This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3138372e38372e3135392e302f32342d3234203d3e20323636333839.roa
File:                     3138372e38372e3135392e302f32342d3234203d3e20323636333839.roa (raw, json)
Hash identifier:          OjI0SEpLK8s+k1yyo37HzcquiOiSYOD8tgyI9hJ/ePk=
Subject key identifier:   90:95:32:FF:DD:51:D0:77:6B:58:5C:5B:A1:92:14:FD:35:DD:DF:60
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       4D501B20C6CC1AB17CE12ED3CC3B45E559128411
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3138372e38372e3135392e302f32342d3234203d3e20323636333839.roa
Signing time:             Wed 31 Dec 2025 12:08:49 +0000
ROA not before:           Wed 31 Dec 2025 12:03:49 +0000
ROA not after:            Wed 30 Dec 2026 12:08:49 +0000
asID:                     266389
IP address blocks:        187.87.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 03:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:50:1b:20:c6:cc:1a:b1:7c:e1:2e:d3:cc:3b:45:e5:59:12:84:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Dec 31 12:03:49 2025 GMT
            Not After : Dec 30 12:08:49 2026 GMT
        Subject: CN=909532FFDD51D0776B585C5BA19214FD35DDDF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:cb:da:6c:14:b7:68:e0:86:51:a1:1f:ea:
                    06:91:99:8e:2e:45:1a:66:03:73:e7:ac:c7:36:4e:
                    42:50:21:d7:e5:d9:c8:67:41:89:d3:8c:52:cb:21:
                    d7:ea:73:bc:44:cb:c5:40:1a:00:39:11:22:f1:79:
                    87:f9:00:57:f9:81:3c:1d:24:96:58:c9:6f:38:de:
                    4d:ff:ad:da:c4:ea:cd:fc:2e:85:6a:41:36:a7:f7:
                    ea:08:d1:5e:9f:9b:13:5d:a5:d9:6d:4a:d3:6c:76:
                    26:86:9e:fb:91:be:50:52:f3:0f:3e:00:78:1d:85:
                    9e:a4:2d:f2:8e:68:cd:99:94:c7:a9:1e:89:8f:35:
                    ce:33:a8:0a:c2:52:3e:d1:03:1b:7a:e3:51:60:a1:
                    df:2a:a6:7b:bb:c5:9e:b5:99:64:d4:e1:72:19:09:
                    0a:1a:39:43:c3:c9:33:16:4f:6e:98:f2:1c:e3:fc:
                    be:99:b6:8d:da:7c:97:a8:3f:ec:ae:8c:5d:a1:dd:
                    99:eb:2c:ec:4e:33:ba:71:4e:7c:8e:85:44:e9:36:
                    57:42:af:69:18:60:cf:2a:66:51:98:6f:95:e2:00:
                    42:ec:e8:6c:2d:40:7a:b8:5c:17:66:85:fc:b5:33:
                    f1:94:5b:71:8e:ce:33:40:81:16:34:9d:e8:43:60:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:95:32:FF:DD:51:D0:77:6B:58:5C:5B:A1:92:14:FD:35:DD:DF:60
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3138372e38372e3135392e302f32342d3234203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:e7:cc:88:ef:86:b9:7a:22:f2:67:de:6d:fc:59:77:06:47:
         e8:1d:ed:7f:06:0a:b0:7f:e1:54:da:93:30:8f:ac:27:b6:5b:
         20:7a:cb:31:49:f8:15:a3:66:aa:c9:4c:05:04:0f:a1:b9:da:
         b0:01:1a:e6:46:00:fc:57:f5:36:d7:46:99:5d:02:14:21:67:
         98:54:0b:f6:39:60:1e:ac:8c:55:7b:89:82:18:09:04:a7:90:
         83:25:2e:32:f1:4a:c6:08:97:e2:91:6c:f0:07:02:bc:58:8e:
         69:40:f6:32:0f:bb:76:b6:f4:45:00:54:c3:f3:f1:22:af:97:
         ce:6e:ef:3b:2b:bc:38:fa:84:9c:40:6f:16:d7:f0:2f:45:18:
         94:91:98:99:55:45:4b:6a:43:3c:06:40:64:5f:78:2d:75:ef:
         17:f7:d4:58:e2:68:e8:5e:40:34:23:ce:f2:de:2a:e8:09:cd:
         ba:ec:ca:c8:23:cc:22:64:09:2b:ab:be:3a:a6:5a:a0:94:b2:
         fb:ad:7a:e2:99:a4:b8:15:3d:bd:20:60:11:94:79:cf:3b:64:
         e9:a7:50:90:52:4c:4f:ad:35:4d:b5:9d:41:92:0c:63:17:b8:
         1d:e3:94:2b:23:d2:12:ec:f7:d1:6a:ae:10:36:69:11:c6:35:
         d8:1a:76:a8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTVAbIMbMGrF84S7TzDtF5VkShBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZBRTkxMzcxNkExMEI4RjAxQzAyM0IzMDQzRkFERkJC
MTlFMzFCNjAeFw0yNTEyMzExMjAzNDlaFw0yNjEyMzAxMjA4NDlaMDMxMTAvBgNV
BAMTKDkwOTUzMkZGREQ1MUQwNzc2QjU4NUM1QkExOTIxNEZEMzVERERGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNMvabBS3aOCGUaEf6gaRmY4u
RRpmA3PnrMc2TkJQIdfl2chnQYnTjFLLIdfqc7xEy8VAGgA5ESLxeYf5AFf5gTwd
JJZYyW843k3/rdrE6s38LoVqQTan9+oI0V6fmxNdpdltStNsdiaGnvuRvlBS8w8+
AHgdhZ6kLfKOaM2ZlMepHomPNc4zqArCUj7RAxt641Fgod8qpnu7xZ61mWTU4XIZ
CQoaOUPDyTMWT26Y8hzj/L6Zto3afJeoP+yujF2h3ZnrLOxOM7pxTnyOhUTpNldC
r2kYYM8qZlGYb5XiAELs6GwtQHq4XBdmhfy1M/GUW3GOzjNAgRY0nehDYLBLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkJUy/91R0HdrWFxboZIU/TXd32AwHwYDVR0j
BBgwFoAU766RNxahC48BwCOzBD+t+7GeMbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUQ5cmpFTDZ0bUVpRDl4RjdCSkpUVnF0R0hXbTVWV01ON1FaUm5tbXZk
VnAvMC9FRkFFOTEzNzE2QTEwQjhGMDFDMDIzQjMwNDNGQURGQkIxOUUzMUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGQUU5MTM3MTZBMTBCOEYw
MUMwMjNCMzA0M0ZBREZCQjE5RTMxQjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEOXJqRUw2dG1FaUQ5eEY3QkpKVFZxdEdIV201VldNTjdRWlJubW12ZFZwLzAv
MzEzODM3MmUzODM3MmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7V58wDQYJKoZIhvcNAQELBQADggEBAIjnzIjv
hrl6IvJn3m38WXcGR+gd7X8GCrB/4VTakzCPrCe2WyB6yzFJ+BWjZqrJTAUED6G5
2rABGuZGAPxX9TbXRpldAhQhZ5hUC/Y5YB6sjFV7iYIYCQSnkIMlLjLxSsYIl+KR
bPAHArxYjmlA9jIPu3a29EUAVMPz8SKvl85u7zsrvDj6hJxAbxbX8C9FGJSRmJlV
RUtqQzwGQGRfeC117xf31FjiaOheQDQjzvLeKugJzbrsysgjzCJkCSurvjqmWqCU
svuteuKZpLgVPb0gYBGUec87ZOmnUJBSTE+tNU21nUGSDGMXuB3jlCsj0hLs99Fq
rhA2aRHGNdgadqg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:01 2026 by rpki-client