This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139362e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139362e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          aqYBBEfmdy43Inlud5qKpNZPNQxzvbqwYVT0zYpS87I=
Subject key identifier:   E3:29:33:8A:02:7C:1E:EE:80:9D:80:50:AA:A3:D7:7E:79:7D:01:E5
Certificate issuer:       /CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
Certificate serial:       041F7A2E7CEDFA53AE5D35940B69E73AD3494A01
Authority key identifier: 70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139362e302f32342d3234203d3e20323632363837.roa
Signing time:             Thu 04 Dec 2025 14:47:43 +0000
ROA not before:           Thu 04 Dec 2025 14:42:43 +0000
ROA not after:            Thu 03 Dec 2026 14:47:43 +0000
asID:                     262687
IP address blocks:        187.87.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1f:7a:2e:7c:ed:fa:53:ae:5d:35:94:0b:69:e7:3a:d3:49:4a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
        Validity
            Not Before: Dec  4 14:42:43 2025 GMT
            Not After : Dec  3 14:47:43 2026 GMT
        Subject: CN=E329338A027C1EEE809D8050AAA3D77E797D01E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:27:6d:2d:43:3c:f5:e0:77:a9:4e:31:ab:
                    60:05:e0:23:ad:63:df:86:d7:a9:d2:7f:41:71:ae:
                    47:de:54:27:81:17:18:71:c1:41:67:73:01:12:b8:
                    0f:2b:d9:77:90:73:5d:d3:1c:52:94:4c:ee:dd:1f:
                    a2:0d:3a:e4:f8:e5:5a:98:e4:7d:3d:a5:51:4f:5c:
                    56:e7:58:2c:06:c0:e9:7c:ae:1f:58:45:07:58:0b:
                    5d:ff:eb:ec:01:af:7b:23:30:84:c5:f8:42:a7:b7:
                    14:eb:04:d4:0d:6c:9b:93:4d:c4:78:ec:9d:54:61:
                    b4:9d:bf:1d:b0:b4:e4:d1:39:84:cc:38:c7:07:0e:
                    f9:9e:9d:ab:c1:44:2b:dd:fe:fd:43:e3:72:e9:40:
                    79:b3:8e:e4:37:5d:d4:a0:cd:26:54:0a:00:75:06:
                    4e:8e:9d:a0:b0:86:09:fc:04:ad:97:43:e5:73:fd:
                    32:f1:07:f6:88:83:3e:53:f2:e0:ec:dc:a5:93:bd:
                    93:35:30:1b:7a:49:fa:6a:55:8b:10:99:e4:a0:b1:
                    b0:7f:63:22:34:87:ac:29:de:9a:8f:ab:ba:a7:58:
                    ec:94:f1:87:09:70:28:b2:3f:d4:e9:3f:af:96:59:
                    79:54:f8:f6:84:77:50:ee:fe:fa:89:9f:2f:8d:03:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:29:33:8A:02:7C:1E:EE:80:9D:80:50:AA:A3:D7:7E:79:7D:01:E5
            X509v3 Authority Key Identifier:
                keyid:70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139362e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a2:08:fe:d1:75:9f:50:1d:c7:e8:1b:29:ba:d2:e3:f4:89:
         da:fd:f1:0d:7a:07:62:e9:78:fd:f5:88:d3:54:bd:15:14:7c:
         a0:1e:c0:3f:ac:7c:37:9b:67:56:31:97:ab:90:7e:f6:47:00:
         27:2b:ad:8e:ef:92:8b:c5:3a:3a:5d:b1:7b:02:cd:e8:9b:5f:
         49:60:35:d8:b7:6f:f6:37:51:8f:f0:44:4e:cf:19:ea:5d:a1:
         11:cf:12:05:d6:db:7b:7a:4c:ee:26:fd:9e:c7:53:a9:e8:85:
         39:3a:4f:75:25:e9:53:6f:a9:e4:97:e0:21:cd:7b:72:00:1f:
         a1:e1:da:00:80:95:30:41:54:56:20:99:d4:8e:75:93:77:b7:
         01:9c:5e:27:9d:ed:bd:64:bb:5b:91:0a:03:1e:72:4f:b5:5c:
         ec:96:28:41:be:e4:b6:8b:70:7f:0e:dc:a1:1c:5d:86:18:b7:
         84:0e:0a:86:cb:f7:30:1f:d5:1b:51:97:a4:0d:ca:3c:59:cb:
         96:7f:4c:2b:a5:fd:68:4f:71:15:36:5c:41:4b:d7:b0:ea:0a:
         e0:a4:d1:ec:9d:2f:41:63:76:13:14:9b:d3:fb:57:17:23:64:
         bb:0d:f1:1a:3a:ed:b2:4b:24:20:7c:c6:f9:1d:2f:74:14:60:
         4a:f9:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:04 2025 by rpki-client