This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3232352e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          DYyqv83AJoiWHAMpR2U0Z8PCHojXnFgaXgU8wemW3WM=
Subject key identifier:   57:27:95:84:F6:98:C2:81:90:CD:5A:86:E8:D0:0A:F5:09:37:CD:63
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       530FF135FE970B2360B9B113635F8B4EE71CE0F5
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 13 Jan 2026 13:00:00 +0000
ROA not before:           Tue 13 Jan 2026 12:55:00 +0000
ROA not after:            Tue 12 Jan 2027 13:00:00 +0000
asID:                     28124
IP address blocks:        187.108.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0f:f1:35:fe:97:0b:23:60:b9:b1:13:63:5f:8b:4e:e7:1c:e0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 13 12:55:00 2026 GMT
            Not After : Jan 12 13:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:2b:d7:d3:0a:ad:d2:9e:9a:77:aa:83:cd:
                    d6:13:6d:6d:ba:4b:e2:6b:b4:8f:c8:88:45:4c:dc:
                    5e:e6:b5:c6:9e:d9:70:9d:6a:b5:3b:8a:ea:09:53:
                    76:65:5c:f3:6a:19:41:01:c3:35:69:42:f0:65:63:
                    93:de:b8:c4:eb:f1:d0:b2:cc:c3:a9:05:84:54:db:
                    2c:d2:55:08:6e:b8:79:ac:da:a5:dd:36:ad:5d:6a:
                    75:c6:76:55:1d:0e:90:8b:a8:95:75:10:00:1c:d9:
                    b5:91:a4:e4:50:bb:d0:50:00:cc:69:f2:3f:b3:a9:
                    6b:7f:61:e1:ca:21:0e:6a:1f:ed:f3:a3:d8:71:d9:
                    e4:ac:b1:34:73:3c:12:73:98:5c:e1:ea:60:88:d4:
                    93:89:4e:e6:89:9e:25:40:91:c2:1d:dd:ce:22:49:
                    f2:57:30:7e:9c:8d:14:f8:1e:63:3e:35:ee:a7:6c:
                    04:97:54:44:60:4e:6c:92:33:75:9d:a7:e4:5d:a3:
                    25:5d:cd:41:24:18:19:a9:2d:ac:b8:3f:d7:91:9e:
                    02:da:be:1f:69:45:99:d5:3a:fc:0e:8b:7e:c1:83:
                    58:77:d1:65:34:83:8a:e5:e6:94:f7:d0:92:f6:4d:
                    ea:26:5c:c4:af:03:a2:42:af:01:bc:04:40:3c:27:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:27:95:84:F6:98:C2:81:90:CD:5A:86:E8:D0:0A:F5:09:37:CD:63
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232352e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c6:07:c5:57:84:c9:77:2a:e4:b1:dc:aa:3a:2b:77:95:20:
         9d:c4:c9:c4:46:17:71:94:8e:a2:21:57:b8:9a:c9:3e:e1:6f:
         83:ef:f7:43:e7:e6:f7:8b:77:c0:52:ad:b9:a6:1c:32:c4:4b:
         06:98:1f:a7:b4:d2:57:61:a0:35:46:59:3e:2b:e4:44:05:04:
         b0:5d:59:ac:90:4d:f9:a1:27:2b:d4:7f:d4:e3:05:cb:9f:e7:
         78:c6:4f:7f:90:99:1e:e6:21:d5:d0:a0:ca:49:e3:9f:50:c0:
         a8:14:62:66:25:51:a0:81:0e:30:32:66:4d:44:a3:39:44:a8:
         3a:52:d8:e2:c6:0e:a2:54:59:34:5a:8c:a3:3b:ba:5e:f6:93:
         a1:7f:02:7f:fc:7d:0d:9d:7c:26:2b:49:9e:d9:4a:b8:68:aa:
         78:0d:16:78:56:14:68:bc:e5:7b:12:1e:97:0d:f2:bf:19:24:
         1d:9e:b3:59:3e:96:d1:e5:88:4f:d3:57:cb:db:87:f7:b3:13:
         24:5d:0d:ca:1a:5d:01:1a:d1:c4:49:5b:5d:2c:b9:0d:e3:b3:
         d1:f3:ba:70:df:75:66:63:a4:e4:b8:02:6d:ca:74:f8:8d:a7:
         be:b5:c3:32:9f:a9:8a:e6:48:0d:60:f9:cc:1e:a3:09:eb:a3:
         be:ec:6b:23
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUUw/xNf6XCyNgubETY1+LTucc4PUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNjAxMTMxMjU1MDBaFw0yNzAxMTIxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdDQjJCRDdEMzBBQUREMjlF
OUE3N0FBODNDREQ2MTM2RDZEQkE0QkUyNkJCNDhGQzg4ODQ1NENEQzVFRTZCNUM2
OUVEOTcwOUQ2QUI1M0I4QUVBMDk1Mzc2NjU1Q0YzNkExOTQxMDFDMzM1Njk0MkYw
NjU2MzkzREVCOEM0RUJGMUQwQjJDQ0MzQTkwNTg0NTREQjJDRDI1NTA4NkVCODc5
QUNEQUE1REQzNkFENUQ2QTc1QzY3NjU1MUQwRTkwOEJBODk1NzUxMDAwMUNEOUI1
OTFBNEU0NTBCQkQwNTAwMENDNjlGMjNGQjNBOTZCN0Y2MUUxQ0EyMTBFNkExRkVE
RjNBM0Q4NzFEOUU0QUNCMTM0NzMzQzEyNzM5ODVDRTFFQTYwODhENDkzODk0RUU2
ODk5RTI1NDA5MUMyMURERENFMjI0OUYyNTczMDdFOUM4RDE0RjgxRTYzM0UzNUVF
QTc2QzA0OTc1NDQ0NjA0RTZDOTIzMzc1OURBN0U0NURBMzI1NURDRDQxMjQxODE5
QTkyREFDQjgzRkQ3OTE5RTAyREFCRTFGNjk0NTk5RDUzQUZDMEU4QjdFQzE4MzU4
NzdEMTY1MzQ4MzhBRTVFNjk0RjdEMDkyRjY0REVBMjY1Q0M0QUYwM0EyNDJBRjAx
QkMwNDQwM0MyNzcyMzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt8sr19MKrdKemneqg83WE21tukvia7SPyIhFTNxe5rXGntlwnWq1
O4rqCVN2ZVzzahlBAcM1aULwZWOT3rjE6/HQsszDqQWEVNss0lUIbrh5rNql3Tat
XWp1xnZVHQ6Qi6iVdRAAHNm1kaTkULvQUADMafI/s6lrf2HhyiEOah/t86PYcdnk
rLE0czwSc5hc4epgiNSTiU7miZ4lQJHCHd3OIknyVzB+nI0U+B5jPjXup2wEl1RE
YE5skjN1nafkXaMlXc1BJBgZqS2suD/XkZ4C2r4faUWZ1Tr8Dot+wYNYd9FlNIOK
5eaU99CS9k3qJlzErwOiQq8BvARAPCdyOQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFcnlYT2mMKBkM1ahujQCvUJN81jMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8xLzMxMzgzNzJlMzEzMDM4MmUzMjMy
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzEzMjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u2zhMA0GCSqGSIb3DQEBCwUAA4IBAQBuxgfFV4TJdyrksdyqOit3lSCdxMnERhdx
lI6iIVe4msk+4W+D7/dD5+b3i3fAUq25phwyxEsGmB+ntNJXYaA1Rlk+K+REBQSw
XVmskE35oScr1H/U4wXLn+d4xk9/kJke5iHV0KDKSeOfUMCoFGJmJVGggQ4wMmZN
RKM5RKg6Utjixg6iVFk0WoyjO7pe9pOhfwJ//H0NnXwmK0me2Uq4aKp4DRZ4VhRo
vOV7Eh6XDfK/GSQdnrNZPpbR5YhP01fL24f3sxMkXQ3KGl0BGtHESVtdLLkN47PR
87pw33VmY6TkuAJtynT4jae+tcMyn6mK5kgNYPnMHqMJ66O+7Gsj
-----END CERTIFICATE-----