This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37362e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          ie3RY9bAuZQbiyuAKYtppWxU5tkpV1nQF6Qbw8gxjvs=
Subject key identifier:   75:A3:20:C5:2E:2F:1B:A7:C3:64:4C:42:77:06:90:7B:F4:2B:68:1D
Certificate issuer:       /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial:       45B00028E76D27BB76B9A3A374C3F505552CB882
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa
Signing time:             Thu 08 Jan 2026 20:45:35 +0000
ROA not before:           Thu 08 Jan 2026 20:40:35 +0000
ROA not after:            Thu 07 Jan 2027 20:45:35 +0000
asID:                     28184
IP address blocks:        189.89.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 23:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b0:00:28:e7:6d:27:bb:76:b9:a3:a3:74:c3:f5:05:55:2c:b8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
        Validity
            Not Before: Jan  8 20:40:35 2026 GMT
            Not After : Jan  7 20:45:35 2027 GMT
        Subject: CN=75A320C52E2F1BA7C3644C427706907BF42B681D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:d2:3c:be:c7:4e:05:c0:bd:dd:93:dc:ee:
                    da:7f:23:ff:a7:a2:27:55:25:51:2a:fa:a7:cc:d2:
                    7e:c9:33:01:78:c3:15:b1:a7:b2:c6:71:4f:3e:32:
                    9c:53:a4:0e:ae:d4:41:99:3e:bc:96:54:fd:4f:ce:
                    a1:68:02:f6:44:82:9d:ed:66:b6:4a:e5:b6:eb:77:
                    4f:20:25:94:a2:7a:37:76:c7:e5:7a:71:1d:b2:af:
                    5c:98:c7:5f:40:25:d2:9e:3d:c1:a4:d5:33:89:75:
                    63:6f:82:bd:6f:52:e6:cb:ef:c3:da:a2:66:dd:34:
                    22:16:04:46:12:7a:f6:1b:7e:2d:6c:3e:86:c4:24:
                    d1:6f:85:02:58:5b:6a:b7:6f:82:b2:3f:3d:e0:3f:
                    e5:2d:16:1a:fc:62:f1:3e:f6:b8:4f:53:dc:d7:3f:
                    e6:24:54:dc:33:98:ed:63:02:66:ba:2c:73:c7:01:
                    cf:da:90:43:d6:00:07:f2:14:19:f2:66:4c:3e:48:
                    53:ce:d0:d0:81:c5:b8:20:ab:8a:4e:60:82:22:66:
                    b3:ef:1d:2b:4b:4a:d5:1d:8c:4f:e9:c3:c4:0b:69:
                    e9:cc:84:b3:4c:86:7c:f2:89:7e:28:45:cb:1a:cb:
                    d7:63:80:30:e8:41:3d:4e:ea:e6:a2:c3:45:7d:a8:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A3:20:C5:2E:2F:1B:A7:C3:64:4C:42:77:06:90:7B:F4:2B:68:1D
            X509v3 Authority Key Identifier:
                keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:11:ea:f1:2d:b2:e5:66:71:81:bf:c7:7c:5f:f8:11:7d:5b:
         f4:f0:61:3e:39:44:1a:8f:61:6c:b1:85:13:aa:ef:b5:9e:13:
         4d:ca:c2:b3:02:14:32:29:e9:17:2b:d3:b6:fd:c1:2b:f5:09:
         80:da:89:9c:01:8e:f0:01:4f:98:20:f5:f7:33:97:d3:73:e9:
         1e:1e:bb:7f:93:1d:5e:a2:e7:b2:f9:97:9a:06:07:48:2b:dd:
         5e:b9:24:a4:6d:61:01:af:48:4f:a0:e2:06:ba:5a:ba:9e:50:
         a6:fa:64:ab:94:f4:2a:b9:71:63:e7:7e:9d:7a:f0:4e:b7:14:
         47:a4:70:29:95:c6:5c:25:0c:6d:fb:5a:e6:02:04:82:6d:8f:
         c6:5c:fc:97:d5:2e:4e:f2:00:37:e8:97:a8:6e:bd:6d:09:27:
         88:ab:19:f4:e1:32:01:4d:28:43:e1:58:13:c9:b6:44:a9:45:
         38:fd:d7:0e:aa:48:d5:56:5d:40:4d:94:2f:6e:8c:45:8d:b1:
         d6:b1:5d:d7:83:5e:28:5e:df:5c:bb:64:91:bb:62:9a:af:5c:
         f2:4a:da:f4:2a:f9:4a:04:2f:b8:b3:55:de:4b:d7:95:7a:d3:
         0f:57:15:de:ce:36:8d:cb:53:b9:17:74:5f:b2:85:2a:49:b9:
         d2:6d:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:30:31 2026 by rpki-client