This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/3138392e3132362e3230382e302f32302d3332203d3e203238323237.roa
File:                     3138392e3132362e3230382e302f32302d3332203d3e203238323237.roa (raw, json)
Hash identifier:          z5WT02ECH4y5EWMWT0olN+gx1W+kUd49Y/UkwmEGAZA=
Subject key identifier:   9B:D4:66:17:73:C0:B2:00:03:6C:00:8E:55:6F:70:BC:9A:2F:86:E8
Certificate issuer:       /CN=E4195C7AEC20ACF2FE3778AC72F036A58D056588
Certificate serial:       1E3BF6FA69C3EF77EAE713EE053DE8A2AF2CAF27
Authority key identifier: E4:19:5C:7A:EC:20:AC:F2:FE:37:78:AC:72:F0:36:A5:8D:05:65:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/3138392e3132362e3230382e302f32302d3332203d3e203238323237.roa
Signing time:             Fri 09 Jan 2026 13:14:38 +0000
ROA not before:           Fri 09 Jan 2026 13:09:38 +0000
ROA not after:            Fri 08 Jan 2027 13:14:38 +0000
asID:                     28227
IP address blocks:        189.126.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl
                          rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3b:f6:fa:69:c3:ef:77:ea:e7:13:ee:05:3d:e8:a2:af:2c:af:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4195C7AEC20ACF2FE3778AC72F036A58D056588
        Validity
            Not Before: Jan  9 13:09:38 2026 GMT
            Not After : Jan  8 13:14:38 2027 GMT
        Subject: CN=9BD4661773C0B200036C008E556F70BC9A2F86E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:2e:18:85:2e:c0:3b:55:0b:d0:72:a2:47:
                    4b:3e:e3:5d:ac:62:fd:98:fc:7c:3b:44:40:3e:c5:
                    ee:58:36:47:cd:fb:fa:1d:06:60:ea:52:a4:88:92:
                    1a:cf:45:3a:ae:da:82:55:39:5b:2e:81:16:83:ce:
                    86:ee:56:4f:aa:4a:53:c0:47:2d:d2:38:cd:1f:5f:
                    c0:fe:9c:f0:a5:16:79:47:ab:86:2c:fa:20:21:9c:
                    ab:6e:cb:90:a6:c7:e0:c0:c4:a8:ee:33:0c:ac:89:
                    89:51:f4:6f:74:cc:e8:fd:6b:04:d7:2b:05:8f:44:
                    4f:1d:39:91:53:a1:a5:12:ed:35:ab:82:6b:16:b2:
                    47:b4:b0:31:7b:9f:22:20:4a:be:2b:c4:4d:1a:d4:
                    0d:fd:46:8f:c8:12:b1:0e:5e:12:36:df:7b:ea:82:
                    85:ff:6f:62:e6:9a:46:8a:15:73:3e:e4:5e:6e:74:
                    08:59:24:6b:7a:2d:82:36:ef:fa:5a:19:e7:5f:ac:
                    5e:c9:38:2b:ea:08:f9:d4:d9:6e:a0:5b:a3:d2:98:
                    a2:e6:a4:fa:65:c4:f8:27:18:01:89:e2:65:ba:c2:
                    c9:2e:39:89:df:21:bf:69:bd:db:a4:94:f0:74:d9:
                    43:cf:cb:a8:04:8a:82:ba:3a:12:29:b5:5c:96:11:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D4:66:17:73:C0:B2:00:03:6C:00:8E:55:6F:70:BC:9A:2F:86:E8
            X509v3 Authority Key Identifier:
                keyid:E4:19:5C:7A:EC:20:AC:F2:FE:37:78:AC:72:F0:36:A5:8D:05:65:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/3138392e3132362e3230382e302f32302d3332203d3e203238323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:78:4f:08:79:d5:8d:27:2c:87:3d:2b:28:5a:e4:6c:bc:65:
         f8:ff:78:e6:a6:32:52:b5:6c:a8:bf:3a:12:38:cb:7b:a5:b5:
         39:95:48:c7:17:79:a4:76:c1:48:1f:ed:f6:b4:14:14:40:ce:
         fa:42:a3:7c:cf:c6:d6:7c:b0:3b:7d:0f:fb:86:2a:43:10:ab:
         37:ea:07:9a:1f:c7:25:58:36:0c:10:e5:c6:58:4a:87:3c:3f:
         3f:1d:cc:ed:7a:04:d0:1e:eb:49:52:83:f0:22:11:e7:a1:c3:
         29:90:a0:06:c2:d6:9b:d2:25:68:33:c5:b5:1c:1d:5c:f4:91:
         53:cc:50:41:83:2d:4b:03:ff:77:72:4a:00:e0:c1:ed:5b:f7:
         19:96:27:16:29:8c:93:b7:1e:b5:41:c7:d8:6c:46:55:60:27:
         37:ae:45:f8:de:b8:38:af:64:92:a7:c1:39:f4:ee:9c:cc:2d:
         be:79:f9:20:26:89:73:ee:57:b3:97:a4:ae:c6:60:2f:68:26:
         6a:3e:a9:0a:c7:02:9d:9b:10:ab:a0:56:07:34:fe:02:3b:6d:
         48:f1:ae:3a:b7:a3:6c:35:8d:78:8a:00:82:70:86:93:66:9c:
         7b:97:ba:69:52:e2:c9:4b:e5:54:aa:fe:9e:51:f6:1a:76:f7:
         dd:31:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:22 2026 by rpki-client