This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa
File:                     3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa (raw, json)
Hash identifier:          4RCRccMKJpeLcuKJMr0XTLAodZyVSoFFQcjV0OZaIfU=
Subject key identifier:   AC:9E:50:3E:0A:80:3F:E4:A8:28:80:E1:E1:43:E8:BE:85:D8:18:AD
Certificate issuer:       /CN=50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328
Certificate serial:       271CD802E4F2981E58AE6377F3DA67105EE3B308
Authority key identifier: 50:DD:B4:AD:4C:AE:8B:E9:D8:76:B4:6C:EE:A0:FD:F7:71:90:03:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa
Signing time:             Wed 21 Jan 2026 19:46:49 +0000
ROA not before:           Wed 21 Jan 2026 19:41:49 +0000
ROA not after:            Wed 20 Jan 2027 19:46:49 +0000
asID:                     262355
IP address blocks:        186.195.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1c:d8:02:e4:f2:98:1e:58:ae:63:77:f3:da:67:10:5e:e3:b3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328
        Validity
            Not Before: Jan 21 19:41:49 2026 GMT
            Not After : Jan 20 19:46:49 2027 GMT
        Subject: CN=AC9E503E0A803FE4A82880E1E143E8BE85D818AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:e8:94:1a:9c:29:8f:68:44:12:2a:22:3a:
                    9e:68:fa:78:c7:1f:87:e5:8b:97:4d:cf:46:eb:3b:
                    40:0b:78:96:c1:b5:62:46:08:e7:a0:dc:d7:25:ce:
                    90:3c:25:49:6d:92:d5:dc:00:70:b9:3b:d7:aa:36:
                    6a:25:ec:10:bd:d4:da:70:a3:40:1e:c5:79:8b:48:
                    d3:1a:95:4e:5d:8c:cf:5f:b1:4b:47:49:76:cf:11:
                    8d:8c:69:d5:fc:0b:2b:24:3e:02:e1:09:d5:94:1a:
                    b3:94:26:09:0b:77:a3:b6:0a:1a:1c:96:aa:89:6c:
                    9a:b3:8e:e3:65:cd:99:3a:81:9b:ca:3a:cb:a4:33:
                    8a:ba:c8:d6:14:6a:2b:6a:5f:e0:ed:d7:c9:c9:a9:
                    71:29:09:ec:67:d9:df:bf:52:b3:ed:c9:d1:d0:3d:
                    64:1b:1a:02:5a:29:54:ab:29:28:70:9d:cf:bd:21:
                    cd:47:50:c9:f1:06:66:0c:cc:92:88:8c:c5:43:c6:
                    ae:b6:4c:d7:49:38:be:ce:2a:35:de:ab:01:18:46:
                    c4:ac:08:36:3d:56:a3:e9:09:c0:78:66:6e:05:91:
                    62:40:54:c0:c7:6c:9f:3c:4c:e1:96:aa:ee:fa:6e:
                    d7:63:f9:b1:e7:a6:04:12:2d:cc:0d:91:0a:18:63:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9E:50:3E:0A:80:3F:E4:A8:28:80:E1:E1:43:E8:BE:85:D8:18:AD
            X509v3 Authority Key Identifier:
                keyid:50:DD:B4:AD:4C:AE:8B:E9:D8:76:B4:6C:EE:A0:FD:F7:71:90:03:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50DDB4AD4CAE8BE9D876B46CEEA0FDF771900328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:96:e1:0c:a2:c7:b9:1d:4e:31:bc:44:57:af:e6:12:9d:
         76:6b:42:19:83:51:ab:85:b0:21:f5:28:00:bd:33:08:65:f0:
         27:0f:37:a7:15:83:78:39:49:99:6e:bf:86:3a:41:44:5b:46:
         85:1e:3a:47:87:42:1c:ac:f3:4d:a1:c1:25:10:ce:3d:ab:86:
         a6:be:48:f1:02:7e:58:6e:ee:df:83:dd:85:3a:89:16:34:a5:
         9f:24:52:4d:2a:79:ae:0e:1d:b8:fe:87:6d:92:e3:5c:aa:09:
         4c:15:4d:fa:7a:6e:0f:c7:b2:44:46:43:b1:2d:f6:f1:3c:b0:
         b8:2b:ff:32:c8:7e:56:4d:dd:99:41:90:59:10:4b:1e:10:80:
         31:1c:d6:fc:0c:54:1e:81:27:b4:64:fb:28:85:ac:8e:8a:8c:
         e8:0e:3f:65:b9:10:0a:b6:a6:00:11:b3:72:90:15:1c:b9:2e:
         67:3d:db:98:16:45:d3:a4:24:23:52:65:b8:99:90:a3:87:7a:
         85:0f:c3:de:51:24:fc:8d:fc:4d:72:1c:77:d9:fa:57:4c:11:
         92:f9:fa:99:33:0b:0c:9e:a6:c6:d4:a1:d1:67:15:fe:5b:b3:
         e9:b5:0f:29:3f:bf:c9:83:cf:22:94:d9:1d:66:01:5c:da:77:
         2f:ae:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:24:11 2026 by rpki-client