This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130342e302f32322d3232203d3e203533313038.roa
File:                     3136372e3234392e3130342e302f32322d3232203d3e203533313038.roa (raw, json)
Hash identifier:          B/BfODEj3yxKHbX2SokOAvPBdn5Kx58WIG2jcIQmy84=
Subject key identifier:   87:22:C3:60:54:48:5B:F5:7F:FE:BE:F5:47:6C:21:3C:CA:AE:F3:0E
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       5C5A17E3DE0562C83A063EBC8C11BAD222692CF2
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130342e302f32322d3232203d3e203533313038.roa
Signing time:             Tue 06 Jan 2026 13:00:00 +0000
ROA not before:           Tue 06 Jan 2026 12:55:00 +0000
ROA not after:            Tue 05 Jan 2027 13:00:00 +0000
asID:                     53108
IP address blocks:        167.249.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 11:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5a:17:e3:de:05:62:c8:3a:06:3e:bc:8c:11:ba:d2:22:69:2c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan  6 12:55:00 2026 GMT
            Not After : Jan  5 13:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:36:48:00:99:c8:3b:33:55:e2:7d:53:70:b7:
                    da:7c:ad:c8:a1:c2:5b:38:a7:bc:9c:24:26:aa:79:
                    b8:88:43:8d:5f:03:cd:01:bf:4f:ab:2d:4f:d4:37:
                    b3:fb:11:08:94:89:41:60:b0:b1:92:ec:cb:50:30:
                    43:f7:1a:51:b1:94:c8:85:a9:2f:d7:e9:fe:1b:c3:
                    22:ef:26:20:94:48:43:9b:a9:2a:b1:5b:0a:7b:a3:
                    05:f7:75:15:d6:6a:6f:2e:81:43:8c:e0:08:61:18:
                    b3:b4:75:a2:ba:b6:1f:e5:f7:6d:9c:74:0a:8d:c5:
                    74:4e:4f:2e:de:aa:38:4b:d4:f8:19:a9:3d:45:43:
                    5a:b8:d7:d2:c5:40:88:a0:9f:a5:dc:39:35:31:cd:
                    44:32:36:d2:b8:c4:93:a4:4f:9a:ee:6c:18:7d:da:
                    96:f9:81:39:70:10:8a:10:99:1f:9a:c7:47:db:3d:
                    aa:77:89:1b:65:51:4f:de:6b:9f:c1:41:a8:80:31:
                    d4:cc:6d:10:d5:42:88:f7:08:b8:b1:48:ac:d2:7e:
                    14:cf:8f:0b:42:52:b9:2d:d2:15:c3:1d:5d:83:d7:
                    19:a0:a3:63:4b:7f:ab:15:59:33:56:3a:bf:d1:e4:
                    6b:b4:e1:e8:17:e5:10:65:59:21:ee:1b:84:34:84:
                    cd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:22:C3:60:54:48:5B:F5:7F:FE:BE:F5:47:6C:21:3C:CA:AE:F3:0E
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130342e302f32322d3232203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:12:81:19:bb:1b:74:3f:98:8f:4c:1a:15:51:a8:6c:de:eb:
         64:e9:1c:b0:b9:73:d0:ad:fc:1e:77:9e:20:18:71:53:b4:9d:
         69:a1:ab:bc:a1:86:09:9f:6c:57:04:11:54:80:32:15:6f:23:
         4c:d7:36:3b:a7:e8:5b:05:bf:84:69:41:71:70:88:cc:53:79:
         38:d5:7e:93:d5:ed:f7:51:94:f3:fb:31:d4:ea:90:7f:62:e0:
         10:1a:cf:a7:71:53:83:33:35:2c:ac:a6:a2:c2:31:93:36:25:
         42:36:84:20:ca:33:fc:75:46:97:56:d4:8c:74:b8:67:e1:77:
         d7:cd:2d:03:af:33:ec:25:72:14:a3:26:5a:be:26:22:6c:66:
         c5:18:3c:8d:f6:12:70:cd:12:47:d3:ce:c6:75:37:34:00:91:
         98:cb:be:11:d0:2b:64:92:7d:ce:db:8f:f4:cf:02:33:33:38:
         a4:13:62:a9:03:e2:cd:a7:38:4e:2f:53:6f:3c:b2:f4:33:b7:
         e7:0a:aa:33:96:bc:af:93:ed:55:c2:67:98:65:74:73:87:6b:
         2a:49:03:ee:2e:bc:d0:a5:f4:ad:21:e6:0f:16:12:d3:b3:6f:
         fc:10:42:14:54:31:0a:6a:57:71:ff:99:62:ca:6a:bd:a9:1c:
         1d:93:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:46:51 2026 by rpki-client