This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32322d3232203d3e203238333532.roa
File:                     3138372e302e36302e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          k0D4bCcHh1sJFGNGtnHHL3TEdvsaQcWez/vx2+smRBs=
Subject key identifier:   BD:24:33:6B:02:51:B8:3D:7F:E8:A8:2F:84:E4:B4:BE:89:49:49:94
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       72A6EEF5CA387DA63939B95CB6148A7704E9A909
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32322d3232203d3e203238333532.roa
Signing time:             Tue 06 Jan 2026 12:23:31 +0000
ROA not before:           Tue 06 Jan 2026 12:18:31 +0000
ROA not after:            Tue 05 Jan 2027 12:23:31 +0000
asID:                     28352
IP address blocks:        187.0.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a6:ee:f5:ca:38:7d:a6:39:39:b9:5c:b6:14:8a:77:04:e9:a9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Jan  6 12:18:31 2026 GMT
            Not After : Jan  5 12:23:31 2027 GMT
        Subject: CN=BD24336B0251B83D7FE8A82F84E4B4BE89494994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b5:9e:72:03:e3:1e:f7:68:9c:03:0b:7a:7c:
                    e1:88:19:71:7d:62:26:89:d9:0b:bd:64:bb:e0:28:
                    1c:03:a4:0f:6c:cd:af:bc:fe:07:a5:bf:d0:4d:70:
                    a5:fe:24:4c:4e:9d:7e:a2:d2:b6:0c:5b:6d:9a:d4:
                    cf:ab:07:5e:b4:ba:71:87:a6:f4:8f:e7:9e:b7:db:
                    fa:db:43:58:4e:ff:e5:37:cc:6e:8c:82:16:37:de:
                    15:e8:85:cd:a6:71:44:0c:c9:30:b9:19:1d:0a:db:
                    18:ed:3d:6c:dc:16:aa:80:57:4e:61:b1:f4:0b:fb:
                    d2:64:74:b9:87:d0:46:60:f0:45:cf:05:d9:45:6c:
                    68:17:fa:0f:b2:7b:eb:19:49:05:aa:cf:fc:d9:f8:
                    3a:48:d1:2c:06:dd:f1:80:a0:8f:c5:ec:68:f8:03:
                    38:14:a8:65:12:9f:5f:0c:c7:b0:c7:5a:80:5d:f1:
                    10:95:2a:e0:e2:f2:42:e6:d7:b3:52:93:9a:5b:2c:
                    a2:05:24:65:ce:b6:0f:fe:2c:8f:e2:06:33:0e:9e:
                    09:7c:8d:3c:04:e5:ce:36:92:0d:25:37:65:fe:4f:
                    0e:45:99:c8:7b:b3:b3:e2:20:09:09:1d:78:60:01:
                    35:43:0c:cd:de:ed:48:4e:c7:10:55:4b:f2:b4:b1:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:33:6B:02:51:B8:3D:7F:E8:A8:2F:84:E4:B4:BE:89:49:49:94
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:10:d2:16:46:8a:6f:9e:87:3f:0a:b6:17:0f:85:4e:b0:c5:
         64:e5:4e:e9:26:05:40:71:ca:10:92:b2:6d:fa:44:ef:65:b4:
         13:bb:37:a0:15:ac:dc:a4:7e:2d:49:c4:f9:2b:5e:0a:0f:db:
         76:8e:66:31:a9:da:89:c9:62:8f:58:64:cf:0d:46:78:41:4b:
         84:7a:27:5f:b6:71:c4:ef:e0:25:8b:ba:39:80:53:7f:18:f1:
         c8:6f:52:c1:2f:31:29:d5:c4:61:8b:54:fb:d2:b0:29:b2:14:
         6f:77:62:cc:c4:0c:39:f0:89:ba:08:71:b9:18:82:cb:bc:30:
         b0:e9:9e:98:68:34:fe:f9:e7:de:f0:cc:e8:69:af:ee:a8:e6:
         15:2b:90:93:86:fc:a2:a6:8c:78:e0:2e:5c:70:d4:6b:f4:83:
         f0:91:88:99:7d:bb:55:4e:55:b1:6a:6b:ac:e7:5d:33:1d:c3:
         6b:91:ec:a4:65:09:6e:de:67:16:44:ae:ab:99:49:82:4b:93:
         51:3a:b0:09:fc:31:97:8d:c0:3b:52:70:25:67:9f:37:57:22:
         e5:d7:33:1e:99:c2:8a:a5:c9:2e:7a:9d:5c:83:65:4f:44:c4:
         1f:ad:d5:a0:50:9e:51:0c:84:81:81:aa:eb:92:00:14:c1:d9:
         27:b7:ce:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:32 2026 by rpki-client