This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139322e302f32302d3332203d3e203238313732.roa
File:                     3138392e38342e3139322e302f32302d3332203d3e203238313732.roa (raw, json)
Hash identifier:          JPZRRK6cooE+Fw+PyHTK8jSy5BAWtV2UhtcvYcmNwEc=
Subject key identifier:   02:DF:8B:DC:D0:7A:80:B0:2D:5C:CB:8C:95:90:10:C2:F8:06:A4:BA
Certificate issuer:       /CN=8C63D6EE71C18E9A520D6826B7279995D7D05211
Certificate serial:       6785B947B16DE18A7C6C20D7379819CA900455CF
Authority key identifier: 8C:63:D6:EE:71:C1:8E:9A:52:0D:68:26:B7:27:99:95:D7:D0:52:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C63D6EE71C18E9A520D6826B7279995D7D05211.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139322e302f32302d3332203d3e203238313732.roa
Signing time:             Sat 15 Nov 2025 08:50:27 +0000
ROA not before:           Sat 15 Nov 2025 08:45:27 +0000
ROA not after:            Sat 14 Nov 2026 08:50:27 +0000
asID:                     28172
IP address blocks:        189.84.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/8C63D6EE71C18E9A520D6826B7279995D7D05211.crl
                          rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/8C63D6EE71C18E9A520D6826B7279995D7D05211.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C63D6EE71C18E9A520D6826B7279995D7D05211.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:85:b9:47:b1:6d:e1:8a:7c:6c:20:d7:37:98:19:ca:90:04:55:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C63D6EE71C18E9A520D6826B7279995D7D05211
        Validity
            Not Before: Nov 15 08:45:27 2025 GMT
            Not After : Nov 14 08:50:27 2026 GMT
        Subject: CN=02DF8BDCD07A80B02D5CCB8C959010C2F806A4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:4c:c5:77:0e:91:9b:d3:fb:c3:f8:c5:8a:
                    19:4d:79:58:d7:03:98:0e:85:33:3b:72:84:20:63:
                    9e:db:e5:a0:c3:4c:8c:5e:8a:24:ee:a6:fb:55:94:
                    ee:44:3c:a2:f6:e8:e6:a3:33:63:4c:d4:25:99:f5:
                    1e:0d:95:99:28:a9:5f:3e:e3:01:ea:d4:97:d3:d0:
                    28:1a:32:ee:1e:0d:48:5f:7f:d4:b8:20:8c:04:b1:
                    1b:c7:83:19:1f:3d:ad:47:af:90:c2:5a:3d:b4:81:
                    ef:97:0e:de:1a:da:de:cc:f1:bd:be:31:59:d7:4c:
                    15:33:93:9a:43:9c:95:d2:8c:9c:c7:95:b9:4d:ed:
                    02:b6:d0:73:c3:84:76:51:63:a9:54:00:86:e0:d7:
                    3d:7c:18:ec:52:4a:5d:2d:f2:a9:9a:c6:6d:10:e6:
                    84:de:1f:ad:e7:6b:c2:0c:51:da:a4:94:b2:11:8a:
                    cf:c1:26:aa:53:42:4f:3c:af:a3:d0:3a:ec:64:f1:
                    eb:4b:32:51:9d:95:54:fd:d0:e0:71:ca:e8:bd:8f:
                    d0:0c:b3:89:c8:02:d7:d6:f7:55:bb:2e:9a:b9:73:
                    1f:e5:04:01:ab:36:c3:e9:d3:a3:be:6e:17:27:89:
                    6c:c2:8e:29:25:c8:9f:23:ec:d8:b0:25:e7:7d:69:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DF:8B:DC:D0:7A:80:B0:2D:5C:CB:8C:95:90:10:C2:F8:06:A4:BA
            X509v3 Authority Key Identifier:
                keyid:8C:63:D6:EE:71:C1:8E:9A:52:0D:68:26:B7:27:99:95:D7:D0:52:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/8C63D6EE71C18E9A520D6826B7279995D7D05211.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C63D6EE71C18E9A520D6826B7279995D7D05211.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/3138392e38342e3139322e302f32302d3332203d3e203238313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:b7:42:07:64:4d:53:ef:22:14:58:b5:9b:5c:c2:8d:61:18:
         ad:72:c9:6f:3e:e5:3e:be:26:29:6e:9c:d7:e6:85:c8:ae:6b:
         b2:41:24:33:fb:8c:38:72:23:23:4c:5f:79:d1:85:90:b9:4e:
         f4:9f:76:a6:75:30:ca:94:59:b0:b0:b8:53:05:b8:c3:b9:be:
         7b:0e:b0:11:5a:ff:bf:e5:4a:f2:38:da:da:cb:15:15:75:fb:
         9a:c7:95:d1:71:2b:40:22:a7:4c:57:36:38:d9:a3:b2:83:ec:
         f9:e0:c0:ac:88:c9:c6:6e:bd:dc:b6:48:30:3f:c1:0e:1a:c9:
         61:6d:aa:f3:07:06:60:93:3a:a9:11:2e:61:1f:8a:29:f0:30:
         3f:e4:b1:9e:7a:48:aa:29:73:76:5e:b4:84:55:3c:7c:9a:3e:
         77:21:b7:41:74:4b:ec:18:89:49:cd:d2:02:3b:58:b3:0a:d8:
         21:8f:d3:c8:c9:db:51:dc:32:07:c4:04:d2:e3:20:4a:e4:51:
         0f:f2:c1:a6:ad:e2:1c:8b:99:6a:a0:e9:6c:31:89:7c:07:1d:
         61:80:09:79:cc:14:6f:ab:ae:6a:57:61:9b:68:e5:1d:8a:ea:
         a9:1b:04:ae:31:6a:cc:6c:b7:9c:a1:28:0b:e2:81:82:48:7c:
         99:05:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:11:04 2025 by rpki-client