This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234302e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          M+3vA/c3GdwfaSxbW26CXVM0jU6Z44fBYnHqL8S6tgs=
Subject key identifier:   8C:23:5D:80:21:BD:F1:03:96:60:BB:BB:7E:2E:93:CE:55:85:30:EE
Certificate issuer:       /CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
Certificate serial:       1153E8FDD613E0FF23B277F5A5135F28AB23DBE3
Authority key identifier: 8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32342d3234203d3e20323633393230.roa
Signing time:             Sat 10 Jan 2026 16:29:15 +0000
ROA not before:           Sat 10 Jan 2026 16:24:15 +0000
ROA not after:            Sat 09 Jan 2027 16:29:15 +0000
asID:                     263920
IP address blocks:        138.185.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 04:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:53:e8:fd:d6:13:e0:ff:23:b2:77:f5:a5:13:5f:28:ab:23:db:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
        Validity
            Not Before: Jan 10 16:24:15 2026 GMT
            Not After : Jan  9 16:29:15 2027 GMT
        Subject: CN=8C235D8021BDF1039660BBBB7E2E93CE558530EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:b4:0e:72:a0:df:2a:2e:b1:a9:8b:37:20:
                    47:f3:07:c0:16:32:aa:3d:b4:dd:6e:25:0a:b3:a0:
                    db:b4:0b:b0:5e:74:af:c8:e6:33:c3:4a:ad:76:89:
                    b8:a2:50:b1:5c:56:bc:2d:57:71:0f:95:49:12:e8:
                    c3:08:68:90:6f:6e:fe:f4:3e:df:43:7e:70:79:25:
                    6f:ce:56:f5:63:53:fa:5b:03:8f:88:f6:c2:30:8f:
                    95:b0:11:7d:be:7d:2a:7e:e4:e6:3a:e9:70:c2:d4:
                    e9:18:30:de:77:54:23:98:b6:50:1b:76:ef:49:48:
                    13:47:eb:34:db:9a:09:8e:db:b0:e8:ac:d1:92:2d:
                    93:dc:d7:bc:45:92:6d:bf:db:ca:6c:55:ce:77:8e:
                    29:3d:29:7c:7a:2a:78:a3:55:1c:7f:7b:6b:51:3f:
                    a3:fb:ab:48:53:88:de:f3:4e:99:fe:b0:d3:60:84:
                    43:b2:b9:72:01:fd:af:0d:bb:db:72:7c:e3:e2:5e:
                    bc:8b:06:b7:41:ea:ac:69:1b:87:94:b5:aa:d3:75:
                    96:fb:67:53:9a:00:b3:5e:1a:6e:d1:20:2a:ea:13:
                    0b:c4:42:f9:f2:89:0b:ce:1b:c1:af:9c:24:ed:cd:
                    0d:fc:f6:d6:b7:65:92:e7:8d:9c:13:26:e6:d4:e0:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:23:5D:80:21:BD:F1:03:96:60:BB:BB:7E:2E:93:CE:55:85:30:EE
            X509v3 Authority Key Identifier:
                keyid:8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:21:25:1c:c9:d2:00:62:65:45:60:b4:46:8c:5f:a9:d9:65:
         10:b1:d1:c8:2c:19:cd:6d:76:f8:f5:76:72:3c:06:c8:e4:2a:
         0a:15:4b:45:e1:5c:0b:6c:5a:22:26:35:3a:a8:0d:ba:45:a6:
         f6:35:c1:45:e2:9c:a7:60:6e:d0:dd:5b:35:ec:7e:c5:91:cd:
         78:ab:d7:b8:61:ae:ef:17:0e:2c:8c:a0:5e:f4:d2:c3:43:c2:
         06:6d:4e:28:5b:82:28:0b:e8:21:28:65:b2:7c:f3:81:cd:73:
         9c:45:f2:2f:9d:19:77:ba:36:18:b3:f9:49:0f:78:ea:38:0e:
         4c:33:c0:7f:8d:fe:5d:06:b8:dd:0d:9d:d3:1a:ef:b2:6d:6c:
         a3:e3:86:19:6e:3f:ce:20:aa:2f:5d:1d:0c:e0:56:a6:69:4d:
         e3:be:15:f1:8b:a3:4c:76:46:31:4f:74:06:4d:db:27:e5:d0:
         89:b7:44:b4:47:fb:e9:93:5c:e8:1c:8c:db:ab:0b:16:8a:1a:
         00:04:f8:11:3f:d0:a4:9d:0e:e1:dd:8a:69:b7:73:52:21:65:
         42:d4:e1:b2:f6:d0:4a:82:39:6f:c0:44:ac:3a:41:3a:64:84:
         c2:d9:36:b3:de:f5:6b:3d:dc:01:9b:7c:64:e9:7d:b3:09:11:
         c2:40:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:02:22 2026 by rpki-client