This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
File:                     3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa (raw, json)
Hash identifier:          yGN0s88KE6yC4jvfM5nD9znIkBAUi9jRnqsdZJUTnxs=
Subject key identifier:   50:5E:EB:05:B4:AF:B5:4D:2B:F0:01:9B:00:31:AE:8E:96:1B:9A:BC
Certificate issuer:       /CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
Certificate serial:       3239C79A0CFFB0BB0371990DA0751E153990B1CB
Authority key identifier: 8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
Signing time:             Sat 10 Jan 2026 16:29:14 +0000
ROA not before:           Sat 10 Jan 2026 16:24:14 +0000
ROA not after:            Sat 09 Jan 2027 16:29:14 +0000
asID:                     263920
IP address blocks:        138.185.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 04:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:39:c7:9a:0c:ff:b0:bb:03:71:99:0d:a0:75:1e:15:39:90:b1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
        Validity
            Not Before: Jan 10 16:24:14 2026 GMT
            Not After : Jan  9 16:29:14 2027 GMT
        Subject: CN=505EEB05B4AFB54D2BF0019B0031AE8E961B9ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:4a:59:66:a5:7b:e8:b8:9b:9c:1e:3d:b5:
                    f5:07:b8:12:0b:a8:f2:92:9b:d1:46:55:64:5a:8b:
                    45:86:ed:f3:51:70:b9:a6:14:11:d7:7c:41:44:ff:
                    54:da:4e:c5:36:fd:a7:ec:29:82:3b:96:44:ee:d4:
                    22:ba:d7:0b:c9:4b:44:d0:e3:0a:f3:fa:33:66:27:
                    3e:e6:4d:44:75:be:6b:7a:d9:91:00:d0:6d:e5:db:
                    95:84:b8:6e:33:60:cc:70:cd:e7:17:56:cc:62:fa:
                    20:e0:17:2d:45:98:b5:14:21:ac:49:e4:e7:9c:13:
                    a6:1a:0c:90:e7:36:86:e8:0d:81:a4:e5:84:e8:0f:
                    fe:ed:70:80:4e:fd:2e:fe:4a:ac:1b:f8:05:4b:0b:
                    fe:a7:d4:a1:cb:72:fa:16:a2:9f:40:ce:07:7e:93:
                    68:8f:19:f5:d6:2c:78:64:a6:d8:31:56:33:3c:db:
                    43:57:cd:46:ae:b0:79:df:a8:c5:18:cc:9d:27:75:
                    db:9b:3f:83:74:62:ab:13:20:35:fe:6c:eb:78:c4:
                    3c:e1:bf:c1:e8:77:96:ca:77:f4:0f:f9:99:2d:c2:
                    81:93:9e:ee:bb:12:27:25:ca:98:52:f4:f1:cc:67:
                    b2:d3:d2:a7:a5:ac:76:cb:ab:56:bf:51:20:10:9e:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5E:EB:05:B4:AF:B5:4D:2B:F0:01:9B:00:31:AE:8E:96:1B:9A:BC
            X509v3 Authority Key Identifier:
                keyid:8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:21:10:50:83:e2:dc:63:ce:ce:c4:76:c3:65:a0:2f:08:33:
         14:d1:b0:8a:15:3b:f6:2a:65:15:f8:10:fc:78:34:72:22:11:
         26:bd:3c:fd:2d:1f:a1:39:f4:eb:1b:f4:65:c0:ea:64:ec:bd:
         a5:60:be:86:75:ca:f5:d5:4f:b5:d4:62:2a:fc:16:f3:ff:f2:
         4b:08:51:28:4e:7a:40:21:ce:34:63:00:73:75:78:5f:de:31:
         cd:71:11:41:c7:ff:6a:2d:66:03:47:28:b8:94:be:ae:64:11:
         3e:e0:96:d4:41:a5:fa:8f:88:c7:60:d5:96:09:97:ed:ac:d8:
         ba:a9:58:a1:b6:f2:9c:d8:7d:b3:a4:5a:62:5b:7c:44:15:8c:
         d0:ed:75:43:a8:5a:5c:22:96:8a:13:65:0d:2b:d3:19:81:cc:
         c9:72:b1:40:a7:01:a2:84:76:26:34:2c:bc:c7:43:00:09:0a:
         7d:1b:50:69:3f:3c:39:81:79:9a:d0:ee:51:a2:e4:64:ea:a9:
         1d:e7:45:cb:93:09:87:f8:b3:e9:7e:e8:ff:b7:86:29:52:7a:
         98:86:db:0d:2d:8a:59:fa:86:7e:57:fb:7e:f7:2e:67:f8:5f:
         2b:05:a8:fb:cd:d1:a4:08:36:62:36:77:d2:a4:45:12:be:8e:
         ed:00:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:02:22 2026 by rpki-client