This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa
File:                     3138372e302e34382e302f32302d3230203d3e203238333532.roa (raw, json)
Hash identifier:          oU46DuPWwhoycBqeigFj+fJ4Nllg/KHTNXO0Z6n4eP0=
Subject key identifier:   1C:94:7D:BC:D0:4B:EE:66:E9:2D:D2:42:2C:5B:CB:35:08:C6:81:AD
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       3986EA001622528A7A2C89DF72CA7BD10197C014
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa
Signing time:             Tue 06 Jan 2026 12:23:31 +0000
ROA not before:           Tue 06 Jan 2026 12:18:31 +0000
ROA not after:            Tue 05 Jan 2027 12:23:31 +0000
asID:                     28352
IP address blocks:        187.0.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:86:ea:00:16:22:52:8a:7a:2c:89:df:72:ca:7b:d1:01:97:c0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Jan  6 12:18:31 2026 GMT
            Not After : Jan  5 12:23:31 2027 GMT
        Subject: CN=1C947DBCD04BEE66E92DD2422C5BCB3508C681AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:a9:77:ba:ce:cb:78:99:3a:77:c7:bc:1a:
                    53:63:3c:81:92:e1:d6:57:42:00:a5:bd:f3:fe:d0:
                    fe:bd:f2:e4:16:46:7f:a8:ab:ac:f3:40:3d:1b:39:
                    92:2c:bc:5d:67:a5:a6:01:ba:d1:87:66:2e:4d:da:
                    83:29:87:56:23:35:b3:bd:ca:b9:29:bb:ab:a4:57:
                    f7:c3:4c:56:b7:36:f7:90:f2:6a:90:e5:54:60:81:
                    54:3a:eb:ff:6d:31:7f:2b:a5:24:26:7b:00:82:b0:
                    e6:4c:a4:2d:b6:b8:c4:11:ff:db:b8:81:f8:c5:ab:
                    fb:01:95:8c:6f:d2:0c:b8:0f:cf:11:83:08:91:d9:
                    02:06:4b:58:31:a4:b9:b7:44:03:b8:98:9e:98:f7:
                    71:0b:db:08:d9:ef:22:a1:c2:1e:8a:d8:6e:78:67:
                    03:a4:f8:68:c2:d5:8e:ba:66:34:c6:f2:84:5a:c5:
                    fa:78:fb:8a:47:f9:8f:a5:3b:02:0d:c9:32:00:eb:
                    d1:d2:de:32:77:31:09:f1:97:93:0f:03:b5:5d:5e:
                    fa:8b:8b:83:8b:45:d4:54:53:61:e3:02:e6:1b:3c:
                    6e:1a:92:44:26:a6:e0:b5:99:13:b6:5a:a9:c0:b9:
                    f3:17:a8:34:7d:30:56:bb:72:49:4f:28:ff:9a:8c:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:94:7D:BC:D0:4B:EE:66:E9:2D:D2:42:2C:5B:CB:35:08:C6:81:AD
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:d4:49:c3:fa:e6:51:4e:71:32:57:0f:87:cd:a7:89:c3:95:
         5e:61:64:e2:11:1c:85:ba:6f:92:66:56:c0:8f:0e:c1:20:0e:
         8c:a1:0e:0b:15:f7:3f:22:49:3b:d8:13:1d:72:bf:02:11:29:
         8c:f2:48:e0:52:66:3d:d0:b6:80:76:92:81:6d:15:b0:b7:4c:
         42:fb:72:97:09:fe:1e:1f:87:c7:f1:2d:79:35:7c:82:6f:2d:
         70:40:da:0c:ad:77:fc:c3:7b:51:c5:0e:cc:c1:64:67:6d:4d:
         d6:53:44:ed:11:8a:32:af:d2:f0:af:68:a9:0e:ed:bf:13:bd:
         18:bc:17:59:67:da:8e:bf:dc:cc:07:6f:d9:0f:c1:bb:60:09:
         9f:40:db:6b:4e:f3:7a:18:d8:e3:b0:80:12:62:f1:da:37:71:
         72:cc:10:96:93:91:2b:38:70:6d:9f:7e:0c:da:22:54:8a:09:
         e2:0b:e4:31:31:7e:28:66:2d:d5:14:95:09:a8:da:1f:4c:22:
         85:4e:d6:69:98:2c:0d:32:f8:14:d3:8b:a9:0a:00:0c:21:76:
         82:e4:ef:25:de:f7:26:65:22:6d:4b:d3:55:8e:9f:cf:c3:e0:
         3a:5e:ca:45:0c:8e:9b:34:11:5c:83:2c:fd:89:a6:77:ba:ce:
         60:b3:bc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:55 2026 by rpki-client