This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32312d3231203d3e203238333532.roa
File:                     3138372e302e34382e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier:          qRjaepcF+FP+bGyDMVqfCi0GthU6CATQjdNUdeFfQ3U=
Subject key identifier:   43:11:DF:5A:C3:D4:00:8F:CB:34:B4:84:2F:05:B0:CD:2B:16:8D:A4
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       6B865F773378FA819CE7C8BD23F4B8BEE65E803B
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32312d3231203d3e203238333532.roa
Signing time:             Tue 06 Jan 2026 12:23:30 +0000
ROA not before:           Tue 06 Jan 2026 12:18:30 +0000
ROA not after:            Tue 05 Jan 2027 12:23:30 +0000
asID:                     28352
IP address blocks:        187.0.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:86:5f:77:33:78:fa:81:9c:e7:c8:bd:23:f4:b8:be:e6:5e:80:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Jan  6 12:18:30 2026 GMT
            Not After : Jan  5 12:23:30 2027 GMT
        Subject: CN=4311DF5AC3D4008FCB34B4842F05B0CD2B168DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d0:c8:fe:9e:d8:08:df:4c:82:3e:d8:0a:40:
                    68:8d:2b:ce:46:c6:5c:4e:02:5e:fd:46:4d:2d:95:
                    07:38:61:9c:32:4e:e6:b8:e7:5c:68:de:0f:dc:aa:
                    29:c7:b1:c9:62:c2:62:6a:d6:17:be:7c:c7:8b:98:
                    16:f4:a1:ed:57:68:8d:71:96:c7:9d:b1:55:17:28:
                    39:51:5e:7b:be:8e:13:a8:59:66:34:2e:2d:b1:e0:
                    b1:66:0e:28:b5:f7:f9:46:bb:cb:2b:11:3c:88:6f:
                    25:46:8b:ea:c4:b9:93:9d:16:1b:fd:42:2e:ad:33:
                    4e:a6:c0:92:96:33:62:7e:52:64:47:19:e2:41:91:
                    30:aa:3a:f9:e6:48:52:42:c9:8f:f3:a7:19:40:c1:
                    8b:c0:4f:84:c2:c4:d5:b5:63:4f:f7:0c:6f:ed:5a:
                    83:99:5c:8d:31:1e:7e:53:71:65:27:b3:25:c4:ae:
                    93:a7:28:3a:86:4e:c5:73:31:e8:89:40:2f:b0:10:
                    06:bc:74:c7:08:17:47:a9:70:e3:9e:be:45:29:a2:
                    88:df:01:2a:0a:19:ef:da:c2:15:45:64:0e:2f:38:
                    91:8f:e2:57:06:3e:d7:11:cf:c8:bf:cc:eb:61:8a:
                    52:a1:b1:53:ce:95:1f:9a:ce:5f:5c:04:81:a3:21:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:11:DF:5A:C3:D4:00:8F:CB:34:B4:84:2F:05:B0:CD:2B:16:8D:A4
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32312d3231203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:e2:ad:77:2d:3e:d2:08:7f:53:52:b5:fa:00:1d:0f:b1:fb:
         7d:fa:73:54:72:51:f7:db:38:5f:d5:ae:dd:38:33:dd:06:1f:
         f0:7c:5c:2a:d9:14:69:8e:8c:42:63:70:6d:59:26:39:93:5b:
         ad:fa:4a:b5:dc:4f:ce:ec:61:37:f5:43:0a:d5:5c:71:42:6c:
         b1:47:75:67:33:d2:37:ed:8d:ad:d4:27:47:3c:d6:c0:95:2f:
         26:d8:63:bd:0a:5b:7b:e1:c5:b6:5b:a2:a5:77:fa:c4:d5:f6:
         de:fb:69:b9:01:c5:e3:56:75:50:ae:34:e3:b4:39:49:28:33:
         94:e7:76:26:3a:fd:40:2f:17:a5:99:c9:e9:c3:79:52:be:2a:
         e3:69:2a:96:7e:d9:e3:08:24:a1:9a:04:83:60:45:c2:55:e8:
         df:f3:64:24:d4:12:12:03:6a:51:7d:b2:4e:f5:df:f6:5f:de:
         a2:30:1b:8e:8b:3b:9e:e6:cf:f7:8b:a4:5a:06:fa:77:09:c5:
         fd:9a:3a:cc:ac:a0:42:58:39:90:27:d0:1d:4c:d1:1d:a6:29:
         e5:35:e6:af:2b:2d:07:a7:55:b7:d5:47:fa:34:cd:31:53:39:
         e4:41:dd:9a:e2:56:b9:3d:a7:d7:da:c6:a2:b0:0f:29:af:d4:
         b9:41:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:27 2026 by rpki-client