This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e36382e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          uaKA8GPA0di/v7F101//bEn0AUqeAxycHfxsPUiFmEg=
Subject key identifier:   7B:5F:33:56:5C:BA:37:56:7D:E5:E0:CD:FD:0E:81:0B:C5:03:43:DB
Certificate issuer:       /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial:       2FD1763B5097C7C9E1F1112B8F4052B27DAE4236
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa
Signing time:             Thu 08 Jan 2026 20:45:36 +0000
ROA not before:           Thu 08 Jan 2026 20:40:36 +0000
ROA not after:            Thu 07 Jan 2027 20:45:36 +0000
asID:                     28184
IP address blocks:        189.89.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 23:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d1:76:3b:50:97:c7:c9:e1:f1:11:2b:8f:40:52:b2:7d:ae:42:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
        Validity
            Not Before: Jan  8 20:40:36 2026 GMT
            Not After : Jan  7 20:45:36 2027 GMT
        Subject: CN=7B5F33565CBA37567DE5E0CDFD0E810BC50343DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:9a:cc:bb:b1:02:27:09:6f:b0:5d:7c:90:
                    78:56:72:e7:98:ad:6a:1c:c8:bb:bd:0a:30:b2:69:
                    58:b1:61:29:1d:4c:f0:d3:8c:80:0f:82:e0:c1:ba:
                    df:b8:85:5c:f2:db:d5:87:e8:ca:fb:78:aa:b1:62:
                    5b:3a:db:9a:69:af:11:24:74:fa:89:16:7e:15:4b:
                    81:b7:b8:0d:79:52:e0:03:26:12:88:3d:35:4f:dc:
                    70:e8:40:a7:87:76:2c:57:2b:f0:77:b6:56:2e:bc:
                    c3:d0:b5:8c:1b:36:f9:fd:e5:a9:59:7b:04:5a:96:
                    37:ab:80:c2:21:4b:f7:f8:80:00:13:29:41:f3:83:
                    5f:2d:c4:21:1c:cd:71:08:e3:46:25:9c:47:c5:db:
                    a6:58:e1:be:f9:f8:ee:2b:f6:2f:79:a3:3e:e8:75:
                    8c:29:f1:00:6e:1e:eb:be:db:78:f2:c6:bf:90:cb:
                    72:16:5f:1a:de:0f:50:62:c6:97:57:d6:f5:45:13:
                    76:e1:3c:46:ff:81:40:68:23:48:d7:a6:a7:ab:7d:
                    dc:01:ac:a3:9c:38:72:7f:db:4e:e7:57:7f:ae:ff:
                    39:5d:a1:f7:6e:c5:b7:50:20:aa:f9:8f:2d:31:36:
                    6d:53:db:a8:b7:d8:97:8f:16:40:6e:c4:26:ec:c3:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5F:33:56:5C:BA:37:56:7D:E5:E0:CD:FD:0E:81:0B:C5:03:43:DB
            X509v3 Authority Key Identifier:
                keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:48:48:85:dd:05:13:b9:37:cd:12:f1:c1:75:ba:28:cc:9a:
         3c:1c:ad:4d:ec:9f:78:15:dc:0a:1c:ec:a5:24:fa:33:52:72:
         51:fa:c3:95:ae:ca:11:fe:c3:54:ba:2a:20:36:40:55:b1:8c:
         6c:25:da:51:1a:c6:62:c9:bd:b8:a8:28:66:a2:1b:43:54:dc:
         bd:64:7f:50:6d:a2:7f:58:d4:5a:32:47:61:8d:fb:a7:1a:a6:
         30:4c:89:c6:df:d3:f9:1b:f9:d5:c7:44:34:f8:36:89:bb:5b:
         bd:f2:db:35:82:0e:23:0f:79:46:e1:e6:dd:df:61:31:95:24:
         2d:c9:33:6b:fc:1e:80:d1:96:c6:25:5a:f1:5a:b1:dd:e0:af:
         e2:85:ee:6b:43:87:55:36:69:35:0c:2d:7d:56:8f:1b:5b:b6:
         71:67:b8:ec:1c:a8:1a:31:11:de:b7:bf:5b:cd:37:97:af:0a:
         39:ed:ca:d5:5f:4c:b4:11:13:b8:96:40:e6:c2:80:15:fc:91:
         75:0e:cf:03:aa:6d:6c:25:4f:42:4a:c0:55:7e:e6:00:01:f7:
         ee:36:26:92:ed:29:84:0d:70:04:62:3b:9f:32:8e:0c:73:50:
         35:3e:50:e4:e5:b5:ff:8e:8a:8d:a7:0e:2b:63:59:02:71:70:
         f3:a3:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:30:35 2026 by rpki-client