This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3230203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32302d3230203d3e203238333532.roa (raw, json)
Hash identifier:          Ckhr9U5jbT5cZFFMgDYUOb7vgo4NrqadWkQu4nJ28h0=
Subject key identifier:   83:E9:74:54:D0:13:E0:40:7B:95:11:44:95:C9:22:C1:B5:45:6D:4F
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       6BF0385F99EEEAAF08680B0EDF3B88DF65EB2C61
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3230203d3e203238333532.roa
Signing time:             Tue 06 Jan 2026 12:23:32 +0000
ROA not before:           Tue 06 Jan 2026 12:18:32 +0000
ROA not after:            Tue 05 Jan 2027 12:23:32 +0000
asID:                     28352
IP address blocks:        189.51.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f0:38:5f:99:ee:ea:af:08:68:0b:0e:df:3b:88:df:65:eb:2c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Jan  6 12:18:32 2026 GMT
            Not After : Jan  5 12:23:32 2027 GMT
        Subject: CN=83E97454D013E0407B95114495C922C1B5456D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:d5:d3:15:df:17:43:1b:09:39:11:5a:69:
                    9a:10:5c:75:e9:27:80:cc:af:25:14:ca:7f:cf:1d:
                    f4:24:24:e3:0b:dd:3f:9a:3e:f3:09:4e:c6:cf:b2:
                    6f:7a:3c:cc:fd:d2:a6:32:5d:8d:d7:b7:68:41:35:
                    98:63:75:31:f1:54:59:ec:fd:bf:73:3a:ec:76:cd:
                    6c:4c:f0:91:d1:dd:5d:8a:3c:b0:6f:b7:64:01:ce:
                    65:75:b1:81:58:50:a8:73:fc:69:87:d4:7a:36:8d:
                    f3:50:4b:92:68:fa:1e:65:c2:56:fd:97:96:38:0a:
                    28:e9:20:a0:5e:1a:31:a7:71:c7:95:de:73:0f:41:
                    e3:08:4d:c2:22:26:31:20:28:ff:fd:4e:86:5e:c7:
                    3a:6b:9f:df:cf:62:7b:8f:01:bc:cd:30:fc:59:a0:
                    fa:20:0c:a5:26:b2:8d:e3:4d:16:9c:0f:cb:53:a1:
                    07:61:63:a6:e7:ea:d2:47:5a:b6:0f:87:71:94:47:
                    3f:bf:38:f7:83:04:a6:54:5c:ca:0e:5a:29:46:ac:
                    53:bd:ef:14:9b:c6:14:40:d4:28:d9:f1:1e:a9:4a:
                    97:2c:08:d7:60:16:00:78:2e:c0:ba:22:a2:c0:33:
                    83:78:5f:38:45:7a:0a:dc:fb:76:7b:c4:41:b2:6a:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E9:74:54:D0:13:E0:40:7B:95:11:44:95:C9:22:C1:B5:45:6D:4F
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3230203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:30:6d:e4:28:b3:e7:56:28:05:dd:82:fe:32:e7:a9:37:
         09:a6:42:16:f1:b8:36:19:cf:f1:ac:66:5c:6f:60:79:b3:92:
         54:f9:7f:4a:56:fe:b0:c3:6d:5e:9b:20:17:f9:8d:ea:34:ee:
         73:eb:34:09:a2:0a:7f:da:64:99:e9:91:97:f6:bd:28:4b:cd:
         bd:20:03:4d:c6:be:4a:44:9c:37:e4:a5:17:ec:a8:a8:a2:2b:
         58:f0:70:c4:27:51:d2:e7:6f:e1:89:df:aa:23:26:18:5b:b7:
         db:c7:ac:72:f4:9a:4f:19:50:9f:48:57:68:f4:68:cd:27:81:
         c8:48:10:59:60:b2:69:de:e5:05:b6:69:a8:5a:ad:77:18:1c:
         94:90:7b:eb:87:79:93:7a:66:13:31:77:f4:f1:4b:ce:58:d8:
         0e:c3:ee:22:f6:c0:a8:66:d2:62:4e:a0:48:c6:f4:18:8f:9c:
         e5:d1:d4:b9:41:19:c9:8e:23:0c:b3:54:38:39:cc:36:62:a8:
         25:f5:62:92:e5:19:b7:68:e8:fe:64:ca:3d:bf:1c:06:1d:aa:
         1c:02:3f:20:f5:c3:f4:58:a3:f7:bd:87:68:29:b2:86:70:88:
         e0:91:3c:db:ef:df:a3:e4:fa:99:99:9a:05:99:cf:d8:38:e5:
         22:35:e3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:56 2026 by rpki-client