This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138392e39312e302e302f31392d3235203d3e203238323032.roa
File:                     3138392e39312e302e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier:          Y3PNE3dxtS2Ba6HMqPkeFeX1I5xaHgXp8N4UztFeCT8=
Subject key identifier:   8E:9B:F3:9E:2F:18:08:E7:C0:16:A1:9F:61:57:68:72:62:DF:17:90
Certificate issuer:       /CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
Certificate serial:       2BDA6138B65DFE238B0732E5C7DE7BB454988B26
Authority key identifier: E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138392e39312e302e302f31392d3235203d3e203238323032.roa
Signing time:             Mon 29 Dec 2025 17:40:38 +0000
ROA not before:           Mon 29 Dec 2025 17:35:38 +0000
ROA not after:            Mon 28 Dec 2026 17:40:38 +0000
asID:                     28202
IP address blocks:        189.91.0.0/19 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 01:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:da:61:38:b6:5d:fe:23:8b:07:32:e5:c7:de:7b:b4:54:98:8b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
        Validity
            Not Before: Dec 29 17:35:38 2025 GMT
            Not After : Dec 28 17:40:38 2026 GMT
        Subject: CN=8E9BF39E2F1808E7C016A19F6157687262DF1790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:eb:b8:55:d4:85:ca:a8:8e:a5:32:ea:48:
                    fb:93:63:37:f3:b5:a2:39:1f:67:40:86:b7:c1:85:
                    41:01:10:ac:22:d7:0f:57:24:85:b2:d8:ca:41:20:
                    35:33:61:05:80:56:90:75:8c:6b:8d:f3:6a:0b:bc:
                    0f:85:54:6b:2e:10:0b:51:60:ad:c6:34:c1:08:a3:
                    eb:42:d7:87:72:bd:e4:ce:d1:af:c4:e0:00:d1:af:
                    82:4c:cd:2f:e0:02:39:c2:81:fc:54:f4:b7:c0:cc:
                    5f:4b:6f:0c:0f:36:20:32:c1:1c:cb:e2:76:e3:2f:
                    79:e0:ce:bd:de:6d:0a:8d:4f:11:f6:9f:46:c8:bd:
                    92:a7:ed:f6:51:0d:30:23:bb:5f:9a:66:e6:4f:6d:
                    61:dd:9e:b7:2e:19:4c:d9:67:5e:64:c8:30:bb:f2:
                    91:f4:24:8b:eb:6d:dd:85:ce:41:15:3d:a5:30:55:
                    c3:cf:f8:ef:b4:3f:62:c8:07:d5:30:2a:88:fa:b3:
                    0e:4b:c8:d1:58:6d:c7:63:ff:df:fe:a1:04:27:9a:
                    e8:bd:44:af:f8:3c:7a:e9:25:0e:2e:1a:ce:7d:b0:
                    6e:f9:47:0f:66:fc:ff:08:d9:c7:34:01:62:2e:68:
                    08:78:0c:34:be:c3:a7:f0:a5:f2:e0:84:da:82:b6:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9B:F3:9E:2F:18:08:E7:C0:16:A1:9F:61:57:68:72:62:DF:17:90
            X509v3 Authority Key Identifier:
                keyid:E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138392e39312e302e302f31392d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c2:04:a1:9c:65:e4:4c:05:75:ee:66:2a:67:d3:19:e9:2e:5c:
         8c:df:af:a7:ad:4a:aa:7b:b0:ad:c3:ec:36:21:87:2f:f1:fd:
         a3:a8:a6:a2:b2:37:8e:6f:47:a2:0c:53:b2:8f:30:b4:b8:35:
         19:78:2a:e0:73:13:26:fd:3f:98:f2:31:16:97:33:52:e2:23:
         a8:23:46:d5:59:bd:26:41:29:d6:4d:a5:4e:f1:d5:32:a8:b7:
         e2:f7:f3:02:88:31:21:a9:5e:43:cb:de:c9:03:8b:17:99:6a:
         14:dd:87:44:28:10:de:31:ae:06:11:71:c0:67:29:fb:60:2a:
         3d:cc:e1:3f:a4:2e:a9:e1:1d:a0:8c:e4:73:e3:30:0d:a9:8c:
         16:23:9a:9e:ff:8f:31:40:8d:f0:ec:e2:e8:01:bc:43:f8:3f:
         17:20:33:d4:62:cd:c1:5c:a1:cd:a7:9b:03:5c:a8:bf:ad:ba:
         ea:43:df:31:62:a7:9d:ea:d6:8f:50:83:fe:59:ad:f0:4c:ae:
         5f:ac:73:25:28:8e:43:3e:24:36:9d:46:78:ef:fa:23:ad:cb:
         48:3d:fc:ca:97:d7:12:d1:90:7f:02:99:d9:52:71:e0:6d:e2:
         40:02:97:a5:3d:67:66:93:6b:d6:71:0d:84:8e:25:14:75:f8:
         7e:72:5e:c7
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUK9phOLZd/iOLBzLlx957tFSYiyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1NEFERTMwMDVCNENFNjNFM0EyOUEzOTdDQTIyMzVE
NTQ4MjFFMjAeFw0yNTEyMjkxNzM1MzhaFw0yNjEyMjgxNzQwMzhaMDMxMTAvBgNV
BAMTKDhFOUJGMzlFMkYxODA4RTdDMDE2QTE5RjYxNTc2ODcyNjJERjE3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAG+u4VdSFyqiOpTLqSPuTYzfz
taI5H2dAhrfBhUEBEKwi1w9XJIWy2MpBIDUzYQWAVpB1jGuN82oLvA+FVGsuEAtR
YK3GNMEIo+tC14dyveTO0a/E4ADRr4JMzS/gAjnCgfxU9LfAzF9LbwwPNiAywRzL
4nbjL3ngzr3ebQqNTxH2n0bIvZKn7fZRDTAju1+aZuZPbWHdnrcuGUzZZ15kyDC7
8pH0JIvrbd2FzkEVPaUwVcPP+O+0P2LIB9UwKoj6sw5LyNFYbcdj/9/+oQQnmui9
RK/4PHrpJQ4uGs59sG75Rw9m/P8I2cc0AWIuaAh4DDS+w6fwpfLghNqCtoBVAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUjpvzni8YCOfAFqGfYVdocmLfF5AwHwYDVR0j
BBgwFoAU5FSt4wBbTOY+Oimjl8oiNdVIIeIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vMC9FNDU0QURFMzAwNUI0Q0U2M0UzQTI5QTM5N0NBMjIzNUQ1NDgyMUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0NTRBREUzMDA1QjRDRTYz
RTNBMjlBMzk3Q0EyMjM1RDU0ODIxRTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzAv
MzEzODM5MmUzOTMxMmUzMDJlMzAyZjMxMzkyZDMyMzUyMDNkM2UyMDMyMzgzMjMw
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAW9WwAwDQYJKoZIhvcNAQELBQADggEBAMIEoZxl5EwFde5m
KmfTGekuXIzfr6etSqp7sK3D7DYhhy/x/aOopqKyN45vR6IMU7KPMLS4NRl4KuBz
Eyb9P5jyMRaXM1LiI6gjRtVZvSZBKdZNpU7x1TKot+L38wKIMSGpXkPL3skDixeZ
ahTdh0QoEN4xrgYRccBnKftgKj3M4T+kLqnhHaCM5HPjMA2pjBYjmp7/jzFAjfDs
4ugBvEP4PxcgM9RizcFcoc2nmwNcqL+tuupD3zFip53q1o9Qg/5ZrfBMrl+scyUo
jkM+JDadRnjv+iOty0g9/MqX1xLRkH8CmdlSceBt4kACl6U9Z2aTa9ZxDYSOJRR1
+H5yXsc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:40 2026 by rpki-client