCc6gy8l0
5/yPSeer/Is+HJLCUelQAsmh4+3PS4Qo8Pfu0fNJptdaX58So4/hM1lIj8Te6pgK
LAoP+0i8VsDX+OJTh6zNz/bLT+rLmtoRO/ix6ZFm+ebfcV8maNKa3EnGUKRBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUT/c1nLybNlgZ5bbt5QPONgoAPXUwHwYDVR0j
BBgwFoAUGQcMEAzhYOoaKqdDMjrFtbFS1VMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZTZ3FycUN3Snp2b0VSelYxdHlMWWJ1ZFhWRVNFNDFyTXVYUkVRWDJK
RlEvMC8xOTA3MEMxMDBDRTE2MEVBMUEyQUE3NDMzMjNBQzVCNUIxNTJENTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MDcwQzEwMENFMTYwRUEx
QTJBQTc0MzMyM0FDNUI1QjE1MkQ1NTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGU2dxcnFDd0p6dm9FUnpWMXR5TFlidWRYVkVTRTQxck11WFJFUVgySkZRLzAv
MzEzMzM4MmUzMzM2MmUzODM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAiiRWMA0GCSqGSIb3DQEBCwUAA4IBAQA6TOYV1Qj/
+I3ZQ9rkAYSA1pqQp2U/gW8+PeIfE4VZIkCLbf/iY8B+o/7QdlfUD4R8u72vnrfW
LrtJL6KAGd7/wmIN7fYWxD6NfMxvxy4RqAiFhbU7ISXHPXmf/8hmxov7Qipcq0TB
1FXuioIgy/+EYOfvJtzp5FRQ+CF1+h5riENiRCtHVaGnsMjILcYXl/s/mKcrKJD8
881TUPbY3fPESUwMPRN9JeyD2FBpF/sf5zBVvN5pVJ8l9UBooJ5SsV+OD9HFDpth
X8DcBrXjY5Gkr8e32/GKjF7wruP2kFW10MD2isaJOTrfRgsbHrvVCcUWuGWwLy3T
hlWEHTrRO8kD
-----END CERTIFICATE-----
Generated at Mon Jan 12 09:11:06 2026 by rpki-client