This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32342d3234203d3e203238323936.roa
File:                     3138392e33362e3231362e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          WeU38Os0MtTK6z+8vzTuxPk/qpID6wI8V8Iz5uwouH8=
Subject key identifier:   CE:F2:C0:B5:76:E7:E2:5C:5E:F0:E4:99:24:B7:09:DC:24:D9:67:8C
Certificate issuer:       /CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
Certificate serial:       4684956F75EF6F82490187834578B4CC0C09D4DE
Authority key identifier: 70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32342d3234203d3e203238323936.roa
Signing time:             Wed 17 Dec 2025 14:11:55 +0000
ROA not before:           Wed 17 Dec 2025 14:06:55 +0000
ROA not after:            Wed 16 Dec 2026 14:11:55 +0000
asID:                     28296
IP address blocks:        189.36.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 07:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:84:95:6f:75:ef:6f:82:49:01:87:83:45:78:b4:cc:0c:09:d4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
        Validity
            Not Before: Dec 17 14:06:55 2025 GMT
            Not After : Dec 16 14:11:55 2026 GMT
        Subject: CN=CEF2C0B576E7E25C5EF0E49924B709DC24D9678C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:6d:c7:cc:ee:60:3f:e1:a0:d0:b7:8b:87:
                    30:d8:72:97:30:77:b6:e4:c5:2f:42:af:2e:9c:9d:
                    89:6c:85:c6:b0:c3:6e:c6:51:2f:5b:eb:d9:c2:cb:
                    27:fc:39:2d:f1:d0:ff:f4:90:ee:48:07:86:9f:17:
                    0a:2d:80:da:07:38:77:7d:60:4c:b8:bb:a6:41:14:
                    9d:f7:65:02:61:5c:60:6a:b4:49:50:c4:00:4d:98:
                    24:43:17:8e:bd:eb:d0:62:71:86:5b:18:a4:07:5f:
                    87:06:5c:fb:d2:d2:00:5d:60:21:3e:ac:7d:37:32:
                    42:2c:c2:27:cd:21:58:a3:eb:22:e4:7a:08:5a:45:
                    58:d8:f1:41:77:de:1f:f3:cd:b5:92:9d:d5:6f:ec:
                    45:f1:1e:f7:99:ac:7d:9d:f8:7c:15:46:dd:b9:2d:
                    75:10:58:71:38:8e:00:55:a0:64:3d:23:98:53:1f:
                    8a:8f:77:cc:7d:77:c2:33:7d:cc:71:f9:d5:3e:3d:
                    30:87:02:66:7c:98:8a:ce:70:83:26:db:2c:e6:9b:
                    ba:87:fa:ce:82:db:f3:62:ce:1b:98:74:b5:ef:10:
                    31:1e:17:b1:e6:60:7d:74:66:e5:98:46:9f:5c:f1:
                    1e:c1:09:af:cb:78:ad:26:fa:70:2b:1a:ff:d9:4b:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F2:C0:B5:76:E7:E2:5C:5E:F0:E4:99:24:B7:09:DC:24:D9:67:8C
            X509v3 Authority Key Identifier:
                keyid:70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:55:13:f4:86:85:9b:fd:fb:40:35:49:43:a6:b9:95:8e:e8:
         63:83:a7:ee:53:1d:54:fb:2b:2a:2d:2e:8a:04:b9:6a:f1:1b:
         25:59:e9:98:65:f2:a2:e9:88:3a:b3:d3:84:a2:95:f2:0d:ab:
         27:06:3b:d1:90:7c:c1:54:6f:d2:ff:63:74:0b:b5:9b:da:a3:
         ba:d7:77:c2:4a:35:71:a5:2e:61:6a:0e:bb:a2:57:06:67:af:
         b6:8d:4a:5c:ca:e0:ca:45:63:46:27:8a:89:e8:55:f9:e6:58:
         e8:10:37:be:75:33:9b:34:e2:a7:2e:ae:db:82:e0:ee:9f:65:
         65:c3:66:dc:ae:35:19:92:e5:01:ad:3c:a9:f9:a7:ba:d7:f0:
         9a:32:4a:04:d3:7e:e4:d1:5a:6b:3a:63:ad:29:70:75:a0:e4:
         19:fb:e1:a3:7c:6e:7d:f1:b2:5f:c3:5c:2b:55:ab:21:57:dc:
         95:c4:4b:6f:4a:45:fc:14:e1:22:49:81:e0:7b:7b:d7:c0:b7:
         ae:5d:ea:25:b9:a8:e0:01:51:a1:c3:db:be:37:11:63:ff:1e:
         04:ca:08:c1:58:0c:04:81:92:04:4e:e2:d9:86:66:b0:03:73:
         c0:bc:49:8f:13:62:cb:94:fa:91:9d:b4:78:b7:00:51:9c:08:
         38:3f:ef:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:58:31 2025 by rpki-client