This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32322d3232203d3e203238333532.roa
File:                     3138372e302e35362e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          ayh5BqJa0/M7Ll9MMDWugEP2hFjcmLe53IYKte6AC70=
Subject key identifier:   ED:B2:F4:08:98:9F:9F:84:1A:85:52:B9:82:8E:D0:F2:52:C3:97:7F
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       3A07CF30CF165B42A79AD6BBCB5DC2DA69EB3688
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32322d3232203d3e203238333532.roa
Signing time:             Tue 06 Jan 2026 12:23:34 +0000
ROA not before:           Tue 06 Jan 2026 12:18:34 +0000
ROA not after:            Tue 05 Jan 2027 12:23:34 +0000
asID:                     28352
IP address blocks:        187.0.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:cf:30:cf:16:5b:42:a7:9a:d6:bb:cb:5d:c2:da:69:eb:36:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Jan  6 12:18:34 2026 GMT
            Not After : Jan  5 12:23:34 2027 GMT
        Subject: CN=EDB2F408989F9F841A8552B9828ED0F252C3977F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:8e:61:dd:84:d2:9d:a6:9a:8f:0d:05:60:
                    20:8e:13:f7:78:29:cb:98:34:c2:b8:ee:da:84:76:
                    b1:26:78:9a:1d:d9:c5:7a:93:5a:70:47:f3:e4:f5:
                    07:52:2f:df:4e:66:cb:e3:b3:be:e5:57:db:dc:87:
                    c8:b9:b2:73:f4:d5:83:79:77:76:6e:33:f4:ea:95:
                    f8:f6:94:7e:95:0f:b3:20:7a:f6:35:81:5e:0a:eb:
                    73:a7:58:f5:43:57:7f:73:7b:21:13:11:3c:3a:fa:
                    6f:63:4f:21:17:b5:d4:87:60:51:1a:b3:fd:0a:6c:
                    4b:ff:67:57:7e:4d:85:a7:13:43:0f:61:08:04:9f:
                    b5:7b:8e:45:37:0c:e2:c2:3d:dd:15:34:77:d7:da:
                    29:d8:9b:39:ae:8e:5b:a5:df:85:43:c4:cd:34:e0:
                    32:25:9a:fb:51:1b:3c:0d:5a:7a:dc:21:df:32:a0:
                    2b:4c:83:9d:b6:85:34:b7:08:50:4c:32:6f:1c:b2:
                    18:b6:53:62:0f:14:32:af:6a:08:07:56:c8:32:14:
                    fe:bb:e8:98:0a:48:88:de:f9:eb:54:80:bb:f3:70:
                    5b:1a:57:c8:34:01:c1:23:5e:eb:16:d0:aa:d2:81:
                    ad:fe:c2:3c:61:20:48:1c:21:76:23:26:31:d1:99:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B2:F4:08:98:9F:9F:84:1A:85:52:B9:82:8E:D0:F2:52:C3:97:7F
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:31:ed:25:f7:3f:3f:00:4c:ff:d5:6e:3e:2c:81:80:03:d7:
         50:d6:1c:84:db:e2:77:14:74:cf:e4:19:6e:a9:62:3e:67:03:
         8c:f6:67:32:c0:54:04:87:5f:50:6c:80:5e:28:9c:e9:a6:1d:
         fe:b0:55:e3:c9:ca:ac:a7:e2:3f:57:07:ca:c6:b8:91:12:1a:
         2c:77:90:e2:89:2e:da:50:95:5d:9f:79:ed:ad:64:05:8d:e9:
         4a:d4:61:df:a5:1f:d0:ad:f4:c1:10:7a:e0:fc:31:1f:83:b9:
         3c:df:5e:08:6a:3c:6b:3f:82:78:a0:40:6e:8d:7c:c4:35:f4:
         66:f1:04:e8:6f:fe:c9:0c:c6:82:e3:f0:ab:4e:55:5d:3f:e4:
         e9:b1:19:6c:01:48:c7:03:52:61:6b:34:52:84:d4:00:7f:f6:
         6f:e2:af:d1:ff:c1:1f:b1:d5:06:76:d0:76:08:10:4a:f2:a4:
         e5:8a:47:53:00:c3:3c:4d:ce:33:eb:61:61:73:c0:c6:93:64:
         c4:32:95:93:2a:4c:4b:75:41:1f:b2:3b:bd:3a:25:96:78:7a:
         e5:cc:59:2d:b8:18:54:84:fa:b0:b8:f7:4a:5c:f3:67:e9:7f:
         85:97:76:fe:26:45:fa:e1:78:a2:50:fc:dd:e6:83:5a:f0:e8:
         24:20:88:9e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOgfPMM8WW0Knmta7y13C2mnrNogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA1RTlEN0UyNUZERDkyNTVFMEE4NzQ1MjIxQjQ0NzU0
OUEzM0Y5NTAeFw0yNjAxMDYxMjE4MzRaFw0yNzAxMDUxMjIzMzRaMDMxMTAvBgNV
BAMTKEVEQjJGNDA4OTg5RjlGODQxQTg1NTJCOTgyOEVEMEYyNTJDMzk3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xI5h3YTSnaaajw0FYCCOE/d4
KcuYNMK47tqEdrEmeJod2cV6k1pwR/Pk9QdSL99OZsvjs77lV9vch8i5snP01YN5
d3ZuM/Tqlfj2lH6VD7MgevY1gV4K63OnWPVDV39zeyETETw6+m9jTyEXtdSHYFEa
s/0KbEv/Z1d+TYWnE0MPYQgEn7V7jkU3DOLCPd0VNHfX2inYmzmujlul34VDxM00
4DIlmvtRGzwNWnrcId8yoCtMg522hTS3CFBMMm8cshi2U2IPFDKvaggHVsgyFP67
6JgKSIje+etUgLvzcFsaV8g0AcEjXusW0KrSga3+wjxhIEgcIXYjJjHRmUmdAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU7bL0CJifn4QahVK5go7Q8lLDl38wHwYDVR0j
BBgwFoAU0F6dfiX92SVeCodFIhtEdUmjP5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC9EMDVFOUQ3RTI1RkREOTI1NUUwQTg3NDUyMjFCNDQ3NTQ5QTMzRjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNUU5RDdFMjVGREQ5MjU1
RTBBODc0NTIyMUI0NDc1NDlBMzNGOTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzEzODM3MmUzMDJlMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzgzMzM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAK7ADgwDQYJKoZIhvcNAQELBQADggEBADEx7SX3Pz8ATP/V
bj4sgYAD11DWHITb4ncUdM/kGW6pYj5nA4z2ZzLAVASHX1BsgF4onOmmHf6wVePJ
yqyn4j9XB8rGuJESGix3kOKJLtpQlV2fee2tZAWN6UrUYd+lH9Ct9MEQeuD8MR+D
uTzfXghqPGs/gnigQG6NfMQ19GbxBOhv/skMxoLj8KtOVV0/5OmxGWwBSMcDUmFr
NFKE1AB/9m/ir9H/wR+x1QZ20HYIEErypOWKR1MAwzxNzjPrYWFzwMaTZMQylZMq
TEt1QR+yO706JZZ4euXMWS24GFSE+rC490pc82fpf4WXdv4mRfrheKJQ/N3mg1rw
6CQgiJ4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:30 2026 by rpki-client