This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa
File:                     3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa (raw, json)
Hash identifier:          VG7+Vgl06uLYcekVN+b39SECDlQIyBfEChRRcEnthn0=
Subject key identifier:   E3:66:29:FB:2E:DD:90:C9:AA:63:2F:97:23:FD:3C:F1:70:1B:4D:31
Certificate issuer:       /CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
Certificate serial:       30CF7EB6765CCF3AACD2F2BFCAF865B5A2E5C397
Authority key identifier: 8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa
Signing time:             Sat 10 Jan 2026 16:29:12 +0000
ROA not before:           Sat 10 Jan 2026 16:24:12 +0000
ROA not after:            Sat 09 Jan 2027 16:29:12 +0000
asID:                     263920
IP address blocks:        138.185.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 04:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cf:7e:b6:76:5c:cf:3a:ac:d2:f2:bf:ca:f8:65:b5:a2:e5:c3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
        Validity
            Not Before: Jan 10 16:24:12 2026 GMT
            Not After : Jan  9 16:29:12 2027 GMT
        Subject: CN=E36629FB2EDD90C9AA632F9723FD3CF1701B4D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:36:50:ef:a5:f2:d2:97:ed:1e:a0:73:d6:
                    3c:38:80:0f:1c:ca:c4:7b:30:97:4c:a6:05:3e:dd:
                    dc:bc:99:17:5b:aa:74:1a:39:d4:51:8c:41:0f:9b:
                    ab:8d:d0:d8:11:19:be:61:c7:18:42:b6:f1:63:52:
                    d9:d5:23:63:0d:78:1f:ba:c2:b0:33:af:a6:52:a5:
                    77:fa:40:b7:e2:5f:42:b8:78:81:f9:a2:d6:04:b0:
                    61:40:63:87:6c:a6:7e:ac:0c:90:32:d0:fb:ac:20:
                    38:2a:b5:80:4d:8d:34:af:cb:8f:f3:22:65:24:ea:
                    c8:a5:6b:d7:6c:29:9d:66:98:a6:1f:be:cf:da:16:
                    e5:5c:f9:de:b2:51:76:59:af:1f:6a:21:1d:28:55:
                    7f:c2:e3:31:b2:e3:e2:87:57:10:6f:b2:cb:76:fd:
                    cc:7b:d1:46:bf:a3:2e:98:67:e1:2f:44:90:35:58:
                    2f:61:f0:dc:d0:7a:ce:74:29:fa:28:4c:3c:20:5d:
                    49:94:b0:ad:9f:5f:39:89:d4:ae:6b:47:96:0d:3b:
                    a6:90:c7:c2:57:6f:79:70:e2:a4:27:a6:4f:10:e6:
                    77:d1:6b:43:d2:1a:ff:ae:57:b5:b7:2d:b3:4d:08:
                    4f:0e:49:18:26:12:5e:64:1a:09:a3:d0:84:d4:5c:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:66:29:FB:2E:DD:90:C9:AA:63:2F:97:23:FD:3C:F1:70:1B:4D:31
            X509v3 Authority Key Identifier:
                keyid:8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:b1:ac:ed:91:ca:cd:d2:58:1b:4f:9c:12:40:a4:9c:77:3a:
         d9:cb:ed:c7:35:52:bd:f9:36:ed:f9:ed:85:e7:22:d9:d9:3c:
         9b:5a:81:32:98:e6:2a:6e:37:e3:82:0c:80:a7:ee:b2:ad:74:
         75:49:cc:be:15:d7:0b:d4:f3:29:02:bd:50:b4:b3:5b:29:6a:
         fb:79:04:5b:6f:b9:f8:32:3d:e3:0c:3e:b2:08:39:54:37:95:
         bd:ec:6c:ec:30:1b:34:39:5c:71:10:b3:fc:66:23:6b:c1:cb:
         d4:da:c6:9c:ca:be:9c:2a:43:3a:3e:79:3d:9b:30:69:41:8f:
         73:91:b4:9c:0f:6a:56:22:f5:6b:9e:2b:e8:71:45:dd:11:cc:
         c1:6a:ab:72:36:52:09:a8:8f:fe:b0:25:80:26:56:fc:0d:b9:
         fc:59:9d:61:fd:7c:12:b0:a6:5b:98:22:d5:ef:62:a7:67:45:
         a1:8f:7f:08:d4:90:9b:9e:08:1d:69:ce:13:1a:4a:49:d3:97:
         96:c3:aa:0e:07:6d:43:36:37:a9:83:e8:c9:3e:cc:3e:32:ac:
         d9:c3:bc:86:75:74:b6:cf:b0:32:5a:77:71:9c:ce:3f:92:c9:
         8a:cb:b3:44:bc:5b:5e:11:fc:e2:df:e7:0b:34:bc:ec:2f:55:
         b1:73:cd:be
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMM9+tnZczzqs0vK/yvhltaLlw5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE0N0JBNkEwMjhCQkRFQUU0QkQyQTRBODI5RjhDMUY4
NEY5MTMxRTAeFw0yNjAxMTAxNjI0MTJaFw0yNzAxMDkxNjI5MTJaMDMxMTAvBgNV
BAMTKEUzNjYyOUZCMkVERDkwQzlBQTYzMkY5NzIzRkQzQ0YxNzAxQjREMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9zjZQ76Xy0pftHqBz1jw4gA8c
ysR7MJdMpgU+3dy8mRdbqnQaOdRRjEEPm6uN0NgRGb5hxxhCtvFjUtnVI2MNeB+6
wrAzr6ZSpXf6QLfiX0K4eIH5otYEsGFAY4dspn6sDJAy0PusIDgqtYBNjTSvy4/z
ImUk6sila9dsKZ1mmKYfvs/aFuVc+d6yUXZZrx9qIR0oVX/C4zGy4+KHVxBvsst2
/cx70Ua/oy6YZ+EvRJA1WC9h8NzQes50KfooTDwgXUmUsK2fXzmJ1K5rR5YNO6aQ
x8JXb3lw4qQnpk8Q5nfRa0PSGv+uV7W3LbNNCE8OSRgmEl5kGgmj0ITUXJD3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU42Yp+y7dkMmqYy+XI/088XAbTTEwHwYDVR0j
BBgwFoAUike6agKLverkvSpKgp+MH4T5Ex4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC84QTQ3QkE2QTAyOEJCREVBRTRCRDJBNEE4MjlGOEMxRjg0RjkxMzFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBNDdCQTZBMDI4QkJERUFF
NEJEMkE0QTgyOUY4QzFGODRGOTEzMUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzQzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYq58jANBgkqhkiG9w0BAQsFAAOCAQEAerGs
7ZHKzdJYG0+cEkCknHc62cvtxzVSvfk27fntheci2dk8m1qBMpjmKm4344IMgKfu
sq10dUnMvhXXC9TzKQK9ULSzWylq+3kEW2+5+DI94ww+sgg5VDeVvexs7DAbNDlc
cRCz/GYja8HL1NrGnMq+nCpDOj55PZswaUGPc5G0nA9qViL1a54r6HFF3RHMwWqr
cjZSCaiP/rAlgCZW/A25/FmdYf18ErCmW5gi1e9ip2dFoY9/CNSQm54IHWnOExpK
SdOXlsOqDgdtQzY3qYPoyT7MPjKs2cO8hnV0ts+wMlp3cZzOP5LJisuzRLxbXhH8
4t/nCzS87C9VsXPNvg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:02:22 2026 by rpki-client