This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa
File:                     3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa (raw, json)
Hash identifier:          vZY3at5xLXMHCDsAmQHryxGRyVyCr/Lpp4Q5Nj7AX8U=
Subject key identifier:   7E:CD:34:45:4C:8E:E8:F4:7A:F6:22:EA:E2:4C:CE:D8:7C:1C:D9:DB
Certificate issuer:       /CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
Certificate serial:       609EB7C70358878CC4D64B9C5E9B6D563F3991CB
Authority key identifier: B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa
Signing time:             Tue 06 Jan 2026 12:23:36 +0000
ROA not before:           Tue 06 Jan 2026 12:18:36 +0000
ROA not after:            Tue 05 Jan 2027 12:23:36 +0000
asID:                     61796
IP address blocks:        201.159.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 23:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9e:b7:c7:03:58:87:8c:c4:d6:4b:9c:5e:9b:6d:56:3f:39:91:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
        Validity
            Not Before: Jan  6 12:18:36 2026 GMT
            Not After : Jan  5 12:23:36 2027 GMT
        Subject: CN=7ECD34454C8EE8F47AF622EAE24CCED87C1CD9DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:5f:5b:d9:3b:6c:cb:e1:51:9a:6e:98:9e:
                    e3:7f:0c:05:b1:60:18:a4:61:8e:c4:93:72:6b:21:
                    85:88:7f:14:bb:77:7a:20:b6:24:a6:4a:33:23:9e:
                    46:b8:0d:bc:f2:94:ad:81:24:86:8b:e7:fc:af:4f:
                    1b:84:91:8f:87:ee:6a:09:55:e7:08:75:94:01:f9:
                    1b:7d:52:ce:26:c2:a9:87:65:e0:ed:12:64:fd:1c:
                    f1:3f:cf:2c:4a:2f:a5:01:bd:d7:5e:2d:c5:ac:f8:
                    fb:94:8c:99:a9:d7:7b:b0:5b:00:5b:c5:e6:fc:ff:
                    b0:d1:31:a2:5d:b6:9f:15:8e:fa:e5:e2:89:64:90:
                    00:0a:dc:ac:5c:f7:3c:ac:79:15:59:0a:02:88:9b:
                    c7:39:96:1f:66:ee:2c:e6:5d:fa:87:e7:23:09:b2:
                    7f:3b:5d:56:90:3e:c4:ee:7a:e5:d7:37:bd:a6:20:
                    75:2b:d5:d3:f2:e3:73:e2:ee:97:84:30:21:6a:52:
                    ea:22:1b:dd:22:52:94:fa:24:53:16:d5:8d:61:cb:
                    95:e0:57:f3:de:93:52:97:19:dc:b9:97:32:7a:a8:
                    c9:e8:94:b3:f6:74:8b:23:e5:d2:1b:6d:50:e6:a5:
                    12:22:79:96:53:df:7d:9d:eb:20:20:25:46:68:b2:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CD:34:45:4C:8E:E8:F4:7A:F6:22:EA:E2:4C:CE:D8:7C:1C:D9:DB
            X509v3 Authority Key Identifier:
                keyid:B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:f2:c4:28:72:72:eb:c3:08:f6:0b:71:fc:00:3a:66:d1:c4:
         2d:43:46:45:cd:ad:a4:8a:e8:39:76:a5:d9:72:10:19:b4:42:
         6f:f9:ef:8a:6a:c1:0c:66:92:c3:c9:63:51:69:f1:12:d0:82:
         78:61:3c:4c:76:e8:8b:bf:a0:2d:81:78:36:a5:6d:9b:fd:90:
         0b:28:81:c7:66:2b:7b:d9:e8:e8:88:5a:cf:88:9d:01:63:06:
         3f:6e:f9:ac:6f:9c:b8:4d:02:37:6f:32:6d:8a:17:e6:67:10:
         d3:35:f6:b8:2b:fa:9f:48:74:85:b5:44:37:5b:c0:75:33:91:
         c9:46:2f:57:0d:4f:c7:81:44:94:8e:c2:e7:8c:03:98:4c:39:
         b2:56:a5:c9:2b:39:0e:9b:fc:cb:66:42:8c:96:ac:93:2f:eb:
         8c:73:38:a1:1a:a3:0a:dd:d1:d5:d4:ea:c9:df:48:5d:e4:76:
         49:20:a8:46:06:61:5f:7d:56:a0:34:15:86:bb:5e:97:5e:28:
         58:7a:e1:58:9f:f6:11:ac:71:79:79:7a:0c:e9:00:e5:26:7b:
         75:b7:99:f6:6a:05:12:59:ad:d2:a3:4b:43:b7:ee:b0:ef:48:
         0b:b6:f6:e7:df:2c:02:89:a8:0a:a3:92:c8:22:90:62:68:74:
         cc:20:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:40:33 2026 by rpki-client