This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232372e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3232372e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          aPpyAc02Qfdtez//URLDqzKqAQrhi0t4dQYZh6pm4lE=
Subject key identifier:   DA:2E:C5:0E:A5:AF:DB:D9:FF:D5:CA:41:5A:81:79:CD:E2:BF:CA:53
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       20323712642A60694E9EFDDFAE6429D224A1E74D
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232372e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 13 Jan 2026 13:00:00 +0000
ROA not before:           Tue 13 Jan 2026 12:55:00 +0000
ROA not after:            Tue 12 Jan 2027 13:00:00 +0000
asID:                     28124
IP address blocks:        187.108.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:32:37:12:64:2a:60:69:4e:9e:fd:df:ae:64:29:d2:24:a1:e7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 13 12:55:00 2026 GMT
            Not After : Jan 12 13:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:b8:1c:af:42:85:c2:6a:b3:5d:dc:8a:86:
                    4c:c7:c0:f8:f6:d3:9c:46:40:7e:3d:ef:d8:5a:7c:
                    fb:cd:55:6f:bc:bd:77:e4:80:c7:0e:c6:21:9a:ff:
                    5d:2e:2c:13:04:8d:4a:23:ee:e2:e1:da:e7:d6:ef:
                    ed:e5:c4:62:ca:a0:cb:44:af:0f:08:41:55:5b:6f:
                    ad:b1:af:ec:6f:db:7e:43:98:c3:86:2b:bd:ea:f9:
                    23:63:d5:82:62:3b:4d:42:50:44:79:de:1f:7c:03:
                    ef:64:a3:b0:c9:97:42:d4:68:f7:8b:ea:25:d6:bc:
                    41:8c:68:99:d6:89:81:84:e3:04:17:44:9c:96:34:
                    76:8e:9b:d5:47:a8:aa:f0:e4:81:a1:48:e1:36:32:
                    af:10:9e:fc:75:b7:b7:67:32:af:dd:e5:79:f3:41:
                    fb:25:e4:5e:d6:f2:5c:e5:b2:8e:ec:ca:56:d0:18:
                    a4:df:da:67:1f:c5:c9:bc:53:10:2b:a4:64:55:64:
                    03:ff:7f:c8:85:61:a6:ab:8d:aa:03:ef:07:02:c0:
                    08:bf:e3:5f:67:5c:e5:70:f2:03:e1:cb:0c:ac:d3:
                    6d:9e:78:06:49:b5:bb:a8:28:d8:24:bf:ab:fb:62:
                    e4:16:0a:7b:b2:e2:58:c9:f0:bf:56:46:da:44:0a:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2E:C5:0E:A5:AF:DB:D9:FF:D5:CA:41:5A:81:79:CD:E2:BF:CA:53
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232372e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b5:b1:4d:36:7f:3f:4d:4a:62:e8:f4:5c:a8:53:65:23:74:
         fe:6a:77:a4:7f:eb:ec:bd:e4:59:24:d4:98:b9:61:2f:29:6a:
         18:e6:89:12:05:50:78:d3:26:50:57:8d:d2:e3:fd:bf:cc:d0:
         97:d6:20:6a:17:9d:83:ef:26:45:33:01:45:2f:c2:fb:54:fb:
         4b:b3:a8:7a:c1:00:43:0d:fc:fb:66:45:08:4f:dc:19:dd:43:
         90:75:79:9f:a9:21:38:a4:d2:5a:e2:af:99:3d:b4:51:84:93:
         cc:ce:7c:5d:58:5f:4e:84:79:48:cf:73:c6:f0:36:93:9a:c0:
         69:24:d8:d7:43:09:55:4c:37:8b:c9:75:2c:71:c7:46:d2:7b:
         23:19:a8:38:48:00:f6:0b:f6:a6:8b:94:41:3b:75:fb:6a:4f:
         6c:ae:7a:05:68:ae:1d:63:a1:27:54:e6:1b:eb:f3:04:09:4a:
         c8:c4:17:60:e6:56:f5:e0:09:6e:41:59:09:38:59:15:27:c3:
         f1:a8:de:01:42:93:7a:eb:58:76:d6:97:7b:3f:77:98:42:7e:
         5b:b6:ed:2b:3e:78:8a:b5:03:c4:a8:c7:4d:5e:c5:50:ff:64:
         9f:d3:ee:69:86:96:40:63:2d:da:39:95:bc:5c:f4:95:a6:a6:
         0e:d9:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----