This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131382e302f32342d3234203d3e20323731303530.roa
File:                     3138372e38342e3131382e302f32342d3234203d3e20323731303530.roa (raw, json)
Hash identifier:          7KdEGbGllLEBLwZI+YyEe3+59Qf/oprlfXcHfvUjLlY=
Subject key identifier:   56:D4:FB:E6:83:FF:90:2B:2C:58:BC:39:81:5C:92:64:40:FB:64:D4
Certificate issuer:       /CN=1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4
Certificate serial:       067016A2F26DAF9F5C4A71221974200719FC1448
Authority key identifier: 1A:50:37:E7:59:D0:BF:A5:94:AD:13:E4:DD:55:F8:C4:B5:BF:3A:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131382e302f32342d3234203d3e20323731303530.roa
Signing time:             Mon 15 Dec 2025 14:15:50 +0000
ROA not before:           Mon 15 Dec 2025 14:10:50 +0000
ROA not after:            Mon 14 Dec 2026 14:15:50 +0000
asID:                     271050
IP address blocks:        187.84.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:70:16:a2:f2:6d:af:9f:5c:4a:71:22:19:74:20:07:19:fc:14:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4
        Validity
            Not Before: Dec 15 14:10:50 2025 GMT
            Not After : Dec 14 14:15:50 2026 GMT
        Subject: CN=56D4FBE683FF902B2C58BC39815C926440FB64D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:29:d3:62:66:d5:c4:bf:2b:d6:5c:9b:06:
                    6f:8a:8f:ca:4e:6c:a7:b5:12:4c:c4:22:28:28:56:
                    14:44:6a:9d:48:71:28:d1:97:31:d3:e9:9b:be:7c:
                    3e:a9:da:bd:bb:72:96:d5:4d:b1:87:29:85:96:1b:
                    5c:d4:e5:f3:c6:b4:b7:da:a7:46:3f:d0:25:1c:8a:
                    85:8b:0a:a3:14:f3:9b:96:a2:db:da:46:2b:8c:8b:
                    87:c7:be:4a:8c:94:96:6c:70:8d:3d:ca:84:9b:65:
                    42:ca:4c:d0:fb:70:bc:98:04:5a:d9:b9:b8:87:46:
                    42:38:4b:28:be:09:7f:91:5a:29:a8:d6:ef:b4:f2:
                    e5:fa:bb:86:55:58:8b:83:7e:76:fa:4f:0d:0c:92:
                    78:2a:b2:96:fe:5d:c4:79:34:2c:97:10:ae:53:fc:
                    03:c3:69:92:47:39:94:c9:42:49:f2:7d:13:be:5b:
                    81:08:13:c1:f7:71:6c:46:90:b4:64:36:25:51:b4:
                    79:46:be:49:d7:a2:77:2c:dd:e3:ba:ae:b2:f0:dc:
                    e9:73:82:09:47:e3:24:61:46:88:7e:26:a7:20:68:
                    dc:63:69:04:40:4d:53:9d:9e:3d:56:71:65:fe:c5:
                    48:1f:92:8c:ec:cd:c5:12:25:14:82:ac:26:e9:e5:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D4:FB:E6:83:FF:90:2B:2C:58:BC:39:81:5C:92:64:40:FB:64:D4
            X509v3 Authority Key Identifier:
                keyid:1A:50:37:E7:59:D0:BF:A5:94:AD:13:E4:DD:55:F8:C4:B5:BF:3A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/3138372e38342e3131382e302f32342d3234203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:47:25:38:bd:90:da:5a:69:01:49:cb:90:dd:d5:b1:47:
         ea:8c:6c:0c:a5:f4:ba:a2:c8:95:f8:87:3d:0c:5e:a6:a3:b7:
         5c:53:4c:f8:ea:d9:6b:b0:70:f0:66:f8:ef:a6:ad:5e:dd:02:
         75:04:58:6e:ee:d5:65:ec:70:81:3e:ff:f2:14:2a:06:4f:0e:
         85:e8:f3:24:93:06:4e:ac:66:4e:ed:4d:f4:43:54:bb:32:4c:
         fd:28:e4:f5:ac:1b:36:32:54:73:48:e6:76:fe:02:25:d2:e5:
         c9:5f:3a:f5:4d:f8:0a:42:2b:e9:46:75:39:8f:0e:9b:5b:77:
         a0:57:27:96:c3:11:17:e4:6f:df:90:66:ac:33:2c:51:5e:63:
         c0:ec:cd:03:27:fc:e7:d5:50:7f:e7:ff:47:06:23:f0:af:4d:
         83:a1:e4:9a:e4:16:56:34:1a:86:1d:e4:b0:3a:22:c1:53:2a:
         da:89:7b:3f:ec:06:22:25:a2:3f:8b:f6:1c:60:14:59:62:35:
         12:89:51:77:3e:55:4e:d2:b8:51:0f:39:ff:f1:91:b4:3b:08:
         02:77:3b:21:38:79:6b:fe:12:d5:9a:d5:fe:a8:45:e5:28:ec:
         af:fe:82:9c:76:9a:98:9c:ee:58:1e:ba:5b:74:9f:81:e3:b5:
         22:83:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:24:46 2026 by rpki-client