This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33362e302f32332d3234203d3e203238323233.roa
File:                     3138392e3132362e33362e302f32332d3234203d3e203238323233.roa (raw, json)
Hash identifier:          VgRjulSQ5a8uzzoQVbpxMk+YzsSSNPoO6uQSwBYnhAI=
Subject key identifier:   14:95:00:49:41:87:51:14:36:90:F0:6E:05:81:CF:BE:88:90:AA:54
Certificate issuer:       /CN=27E1FC1146B53B145E431E07B4ED589B8C84542B
Certificate serial:       7DD4B65CEFF1725B3625CF52EEA028414C1BC746
Authority key identifier: 27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33362e302f32332d3234203d3e203238323233.roa
Signing time:             Fri 21 Nov 2025 13:20:53 +0000
ROA not before:           Fri 21 Nov 2025 13:15:53 +0000
ROA not after:            Fri 20 Nov 2026 13:20:53 +0000
asID:                     28223
IP address blocks:        189.126.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.crl
                          rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 02:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d4:b6:5c:ef:f1:72:5b:36:25:cf:52:ee:a0:28:41:4c:1b:c7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E1FC1146B53B145E431E07B4ED589B8C84542B
        Validity
            Not Before: Nov 21 13:15:53 2025 GMT
            Not After : Nov 20 13:20:53 2026 GMT
        Subject: CN=14950049418751143690F06E0581CFBE8890AA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:92:d7:b1:a7:59:26:a3:e1:41:b4:45:9e:
                    f0:94:ee:58:2c:8d:f8:f3:78:7c:0b:ae:8a:86:91:
                    63:b6:e8:f7:36:89:07:d0:f4:97:d8:74:34:31:f8:
                    0e:08:6a:1a:8e:cf:a1:93:f2:50:e6:87:dc:40:db:
                    8b:a1:d1:f9:92:e7:16:92:5f:12:56:3e:be:56:91:
                    ec:bb:b4:fe:71:4e:a0:32:65:36:95:cd:e0:be:fc:
                    51:fa:76:b4:f0:f8:f4:47:8d:f2:31:42:65:c0:6d:
                    35:c0:59:e7:9f:fc:3b:13:73:80:38:08:d9:fc:bc:
                    88:62:97:ce:72:ec:64:fa:ba:ed:4d:c5:95:3a:2a:
                    3f:9f:50:eb:a3:52:66:1d:06:fe:2a:cd:cd:17:86:
                    10:2c:b0:9d:09:1b:7a:6e:14:99:48:79:fd:6e:c3:
                    12:a2:0a:9a:7d:39:e0:ea:83:e7:8f:12:82:08:bb:
                    41:38:0b:be:5b:f9:e8:34:90:9e:33:35:7d:c4:1b:
                    55:46:bc:45:74:e3:7f:ee:de:8f:86:3d:e2:7c:ed:
                    e2:22:42:69:2a:ed:c8:95:49:1b:60:e0:bf:c0:a2:
                    f2:e7:f0:d6:20:fe:2e:c7:0e:e8:3d:46:52:a5:e9:
                    f7:a6:48:6a:2b:74:52:8e:96:ac:09:c6:f0:02:cb:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:00:49:41:87:51:14:36:90:F0:6E:05:81:CF:BE:88:90:AA:54
            X509v3 Authority Key Identifier:
                keyid:27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33362e302f32332d3234203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:19:39:69:7a:89:fc:01:17:df:99:62:79:99:0a:4c:ac:19:
         86:fe:37:9b:9c:0f:e5:e8:03:1f:e7:46:13:d4:65:eb:f4:1e:
         87:8e:51:34:2e:4c:20:99:6d:61:49:04:27:6a:ad:d2:28:ac:
         43:a5:3b:bf:e2:fb:92:4f:89:d6:03:3d:12:40:c7:5b:12:4c:
         9b:35:02:d2:ee:71:54:e9:e4:55:04:7e:b6:4d:98:cb:d1:6e:
         74:60:08:4d:67:6d:9d:a4:19:9b:fe:15:88:19:75:75:b5:d9:
         19:35:ca:d6:c8:03:d6:5e:e7:d2:e6:bd:f4:e2:aa:10:b4:b3:
         af:7d:82:6b:60:3f:f7:05:ba:c9:c5:66:ce:9a:df:95:f2:d0:
         4b:0c:b8:d1:34:d8:bd:8d:0b:18:7b:62:41:6b:b9:44:70:63:
         e5:60:6a:0e:4c:71:98:f5:3f:16:45:7f:02:ab:5f:72:f2:bb:
         2b:f7:fa:03:d2:f6:5c:29:36:e9:65:b6:91:30:6d:03:24:f8:
         a2:34:53:07:51:4e:ff:5e:c2:92:2e:3a:a5:ab:91:2b:94:d2:
         5c:aa:b6:c3:08:39:3d:6a:e6:3e:e4:c2:7b:68:6e:ae:6f:76:
         1e:ea:09:44:13:ac:b1:b6:9f:16:8f:38:da:e4:5c:63:f0:b7:
         d8:b4:f9:f5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfdS2XO/xcls2Jc9S7qAoQUwbx0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdFMUZDMTE0NkI1M0IxNDVFNDMxRTA3QjRFRDU4OUI4
Qzg0NTQyQjAeFw0yNTExMjExMzE1NTNaFw0yNjExMjAxMzIwNTNaMDMxMTAvBgNV
BAMTKDE0OTUwMDQ5NDE4NzUxMTQzNjkwRjA2RTA1ODFDRkJFODg5MEFBNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLJLXsadZJqPhQbRFnvCU7lgs
jfjzeHwLroqGkWO26Pc2iQfQ9JfYdDQx+A4IahqOz6GT8lDmh9xA24uh0fmS5xaS
XxJWPr5Wkey7tP5xTqAyZTaVzeC+/FH6drTw+PRHjfIxQmXAbTXAWeef/DsTc4A4
CNn8vIhil85y7GT6uu1NxZU6Kj+fUOujUmYdBv4qzc0XhhAssJ0JG3puFJlIef1u
wxKiCpp9OeDqg+ePEoIIu0E4C75b+eg0kJ4zNX3EG1VGvEV043/u3o+GPeJ87eIi
Qmkq7ciVSRtg4L/AovLn8NYg/i7HDug9RlKl6femSGordFKOlqwJxvACyz/pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFJUASUGHURQ2kPBuBYHPvoiQqlQwHwYDVR0j
BBgwFoAUJ+H8EUa1OxReQx4HtO1Ym4yEVCswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhSaXJFejVFWU42UjFMZzZtblVpSHNKVWhBUlc3bnRIaXFGSmc2UEN4
c0ovMC8yN0UxRkMxMTQ2QjUzQjE0NUU0MzFFMDdCNEVENTg5QjhDODQ1NDJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3RTFGQzExNDZCNTNCMTQ1
RTQzMUUwN0I0RUQ1ODlCOEM4NDU0MkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIUmlyRXo1RVlONlIxTGc2bW5VaUhzSlVoQVJXN250SGlxRkpnNlBDeHNKLzAv
MzEzODM5MmUzMTMyMzYyZTMzMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvX4kMA0GCSqGSIb3DQEBCwUAA4IBAQBWGTlpeon8
ARffmWJ5mQpMrBmG/jebnA/l6AMf50YT1GXr9B6HjlE0LkwgmW1hSQQnaq3SKKxD
pTu/4vuST4nWAz0SQMdbEkybNQLS7nFU6eRVBH62TZjL0W50YAhNZ22dpBmb/hWI
GXV1tdkZNcrWyAPWXufS5r304qoQtLOvfYJrYD/3BbrJxWbOmt+V8tBLDLjRNNi9
jQsYe2JBa7lEcGPlYGoOTHGY9T8WRX8Cq19y8rsr9/oD0vZcKTbpZbaRMG0DJPii
NFMHUU7/XsKSLjqlq5ErlNJcqrbDCDk9auY+5MJ7aG6ub3Ye6glEE6yxtp8Wjzja
5Fxj8LfYtPn1
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:08 2025 by rpki-client