This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e37322e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          CpxL5lWxQRnvC0H8WQsC4FLc15XFz7MOJW2V8wxuyVc=
Subject key identifier:   84:90:FE:CB:0F:69:2C:9D:8D:F0:0B:E7:E1:4F:C7:0B:A5:49:44:A3
Certificate issuer:       /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial:       694E7293BDAAE5D52A0A304DD5B297485B672E54
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32332d3233203d3e203238313834.roa
Signing time:             Thu 08 Jan 2026 20:45:36 +0000
ROA not before:           Thu 08 Jan 2026 20:40:36 +0000
ROA not after:            Thu 07 Jan 2027 20:45:36 +0000
asID:                     28184
IP address blocks:        189.89.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 23:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4e:72:93:bd:aa:e5:d5:2a:0a:30:4d:d5:b2:97:48:5b:67:2e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
        Validity
            Not Before: Jan  8 20:40:36 2026 GMT
            Not After : Jan  7 20:45:36 2027 GMT
        Subject: CN=8490FECB0F692C9D8DF00BE7E14FC70BA54944A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:38:4f:c0:4f:b8:dd:99:df:51:b6:36:bb:
                    3f:d6:7b:e7:0e:e4:86:28:1d:ae:d5:16:01:eb:0f:
                    54:de:7f:06:a0:04:17:ab:51:e4:f8:6c:33:84:05:
                    1c:7a:28:46:dd:c9:c4:3f:b8:19:17:2d:d1:08:43:
                    97:48:e3:c4:38:d9:16:a0:c1:45:50:97:b0:71:cb:
                    1c:39:1b:b6:0c:21:02:1d:35:db:ea:aa:bb:13:09:
                    c9:58:20:75:7d:0f:93:bf:33:64:32:0d:8e:a1:2c:
                    8e:ee:01:9e:2d:95:94:8a:ff:39:f1:11:0f:e3:bd:
                    04:4c:42:61:03:18:41:23:b5:a9:6e:92:1f:ee:5f:
                    43:4c:66:aa:13:df:ca:3e:49:ae:4f:b9:ea:b4:68:
                    ae:c7:be:fc:61:81:dc:8f:2b:47:3a:6e:4c:c3:5d:
                    3d:f0:4d:33:4d:05:6e:9f:e2:92:32:fe:39:3e:a3:
                    f2:e9:d6:35:a0:a8:00:d1:8e:1b:74:a9:65:3d:88:
                    3b:77:6e:61:2c:56:1b:3f:e7:9b:f7:ec:eb:69:10:
                    d6:d3:91:03:33:52:c4:cc:84:59:8c:69:18:f3:b2:
                    b6:9d:89:fe:44:6d:cb:11:84:0f:43:ba:3c:d3:64:
                    03:89:b1:2e:45:0a:d9:cc:2c:8e:43:0a:aa:25:9a:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:90:FE:CB:0F:69:2C:9D:8D:F0:0B:E7:E1:4F:C7:0B:A5:49:44:A3
            X509v3 Authority Key Identifier:
                keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:e9:fb:84:5f:0d:35:d2:a8:00:63:5c:ae:9e:c8:89:c2:cc:
         42:be:3c:cc:73:42:57:54:a9:40:2e:e1:de:a6:92:29:81:ea:
         e5:d2:8e:70:e4:5f:c1:67:49:e6:22:f8:15:a5:b3:a7:61:89:
         df:e3:fa:b6:52:81:d8:01:46:ab:88:b0:9c:e5:25:e9:bb:63:
         b9:95:5c:7f:98:2f:50:08:b1:2f:40:a2:9b:46:93:db:e5:c6:
         03:f1:6f:24:25:1c:08:df:13:2c:ee:87:91:bd:f9:fd:9c:eb:
         02:fe:52:36:03:80:a1:24:ac:54:7c:59:71:09:b2:61:df:da:
         6a:0b:bb:a2:b5:a3:b3:e4:84:65:a1:e7:98:85:29:9c:f8:d5:
         a6:d9:2d:4b:88:ce:ba:cb:f1:e6:b2:7f:2b:56:32:77:41:1e:
         43:6f:85:80:bc:50:21:fb:8c:46:b8:01:21:bd:fd:ab:7b:85:
         0e:31:47:93:a2:99:f3:1b:a7:f6:cd:ac:dc:99:88:65:82:79:
         1c:25:9c:df:6c:bf:d9:69:a2:b6:85:2d:9a:df:4a:cc:c7:00:
         de:f0:80:1f:01:45:3a:b4:65:e5:ef:dc:2c:25:2d:a7:f4:50:
         10:6e:c2:02:ef:8e:7f:d3:f6:5e:d7:58:39:fc:0d:3c:9c:90:
         e7:a5:d0:e8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaU5yk72q5dUqCjBN1bKXSFtnLlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD
QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzZaFw0yNzAxMDcyMDQ1MzZaMDMxMTAvBgNV
BAMTKDg0OTBGRUNCMEY2OTJDOUQ4REYwMEJFN0UxNEZDNzBCQTU0OTQ0QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRThPwE+43ZnfUbY2uz/We+cO
5IYoHa7VFgHrD1TefwagBBerUeT4bDOEBRx6KEbdycQ/uBkXLdEIQ5dI48Q42Rag
wUVQl7Bxyxw5G7YMIQIdNdvqqrsTCclYIHV9D5O/M2QyDY6hLI7uAZ4tlZSK/znx
EQ/jvQRMQmEDGEEjtalukh/uX0NMZqoT38o+Sa5Pueq0aK7HvvxhgdyPK0c6bkzD
XT3wTTNNBW6f4pIy/jk+o/Lp1jWgqADRjht0qWU9iDt3bmEsVhs/55v37OtpENbT
kQMzUsTMhFmMaRjzsradif5EbcsRhA9DujzTZAOJsS5FCtnMLI5DCqolmv7ZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhJD+yw9pLJ2N8Avn4U/HC6VJRKMwHwYDVR0j
BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3
MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAb1ZSDANBgkqhkiG9w0BAQsFAAOCAQEAuen7hF8NNdKo
AGNcrp7IicLMQr48zHNCV1SpQC7h3qaSKYHq5dKOcORfwWdJ5iL4FaWzp2GJ3+P6
tlKB2AFGq4iwnOUl6btjuZVcf5gvUAixL0Cim0aT2+XGA/FvJCUcCN8TLO6Hkb35
/ZzrAv5SNgOAoSSsVHxZcQmyYd/aagu7orWjs+SEZaHnmIUpnPjVptktS4jOusvx
5rJ/K1Yyd0EeQ2+FgLxQIfuMRrgBIb39q3uFDjFHk6KZ8xun9s2s3JmIZYJ5HCWc
32y/2WmitoUtmt9KzMcA3vCAHwFFOrRl5e/cLCUtp/RQEG7CAu+Of9P2XtdYOfwN
PJyQ56XQ6A==
-----END CERTIFICATE-----
Generated at Fri Jan 9 16:30:35 2026 by rpki-client