This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/3138372e38372e3132382e302f32302d3234203d3e203238353835.roa
File:                     3138372e38372e3132382e302f32302d3234203d3e203238353835.roa (raw, json)
Hash identifier:          AmrmyF5tY/nwDNSK13OQ/2LNdum+LRyjSrz8o8P0zB8=
Subject key identifier:   05:05:FC:F6:14:45:3E:2F:B5:3D:20:CD:01:6F:1A:0C:15:2A:0C:85
Certificate issuer:       /CN=0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437
Certificate serial:       1237EA170DDE56F852215AF198389D10893FE112
Authority key identifier: 05:44:F1:B1:BE:EC:4E:EA:D6:C1:F1:9C:61:F1:DE:27:4F:9E:F4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/3138372e38372e3132382e302f32302d3234203d3e203238353835.roa
Signing time:             Tue 23 Dec 2025 02:23:31 +0000
ROA not before:           Tue 23 Dec 2025 02:18:31 +0000
ROA not after:            Tue 22 Dec 2026 02:23:31 +0000
asID:                     28585
IP address blocks:        187.87.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.crl
                          rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 12:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:37:ea:17:0d:de:56:f8:52:21:5a:f1:98:38:9d:10:89:3f:e1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437
        Validity
            Not Before: Dec 23 02:18:31 2025 GMT
            Not After : Dec 22 02:23:31 2026 GMT
        Subject: CN=0505FCF614453E2FB53D20CD016F1A0C152A0C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:a2:44:bd:58:99:d6:89:4e:2b:5b:96:92:
                    df:aa:89:50:2b:ee:3d:27:da:77:9f:55:18:97:f6:
                    ba:6c:14:a5:14:b2:1d:e0:a5:07:94:1a:e9:9f:fd:
                    0e:be:3d:57:28:82:07:b8:d3:08:70:c3:64:95:ea:
                    45:a1:a9:bc:66:ec:d1:eb:e6:d1:b6:e1:22:f7:26:
                    e5:bf:55:44:d7:64:79:ca:f1:68:6f:40:e7:5d:13:
                    94:f2:10:1e:00:cc:9f:ac:66:18:70:63:9e:1b:76:
                    59:ea:c7:25:f9:78:3f:5f:43:27:b7:6c:bd:91:c2:
                    51:58:8e:53:ce:17:c2:d4:b5:54:b6:9e:30:a7:c4:
                    01:b1:a1:44:a4:2c:81:c6:12:9b:96:9b:91:38:71:
                    b7:63:24:a1:b3:d5:87:2b:8a:ae:fc:6a:fe:67:70:
                    5a:41:bf:7b:eb:00:bf:da:7a:0d:cc:4a:33:10:42:
                    25:93:f6:54:a3:9e:09:6f:8e:e7:51:07:a9:78:27:
                    0f:51:c6:cc:bf:a3:ef:c3:bb:09:cf:58:d8:73:cf:
                    7e:35:56:6f:21:e9:40:39:99:af:06:54:e7:8d:95:
                    1c:fb:e4:e7:2d:36:af:ec:33:b9:8d:a9:bf:a4:06:
                    8f:53:d3:dd:3a:be:68:0c:a2:1b:77:6d:7f:4f:7a:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:05:FC:F6:14:45:3E:2F:B5:3D:20:CD:01:6F:1A:0C:15:2A:0C:85
            X509v3 Authority Key Identifier:
                keyid:05:44:F1:B1:BE:EC:4E:EA:D6:C1:F1:9C:61:F1:DE:27:4F:9E:F4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/3138372e38372e3132382e302f32302d3234203d3e203238353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:72:35:0a:d3:65:d8:62:60:2a:f5:ca:6e:23:a6:c8:69:20:
         1b:20:6f:fa:40:9a:09:60:fc:a5:e6:4f:22:1d:b6:26:b1:f0:
         96:5f:3a:b8:e6:9b:a7:a1:6e:91:c6:c0:d5:69:56:d9:a2:21:
         2f:13:62:fc:6f:19:0a:9f:af:4f:03:db:85:a0:e2:96:8e:4a:
         63:2b:85:fa:1e:9f:bc:a5:31:99:9e:44:63:10:fa:4e:ee:c2:
         35:44:9e:85:0a:0c:51:0d:a7:5f:b1:62:c3:3c:56:95:b5:e2:
         8c:0a:a9:cc:93:73:a6:3b:b0:3f:1e:e3:0b:d2:06:17:20:ce:
         de:57:d6:b9:d0:53:94:03:be:71:fd:a6:3d:bb:fc:e6:5d:21:
         18:32:2c:08:39:64:c7:89:87:bc:a6:c4:49:49:22:00:b1:6c:
         f9:34:a5:dd:80:4d:a2:cf:2f:e6:d2:0d:1b:74:20:a8:a5:c7:
         98:61:35:00:46:32:6e:ca:c4:18:62:00:50:8d:78:7d:bc:5c:
         ca:40:3a:b3:f0:50:6b:03:4d:8c:e4:ad:32:91:23:64:a1:87:
         5a:0b:72:32:78:2b:f0:7e:fe:66:59:a1:21:22:b1:f6:6c:3a:
         02:53:88:3d:aa:77:87:db:75:ec:21:da:47:98:82:0d:a6:0a:
         c8:5e:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 04:01:50 2025 by rpki-client