This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa
File:                     3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa (raw, json)
Hash identifier:          sxe5yirDbez2iY1rLQASF5iHCTpgfZb8DExVYg49l64=
Subject key identifier:   0E:AB:E2:C0:07:54:E3:0F:CA:07:C8:16:8D:24:C3:2A:82:E1:90:5E
Certificate issuer:       /CN=ACEF8FA1F536657A209246B168B346C65044943D
Certificate serial:       40B91D327CF6164629B06D541F85C026A4B32355
Authority key identifier: AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa
Signing time:             Thu 20 Nov 2025 18:20:44 +0000
ROA not before:           Thu 20 Nov 2025 18:15:44 +0000
ROA not after:            Thu 19 Nov 2026 18:20:44 +0000
asID:                     266534
IP address blocks:        160.238.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.crl
                          rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 15:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b9:1d:32:7c:f6:16:46:29:b0:6d:54:1f:85:c0:26:a4:b3:23:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACEF8FA1F536657A209246B168B346C65044943D
        Validity
            Not Before: Nov 20 18:15:44 2025 GMT
            Not After : Nov 19 18:20:44 2026 GMT
        Subject: CN=0EABE2C00754E30FCA07C8168D24C32A82E1905E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:3e:ab:d9:41:69:f1:2a:2e:e9:21:b1:26:
                    0e:fe:30:a3:05:c8:fa:84:2b:a9:8b:3b:b1:5f:52:
                    0f:24:ff:d4:6a:0d:dc:79:84:9a:83:5a:47:e4:3e:
                    d4:9e:53:70:36:54:30:4d:34:fb:b7:29:8b:9d:ad:
                    7a:b3:c4:4e:f1:fe:62:ac:26:e2:95:f4:b2:6e:ce:
                    c8:d9:ed:28:b2:f0:f6:f6:28:9d:b8:75:44:5e:5f:
                    8f:9f:2b:28:f0:b0:ef:8f:eb:c2:10:f1:88:3d:ba:
                    e6:be:93:72:a0:52:45:3b:0b:82:27:b7:4e:e0:5b:
                    9f:d5:0e:72:98:0e:10:a1:46:69:25:5a:aa:5e:dd:
                    14:08:e5:92:1a:33:4c:23:87:f7:18:c8:37:cc:22:
                    2e:84:0b:5a:13:82:ac:37:ce:c0:56:99:8a:be:98:
                    38:18:74:75:e1:da:d6:86:91:c6:a3:d0:42:cc:59:
                    38:35:88:ad:c3:c2:37:37:bd:72:29:53:ea:82:50:
                    ea:d3:7c:29:2c:79:91:66:84:7c:c9:9b:aa:2a:a0:
                    63:f5:27:a0:3d:69:b0:db:39:e4:c3:39:0c:81:ec:
                    74:22:0d:da:f0:94:ff:e5:af:f3:9e:3b:9e:8f:e8:
                    1a:12:15:4b:2e:75:dd:6f:a0:09:bd:f6:a0:17:f3:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AB:E2:C0:07:54:E3:0F:CA:07:C8:16:8D:24:C3:2A:82:E1:90:5E
            X509v3 Authority Key Identifier:
                keyid:AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:8d:65:62:f8:ca:a4:c6:a7:55:52:67:47:2a:19:f0:96:32:
         cc:c9:96:49:5e:b7:34:68:44:97:28:c4:d8:55:f8:72:8c:a8:
         5a:70:f5:b9:69:33:2a:d4:ee:85:76:13:a4:70:b9:de:23:71:
         1d:7a:f5:37:81:0c:80:d2:00:b9:f8:92:c7:91:d8:e8:07:8a:
         00:89:ac:45:e4:2b:90:bb:28:b6:7d:61:d6:c2:30:ba:19:29:
         71:f3:c5:2a:42:7a:68:40:4b:b6:8e:c2:84:f1:e8:a1:3e:76:
         89:93:c7:14:b8:c2:69:39:b3:11:96:aa:7e:4f:b2:92:70:1f:
         7f:4c:d5:1e:d9:28:b7:9f:0f:32:c9:4e:ab:68:bf:29:b2:6b:
         aa:0f:e6:96:82:30:d9:72:81:59:cb:30:43:c8:fd:98:d8:27:
         c0:d0:9f:2a:36:21:9b:b3:4d:c1:ac:4c:f6:2a:c4:bb:bc:a3:
         4b:d6:35:31:a0:e0:c8:9c:84:09:5d:b0:49:b0:87:a3:f7:e8:
         ba:4d:f5:f7:28:2a:f6:ff:12:98:ef:03:30:43:72:aa:db:02:
         b8:58:f8:39:70:b5:fe:65:21:16:7d:24:12:a3:f6:c3:29:fc:
         b6:63:0f:cb:6a:a6:8e:e3:d1:d1:4f:f4:5b:3d:95:65:64:19:
         8a:cf:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:54:07 2025 by rpki-client