This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          FWDwf0E28XfZzERUwR2YdmAiIR3+MODf158cbt47xD0=
Subject key identifier:   21:2D:6F:4E:FA:E3:AC:93:B7:5E:9B:62:51:05:95:85:0A:79:AD:0D
Certificate issuer:       /CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
Certificate serial:       1F7F98DC2A0B8C39A26BB594A4CE64921AB76665
Authority key identifier: 8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa
Signing time:             Sat 10 Jan 2026 16:29:14 +0000
ROA not before:           Sat 10 Jan 2026 16:24:14 +0000
ROA not after:            Sat 09 Jan 2027 16:29:14 +0000
asID:                     263920
IP address blocks:        138.185.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 04:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7f:98:dc:2a:0b:8c:39:a2:6b:b5:94:a4:ce:64:92:1a:b7:66:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
        Validity
            Not Before: Jan 10 16:24:14 2026 GMT
            Not After : Jan  9 16:29:14 2027 GMT
        Subject: CN=212D6F4EFAE3AC93B75E9B62510595850A79AD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:73:e6:37:75:cc:fc:80:c5:5e:f2:f4:87:
                    ce:8e:76:b1:8d:fc:29:1e:bc:9b:eb:13:ad:9f:48:
                    ee:70:09:44:6e:25:6d:c3:4f:35:8a:e5:a8:a5:23:
                    9f:b5:6f:1e:44:6f:20:ba:71:20:42:da:88:42:79:
                    5e:0f:2f:1b:42:25:f6:e7:18:36:ef:e4:f8:4e:43:
                    92:bb:47:89:7b:04:45:f6:57:8b:37:f6:c5:ae:94:
                    0f:3e:48:39:ba:23:b0:aa:50:7e:86:ce:bb:57:6f:
                    2a:56:51:34:15:8e:4d:5f:61:7e:e8:93:f3:2a:9f:
                    45:c0:f8:ab:cf:e8:6a:b5:21:12:6a:eb:d5:2a:88:
                    34:d8:6d:c8:2e:e7:3b:7e:28:8b:af:c0:a7:9c:78:
                    b3:47:5d:39:a8:30:4e:91:e3:fb:3c:0a:fa:00:da:
                    e2:b9:d3:a8:4e:4a:46:9b:f4:b6:aa:7b:5d:1a:1e:
                    ea:04:60:54:9e:8c:87:35:93:7b:e5:29:68:f1:c8:
                    bf:b3:ec:1b:79:a0:70:eb:2e:a0:64:69:d1:76:f2:
                    f0:18:d2:54:c0:d9:61:35:d6:76:30:9b:b9:38:9a:
                    99:6d:d5:c7:7a:14:ea:c3:d4:0b:2f:74:eb:14:ff:
                    2c:31:63:cc:67:82:63:8e:9f:02:f1:a9:25:09:67:
                    ca:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2D:6F:4E:FA:E3:AC:93:B7:5E:9B:62:51:05:95:85:0A:79:AD:0D
            X509v3 Authority Key Identifier:
                keyid:8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234312e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:88:db:31:30:c7:34:b1:57:d5:f2:f6:0b:f1:fa:f4:68:
         49:e6:d7:0d:3e:18:09:52:14:de:c9:9a:11:79:d7:27:1e:95:
         cc:ab:45:d7:ac:36:8c:70:7a:09:21:c0:c2:0c:cb:3f:35:5a:
         0a:53:b9:61:ed:1d:b9:4d:db:c5:27:a5:24:7e:e0:f9:60:e3:
         74:a9:f9:ed:1e:db:ea:4a:53:38:2a:65:cc:e3:05:5f:4f:c1:
         bb:3e:0a:de:e8:ba:fd:e8:48:79:c4:3d:60:1c:bd:b2:4f:d5:
         05:eb:6a:31:2f:95:09:23:fc:85:61:5b:5c:14:cd:d3:5b:53:
         0f:b6:fa:be:e8:7d:d9:0a:a7:31:27:89:10:34:02:1a:b6:31:
         ce:28:e4:50:c8:d6:c9:24:83:19:dc:61:38:be:1f:d6:54:81:
         bd:6c:84:3f:11:e0:48:5b:6f:be:7a:23:f3:15:44:57:2a:8f:
         4d:18:72:22:94:5a:8d:f6:65:17:4d:e0:40:2f:90:83:32:06:
         b1:d7:b6:53:8b:28:33:a4:de:19:af:f6:0b:a7:e2:a9:3a:d0:
         ed:ba:fb:e7:c3:77:20:0d:81:dc:6f:30:4d:bc:2e:77:2e:a5:
         1d:60:57:6c:24:c0:5e:bf:7d:6d:29:4e:a2:99:46:6d:92:8f:
         4f:ef:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:02:22 2026 by rpki-client