This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3138372e38372e3135362e302f32322d3232203d3e20323636333839.roa
File:                     3138372e38372e3135362e302f32322d3232203d3e20323636333839.roa (raw, json)
Hash identifier:          XmpVxOA8h4Gi3xgsa3i5Qz+Z993CtQZ3+kgCfpNGx1Q=
Subject key identifier:   F5:AE:49:25:B6:ED:B3:1E:10:2F:EE:26:0B:01:6C:6E:F1:3E:82:0F
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       63135DC2284E13A66832C357D4F2378642A829E8
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3138372e38372e3135362e302f32322d3232203d3e20323636333839.roa
Signing time:             Wed 31 Dec 2025 12:08:49 +0000
ROA not before:           Wed 31 Dec 2025 12:03:49 +0000
ROA not after:            Wed 30 Dec 2026 12:08:49 +0000
asID:                     266389
IP address blocks:        187.87.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 03:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:13:5d:c2:28:4e:13:a6:68:32:c3:57:d4:f2:37:86:42:a8:29:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Dec 31 12:03:49 2025 GMT
            Not After : Dec 30 12:08:49 2026 GMT
        Subject: CN=F5AE4925B6EDB31E102FEE260B016C6EF13E820F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:55:48:61:d3:cc:4f:a5:8b:e1:3b:36:1e:6e:
                    b8:20:10:22:06:af:d1:85:9d:39:3a:61:56:ee:1c:
                    c3:12:82:50:b5:16:d1:2d:ec:20:28:76:9d:a7:c8:
                    cd:00:86:04:5c:bf:b2:65:ee:c9:3f:81:c1:29:77:
                    b6:ec:dd:ce:dc:cc:ec:12:02:da:91:e6:13:83:7e:
                    2a:04:ed:30:19:8c:c4:18:ff:57:30:04:86:e2:94:
                    41:4b:44:30:e4:97:f6:44:61:03:d6:47:2f:10:7c:
                    b1:9f:64:de:7c:02:0f:4e:e1:12:d6:18:10:a8:b7:
                    91:1a:48:83:8d:23:09:77:a9:e6:10:31:25:48:1c:
                    93:08:b8:bc:fb:a2:e7:90:29:32:c0:f3:24:d0:d4:
                    e2:d8:fb:d4:d8:55:ea:cb:37:04:d0:08:c1:d0:c8:
                    e3:1e:81:d5:e2:03:4c:88:96:88:02:97:3f:e7:72:
                    3a:53:bf:d6:56:e9:50:5a:e8:f7:b1:0e:9f:f6:ed:
                    89:e2:7e:da:0d:21:2f:98:8a:41:d4:b5:6c:e8:a4:
                    da:5f:a0:6d:d8:28:68:26:d3:bc:43:dc:f2:c0:06:
                    71:0c:24:45:8e:48:ea:a5:20:bb:67:cc:0c:bf:cc:
                    23:83:fb:4a:91:58:69:44:12:e9:72:41:d1:98:b9:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AE:49:25:B6:ED:B3:1E:10:2F:EE:26:0B:01:6C:6E:F1:3E:82:0F
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3138372e38372e3135362e302f32322d3232203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:9c:6e:4f:31:0e:a2:27:74:11:f0:fc:8c:02:2b:47:b6:fc:
         8a:c2:f2:f0:76:dd:76:94:d7:99:97:ed:6b:ee:4a:7a:b6:80:
         a7:c1:1e:e9:47:ac:81:08:08:7e:43:c4:4e:ea:12:9b:95:8a:
         a3:30:a8:e6:74:7c:54:1f:e1:b2:4f:58:8c:83:fa:18:4f:5b:
         8c:e8:ba:94:7d:0a:9d:33:89:6f:54:2a:f0:05:90:de:14:8b:
         e3:5c:f2:df:34:da:d6:b4:41:3a:a6:a5:05:94:78:ee:f3:6c:
         56:6d:c8:8b:27:a6:b7:46:00:13:26:7e:b0:e3:a1:59:fb:8a:
         3a:9b:28:b6:2d:79:41:f6:16:60:ae:44:3b:5c:04:df:28:9b:
         3a:27:31:9a:e1:61:17:78:81:63:7a:8a:14:f6:c0:7c:40:5b:
         53:86:cc:46:27:12:b1:2c:a9:90:18:36:1e:cb:f7:23:29:f2:
         a8:56:38:87:d0:8a:af:49:21:ec:ce:87:fe:35:3c:14:9a:3b:
         4a:45:7f:9f:ee:14:f9:e0:a6:d2:d1:51:88:f0:d1:ec:e7:1e:
         1e:cb:67:94:5e:e6:b8:8f:99:62:af:b5:bf:a6:87:44:3f:c8:
         03:ff:7a:39:79:19:65:cd:b5:11:90:a1:95:62:83:7d:2e:16:
         ac:4f:a4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:20:05 2026 by rpki-client