This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa
File:                     3138392e35312e3139392e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          R0aduKq8jEkxSHtFo6rZFUAb6MFSYIZ22qe8nDd66PI=
Subject key identifier:   85:2F:E6:C6:B7:50:C5:5E:84:CB:77:22:96:78:F0:F7:4B:76:1E:1F
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       73CB0E57D9039B684B354E89902E361DD29A72EF
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa
Signing time:             Tue 06 Jan 2026 12:23:32 +0000
ROA not before:           Tue 06 Jan 2026 12:18:32 +0000
ROA not after:            Tue 05 Jan 2027 12:23:32 +0000
asID:                     28352
IP address blocks:        189.51.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 23:07:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cb:0e:57:d9:03:9b:68:4b:35:4e:89:90:2e:36:1d:d2:9a:72:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Jan  6 12:18:32 2026 GMT
            Not After : Jan  5 12:23:32 2027 GMT
        Subject: CN=852FE6C6B750C55E84CB77229678F0F74B761E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:c4:fa:5f:9d:81:ca:cc:9a:74:5e:30:b6:
                    08:a8:8e:f2:7b:e8:c2:51:35:4e:45:6e:62:2c:6c:
                    e1:a7:bb:39:8c:24:ad:69:c6:3e:d8:0d:9a:15:f0:
                    ec:33:7c:42:48:d6:91:1d:16:04:01:c7:ff:ae:49:
                    6a:59:e2:5f:ef:91:06:5d:1b:25:07:1b:22:0c:c3:
                    d0:72:08:08:81:8f:18:c0:9d:9b:22:e7:9c:b7:5c:
                    c9:f4:1c:fb:3e:43:4d:6d:4c:0e:a0:0d:b0:85:22:
                    1d:ee:6a:04:b8:24:1e:c4:e7:7b:fc:17:41:3a:fc:
                    fe:cb:f3:40:37:08:09:19:38:b4:25:8a:3f:86:4f:
                    b9:ca:97:af:88:df:71:a0:ef:c4:45:8e:59:5d:a5:
                    ab:cb:62:ab:57:eb:1e:f8:34:71:ad:79:ac:6d:c1:
                    5f:cd:f6:3b:07:0b:a8:68:00:14:98:3b:3f:e3:c8:
                    39:94:30:3d:4c:01:5e:f7:e6:38:2e:8a:76:50:50:
                    6d:fa:a0:6f:24:2f:41:b1:9f:ca:42:88:b1:bb:d2:
                    10:23:03:73:5a:b3:33:68:66:3f:1d:74:c4:20:69:
                    72:d7:ad:64:e4:f3:82:9e:17:a6:99:f5:e5:ba:8c:
                    21:53:dc:b7:4e:d6:8f:db:42:75:f0:bd:86:d6:a2:
                    20:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2F:E6:C6:B7:50:C5:5E:84:CB:77:22:96:78:F0:F7:4B:76:1E:1F
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:19:e9:a1:79:e0:81:51:5f:0d:0e:a2:7c:d5:b2:4a:44:a5:
         52:0b:f1:a4:f8:f8:fe:21:ed:5c:05:26:2b:00:af:f6:03:85:
         4f:10:38:b5:aa:a0:0f:7a:af:c9:bf:bf:3c:e2:e5:f6:cc:a4:
         cc:3f:67:1e:b9:72:08:e4:4c:92:4f:12:13:a8:96:9f:f2:71:
         b5:64:1e:60:a3:e4:f6:4f:b0:2f:4a:2f:01:1f:11:60:ee:45:
         03:b9:00:fe:cc:d0:d7:9e:41:21:14:be:52:2a:a7:cb:59:9d:
         ec:f7:ec:c4:d2:32:75:12:30:64:e8:da:ac:e2:98:5e:74:f3:
         36:0b:98:8d:bb:d9:36:a9:35:a1:2a:f2:f8:2f:65:da:da:4d:
         bc:88:ea:c7:f5:84:71:44:88:4e:35:b2:47:32:cd:54:7b:cf:
         01:c8:47:11:48:3b:e8:dd:d8:df:e7:57:a8:25:87:3d:d8:42:
         94:d9:6e:01:7c:83:6b:37:1d:46:7c:45:11:42:40:c7:4a:54:
         64:9e:48:1f:62:9d:51:a9:c7:bc:dd:a9:96:81:56:e6:7d:86:
         79:1e:0c:fa:29:b9:77:48:b6:4d:08:94:16:92:b8:13:31:c9:
         06:1a:c3:0c:0e:1c:44:8b:c6:e7:1e:7b:bc:3d:d4:1e:61:a0:
         a9:88:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:11:34 2026 by rpki-client