This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa
File:                     3138392e38392e37382e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier:          MCoiijy9qRVv9wjm9S85h+qru6eXkQR8GB1FuFA2ug4=
Subject key identifier:   4F:0D:6D:40:19:EF:FF:72:7D:2B:F4:53:B5:4D:7F:42:1E:49:0A:FE
Certificate issuer:       /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial:       35950C7D97ACC7B33707CCA1B7AD3F701A25DC82
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa
Signing time:             Thu 08 Jan 2026 20:45:36 +0000
ROA not before:           Thu 08 Jan 2026 20:40:36 +0000
ROA not after:            Thu 07 Jan 2027 20:45:36 +0000
asID:                     28184
IP address blocks:        189.89.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 23:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:95:0c:7d:97:ac:c7:b3:37:07:cc:a1:b7:ad:3f:70:1a:25:dc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
        Validity
            Not Before: Jan  8 20:40:36 2026 GMT
            Not After : Jan  7 20:45:36 2027 GMT
        Subject: CN=4F0D6D4019EFFF727D2BF453B54D7F421E490AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:e1:16:bd:2e:55:7a:96:47:54:da:51:4e:
                    d0:63:e8:84:06:4a:5a:86:cb:a2:d5:aa:8a:48:b9:
                    13:af:21:f0:78:1d:e9:c0:57:42:ca:d7:5c:83:17:
                    00:84:bc:3f:1a:64:d9:6e:17:6e:56:78:90:5a:79:
                    91:f0:80:67:04:b8:ca:cd:a7:55:f4:9e:fa:11:66:
                    3a:07:39:3a:8c:ef:0b:90:db:7b:05:b1:2e:19:5d:
                    89:9c:59:7c:c4:0b:57:a4:6f:6a:70:6a:3e:d0:8b:
                    3b:28:5f:b3:ca:13:49:f2:6d:9c:0a:22:d8:a3:26:
                    3e:95:62:9d:6b:bf:b8:e6:30:e1:39:4d:63:e1:2b:
                    e2:be:81:bc:89:e2:41:fc:08:4c:01:58:05:a6:f7:
                    b3:d6:a3:4e:95:e6:ae:6a:9a:36:f2:0d:fb:2e:9e:
                    32:66:0a:f3:ff:7c:ab:37:47:a1:32:ff:ed:53:1d:
                    5c:27:2f:5c:64:a9:a0:7c:34:76:06:c0:c8:0e:29:
                    47:e5:b0:e6:b7:6c:23:d5:d6:8d:08:91:ea:25:ae:
                    f1:42:65:28:0a:db:d7:3d:1b:43:b0:ce:77:8b:92:
                    f0:1b:31:da:46:5b:9c:d5:09:ec:cf:f0:93:2a:50:
                    89:fb:d3:5d:39:40:63:a0:66:0e:e6:33:57:d5:bc:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0D:6D:40:19:EF:FF:72:7D:2B:F4:53:B5:4D:7F:42:1E:49:0A:FE
            X509v3 Authority Key Identifier:
                keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37382e302f32332d3233203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:d2:5f:41:e9:01:71:41:44:03:cd:8d:0e:bd:89:f4:63:
         56:aa:34:92:d2:5e:45:82:92:25:12:0d:61:0e:a2:36:f3:be:
         94:7b:2c:89:95:89:65:d1:3f:cc:dc:5b:fc:ae:28:0e:9b:e3:
         38:c6:2d:b4:00:41:97:05:b4:52:2e:9f:63:4b:fc:df:a6:e8:
         fe:2b:a7:ac:4d:6c:0d:57:f7:93:80:8c:31:b4:a6:1b:e5:63:
         a6:c0:e7:86:00:9d:64:55:de:f7:8e:fe:7e:79:8f:d6:d2:e5:
         a8:47:cf:24:0b:e4:6e:8b:57:e0:cc:9f:7c:5f:fd:73:1f:2c:
         27:8a:8d:50:0e:4c:50:5f:46:ea:0f:ec:e8:08:fe:6d:65:a0:
         c9:0e:0f:4d:46:fa:52:00:88:01:7b:d9:8d:73:b4:f9:e5:46:
         ac:64:f8:ed:7f:c6:a3:53:8b:32:36:1f:b1:e2:ff:e5:c3:56:
         b3:33:9b:6b:e7:31:27:df:dd:d5:f4:f2:50:90:40:4e:8c:93:
         bb:ce:84:91:c0:0b:93:07:86:b5:d9:37:ba:95:12:53:71:a1:
         40:94:3d:3f:2e:c3:57:90:a5:a2:2c:e4:ee:96:f1:9f:4d:5e:
         11:ad:f5:80:23:e4:d2:86:aa:b5:31:11:45:e9:91:73:09:f6:
         13:38:8c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:30:34 2026 by rpki-client