This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3231203d3e20323632393839.roa
File:                     3138392e38342e3133362e302f32312d3231203d3e20323632393839.roa (raw, json)
Hash identifier:          ciIshd+JbYCJSsvZk9uCEeUeJvdwgK5ZqgC/TRPdmHI=
Subject key identifier:   BD:47:E5:49:F3:9A:D7:19:98:90:9C:81:1E:B4:A1:2B:FF:40:E8:01
Certificate issuer:       /CN=CE0E887EF61F71B4438C48E64615124DF0463AF5
Certificate serial:       597AAFD8D618B55FCABC39E8814AB6ABB20A2600
Authority key identifier: CE:0E:88:7E:F6:1F:71:B4:43:8C:48:E6:46:15:12:4D:F0:46:3A:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE0E887EF61F71B4438C48E64615124DF0463AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3231203d3e20323632393839.roa
Signing time:             Fri 26 Dec 2025 13:57:26 +0000
ROA not before:           Fri 26 Dec 2025 13:52:26 +0000
ROA not after:            Fri 25 Dec 2026 13:57:26 +0000
asID:                     262989
IP address blocks:        189.84.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE0E887EF61F71B4438C48E64615124DF0463AF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7a:af:d8:d6:18:b5:5f:ca:bc:39:e8:81:4a:b6:ab:b2:0a:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE0E887EF61F71B4438C48E64615124DF0463AF5
        Validity
            Not Before: Dec 26 13:52:26 2025 GMT
            Not After : Dec 25 13:57:26 2026 GMT
        Subject: CN=BD47E549F39AD71998909C811EB4A12BFF40E801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:34:99:88:6e:a6:e7:90:94:75:10:da:88:
                    9e:b1:aa:6f:18:98:0d:fa:7c:26:9c:ef:47:da:2c:
                    e3:72:6d:5e:be:72:ea:47:4c:7b:42:13:48:78:cb:
                    af:13:1b:df:7d:d7:b6:73:b6:06:9a:27:52:be:40:
                    65:b8:09:5f:65:57:89:01:f3:7c:f9:da:e5:55:63:
                    de:63:ef:b2:60:52:6e:38:05:c6:5e:06:39:79:a9:
                    d0:94:08:60:3d:24:9d:00:07:29:76:13:01:ec:e2:
                    e3:d5:38:9f:40:9d:e0:ae:1e:df:f7:8d:ff:94:24:
                    c1:2d:7e:aa:b2:c4:1f:9c:34:aa:c2:56:59:e2:f3:
                    03:aa:35:7b:cc:be:3b:3e:71:95:b9:f2:f8:5b:00:
                    11:6f:b2:03:84:f9:da:71:f1:20:0c:08:c8:c3:8e:
                    79:d4:53:f1:04:15:6b:89:7f:85:28:13:90:fb:82:
                    2b:32:b9:e6:17:60:58:e9:43:4e:0f:cd:d3:94:a5:
                    e1:1d:5c:74:ff:b5:e3:b6:ea:13:21:ff:d5:14:1f:
                    95:83:97:94:5b:93:0e:57:c9:2c:d2:3d:b9:db:1e:
                    9d:d3:3c:ec:2a:0d:a1:93:10:2b:a2:77:7a:de:1d:
                    20:19:2c:ca:bb:bc:9d:fc:8b:b8:b0:5b:90:98:d0:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:47:E5:49:F3:9A:D7:19:98:90:9C:81:1E:B4:A1:2B:FF:40:E8:01
            X509v3 Authority Key Identifier:
                keyid:CE:0E:88:7E:F6:1F:71:B4:43:8C:48:E6:46:15:12:4D:F0:46:3A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE0E887EF61F71B4438C48E64615124DF0463AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138392e38342e3133362e302f32312d3231203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:53:10:13:40:ea:f7:b7:2b:78:5e:73:d6:e0:dd:5a:47:b1:
         89:a9:89:cd:13:ca:78:55:9b:47:8d:8e:49:44:9d:ae:9d:62:
         74:fb:3a:2c:38:f3:13:cd:82:1f:b3:7d:ac:06:cf:03:a3:09:
         52:18:28:be:27:01:28:6b:59:b3:b8:1d:db:7a:c8:70:34:e6:
         d3:2b:d5:b8:a2:3e:e6:a1:3b:5c:d4:e6:05:27:2a:5f:7c:ef:
         65:a7:f5:72:98:58:19:e6:13:a2:12:63:6c:eb:e5:6c:f9:54:
         11:d2:a5:23:c5:ed:39:96:6e:28:a4:ff:ae:89:2f:79:54:ec:
         47:4a:c6:0a:3b:aa:06:76:34:fd:3f:ce:09:81:f0:7b:2f:8b:
         53:18:cf:8d:6d:47:b5:31:ac:20:18:1d:5e:ad:32:37:c9:32:
         0c:5b:4f:ad:4d:64:d6:14:11:04:b5:98:10:6c:b8:ac:29:bc:
         17:af:fc:dc:47:c4:5a:88:66:a2:cf:ba:1f:ea:7d:8d:3a:91:
         a7:2b:03:5a:d2:8e:a6:20:3a:0b:38:3c:d3:56:e0:08:d0:aa:
         17:d1:28:28:36:96:7f:bc:14:75:b2:5c:ae:f2:fd:87:5e:96:
         51:ae:04:75:22:26:fc:7e:9f:4e:ef:01:02:06:0a:31:41:8a:
         75:d8:21:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:50:40 2026 by rpki-client