This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3138372e3132312e3233362e302f32322d3332203d3e20323635333639.roa
File:                     3138372e3132312e3233362e302f32322d3332203d3e20323635333639.roa (raw, json)
Hash identifier:          tLZwK2mXhP3B38w+zOpLNv7crUUW3oweb+lmaAJbsEk=
Subject key identifier:   DD:84:A2:DF:5D:79:F1:3C:ED:A4:3D:ED:DD:5B:C7:2C:B4:5D:F6:3A
Certificate issuer:       /CN=D88B454BC594C5A1800134E375B465D91C070DFD
Certificate serial:       30B516D947AB5E0CDED5385D7D4C342CBAFEC67A
Authority key identifier: D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3138372e3132312e3233362e302f32322d3332203d3e20323635333639.roa
Signing time:             Wed 17 Dec 2025 13:12:33 +0000
ROA not before:           Wed 17 Dec 2025 13:07:33 +0000
ROA not after:            Wed 16 Dec 2026 13:12:33 +0000
asID:                     265369
IP address blocks:        187.121.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 01:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b5:16:d9:47:ab:5e:0c:de:d5:38:5d:7d:4c:34:2c:ba:fe:c6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88B454BC594C5A1800134E375B465D91C070DFD
        Validity
            Not Before: Dec 17 13:07:33 2025 GMT
            Not After : Dec 16 13:12:33 2026 GMT
        Subject: CN=DD84A2DF5D79F13CEDA43DEDDD5BC72CB45DF63A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:e4:9c:d4:d9:83:84:33:06:00:c0:47:04:
                    50:15:44:e7:2c:c6:73:bc:f4:b3:3d:3d:52:fa:31:
                    c7:44:16:41:89:37:7d:a7:0c:d5:27:75:76:ab:f6:
                    d2:4f:8c:ef:1f:93:6c:55:12:d0:df:c5:27:cc:3f:
                    5c:77:48:6c:e5:14:aa:94:c9:c2:66:8b:ff:fb:9f:
                    9b:5f:b4:5b:49:0f:34:db:04:94:54:29:9c:0e:9a:
                    1c:1d:13:1b:b1:58:47:c3:28:3d:7f:5d:3c:9b:cc:
                    14:d4:c1:7d:42:9d:b2:1e:6e:59:19:0f:85:67:9a:
                    7e:fc:59:51:44:62:40:ff:1d:fc:47:58:2f:0c:9e:
                    ee:ed:3e:e5:0b:0b:8e:90:b2:c8:3c:3e:cc:85:f6:
                    b0:08:d2:f7:b0:5b:c0:1f:69:04:23:a9:6d:65:90:
                    59:3c:58:db:a8:7f:08:4d:d2:c6:a4:d8:46:41:33:
                    6e:cb:7d:80:c9:76:a0:fd:86:7d:fd:c0:3f:ea:fa:
                    ef:27:c3:7c:0a:e9:9b:28:93:f1:6c:d0:dd:21:09:
                    fa:0c:00:f7:c4:02:51:b5:da:f9:86:7a:fd:5b:71:
                    8a:bd:bc:c5:e5:3a:8a:35:64:d2:a0:12:81:b7:76:
                    b6:1e:f0:29:84:9a:f4:77:95:12:15:3f:99:26:ae:
                    1f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:84:A2:DF:5D:79:F1:3C:ED:A4:3D:ED:DD:5B:C7:2C:B4:5D:F6:3A
            X509v3 Authority Key Identifier:
                keyid:D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3138372e3132312e3233362e302f32322d3332203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:38:34:84:d2:12:1c:cd:6f:56:53:52:75:71:1c:84:51:
         1d:33:a4:c0:ba:90:47:32:06:11:75:3d:1a:20:32:da:cb:52:
         d1:38:0a:fd:07:c4:d2:84:61:81:7e:bc:b9:d8:ac:32:34:da:
         af:d2:cb:38:94:10:8e:8d:36:16:5e:6d:03:9b:6a:32:65:de:
         9e:c0:b2:6e:9b:c0:e2:ff:1f:47:c4:eb:46:b9:1d:16:1c:b6:
         35:de:d3:be:76:fb:8d:69:d7:b8:84:74:d9:ab:1c:15:bc:17:
         04:bf:d6:8e:df:18:21:cb:0a:b4:e4:1b:30:0f:8e:61:38:e7:
         8f:a5:e3:e0:b6:13:18:76:1b:7c:a5:2d:af:98:1f:0c:45:37:
         76:99:48:39:6d:f0:8b:cf:c3:52:0b:91:7e:89:da:de:8e:46:
         0d:25:22:b0:31:22:e7:92:57:36:a5:4e:de:2a:19:d7:f7:35:
         24:07:3b:5a:c5:99:d4:bf:a2:4f:d6:55:63:5b:75:fd:ce:05:
         c7:43:5c:5b:1e:62:45:86:a4:02:96:07:00:d0:12:8c:55:5c:
         05:e3:e7:74:85:94:31:c4:f6:37:8d:f0:31:e5:03:4c:19:3a:
         fe:ba:be:8d:8d:09:2c:6d:3b:29:f9:a3:64:75:8a:4a:a7:ee:
         0f:6c:4e:87
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMLUW2UerXgze1ThdfUw0LLr+xnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg4QjQ1NEJDNTk0QzVBMTgwMDEzNEUzNzVCNDY1RDkx
QzA3MERGRDAeFw0yNTEyMTcxMzA3MzNaFw0yNjEyMTYxMzEyMzNaMDMxMTAvBgNV
BAMTKEREODRBMkRGNUQ3OUYxM0NFREE0M0RFRERENUJDNzJDQjQ1REY2M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6muSc1NmDhDMGAMBHBFAVROcs
xnO89LM9PVL6McdEFkGJN32nDNUndXar9tJPjO8fk2xVEtDfxSfMP1x3SGzlFKqU
ycJmi//7n5tftFtJDzTbBJRUKZwOmhwdExuxWEfDKD1/XTybzBTUwX1CnbIeblkZ
D4Vnmn78WVFEYkD/HfxHWC8Mnu7tPuULC46Qssg8PsyF9rAI0vewW8AfaQQjqW1l
kFk8WNuofwhN0sak2EZBM27LfYDJdqD9hn39wD/q+u8nw3wK6Zsok/Fs0N0hCfoM
APfEAlG12vmGev1bcYq9vMXlOoo1ZNKgEoG3drYe8CmEmvR3lRIVP5kmrh9HAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3YSi31158TztpD3t3VvHLLRd9jowHwYDVR0j
BBgwFoAU2ItFS8WUxaGAATTjdbRl2RwHDf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlN1MkRMaXU2dnlKUkpwTDViWWlqajJlcXFTdmU5dVdzY3ZpWFFhc3lU
Mm4vMC9EODhCNDU0QkM1OTRDNUExODAwMTM0RTM3NUI0NjVEOTFDMDcwREZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4OEI0NTRCQzU5NEM1QTE4
MDAxMzRFMzc1QjQ2NUQ5MUMwNzBERkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTdTJETGl1NnZ5SlJKcEw1YllpamoyZXFxU3ZlOXVXc2N2aVhRYXN5VDJuLzAv
MzEzODM3MmUzMTMyMzEyZTMyMzMzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNTMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArt57DANBgkqhkiG9w0BAQsFAAOCAQEAKuM4
NITSEhzNb1ZTUnVxHIRRHTOkwLqQRzIGEXU9GiAy2stS0TgK/QfE0oRhgX68udis
MjTar9LLOJQQjo02Fl5tA5tqMmXensCybpvA4v8fR8TrRrkdFhy2Nd7Tvnb7jWnX
uIR02ascFbwXBL/Wjt8YIcsKtOQbMA+OYTjnj6Xj4LYTGHYbfKUtr5gfDEU3dplI
OW3wi8/DUguRfona3o5GDSUisDEi55JXNqVO3ioZ1/c1JAc7WsWZ1L+iT9ZVY1t1
/c4Fx0NcWx5iRYakApYHANASjFVcBePndIWUMcT2N43wMeUDTBk6/rq+jY0JLG07
KfmjZHWKSqfuD2xOhw==
-----END CERTIFICATE-----
Generated at Thu Jan 1 10:50:52 2026 by rpki-client