This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233332e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233332e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          bm1x7DIixVrLureaBNVRhsxTG337u5v3pccK4XT7/wU=
Subject key identifier:   22:A4:B5:D2:5B:1F:B1:2D:B8:34:EF:D6:14:DA:7C:BA:40:4D:28:66
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       60F6529D50A50E34C3CC386E6618C0E2D7C41804
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233332e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 13 Jan 2026 13:00:02 +0000
ROA not before:           Tue 13 Jan 2026 12:55:02 +0000
ROA not after:            Tue 12 Jan 2027 13:00:02 +0000
asID:                     28124
IP address blocks:        187.108.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f6:52:9d:50:a5:0e:34:c3:cc:38:6e:66:18:c0:e2:d7:c4:18:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 13 12:55:02 2026 GMT
            Not After : Jan 12 13:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:5c:a5:b4:36:cd:19:b1:5d:88:e2:4d:89:
                    23:8e:7b:aa:81:62:ff:af:27:6a:53:41:93:36:3f:
                    1b:65:e2:14:87:82:45:59:45:25:32:37:a9:61:7f:
                    e4:af:33:c2:ba:04:ac:4a:0b:47:e5:32:e4:a2:fa:
                    70:26:e3:ce:92:3e:84:f5:f5:30:de:30:a7:75:48:
                    8d:59:3f:47:27:85:91:e3:22:31:a5:f0:be:6d:40:
                    7b:91:a3:66:84:4b:41:61:be:94:36:4e:06:c6:f6:
                    f5:6f:8e:aa:13:4a:bc:0a:7b:b1:ea:37:00:ac:92:
                    0d:82:51:f2:95:c2:82:b1:5b:f0:e3:39:66:f8:52:
                    dd:07:10:be:83:3e:95:ea:4a:ee:1a:59:35:88:78:
                    a6:1b:b7:3f:7d:a0:94:4b:aa:49:aa:1f:04:ef:df:
                    d9:68:ab:53:61:aa:0c:e0:4e:58:44:0e:bf:2e:13:
                    82:f8:d8:8b:f0:10:09:b4:16:f7:d1:5a:f3:b8:12:
                    8e:63:43:5f:0f:de:f9:ca:02:1e:bb:95:77:f8:8d:
                    4d:4a:fa:de:e5:18:4b:64:65:ef:2c:91:56:79:97:
                    10:ef:15:bd:03:61:37:d3:e0:75:13:ae:21:e6:6e:
                    45:83:0c:c7:ed:27:c2:79:63:81:5c:1c:f3:6e:12:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A4:B5:D2:5B:1F:B1:2D:B8:34:EF:D6:14:DA:7C:BA:40:4D:28:66
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233332e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:35:a1:9c:61:ba:02:b3:40:f1:e6:40:bf:c6:9a:fb:0f:f3:
         ba:ea:9c:2c:79:25:6a:ed:f6:af:e9:5d:75:c3:bf:d6:03:4f:
         33:78:d1:3b:d0:f9:75:2a:5d:92:ac:e2:c6:0b:2e:7f:63:f8:
         74:80:96:57:0f:50:47:3c:8e:41:d6:7a:10:3d:00:07:d9:c2:
         52:48:4c:96:f3:e4:fb:22:fd:7b:4c:47:c8:d2:05:0d:1d:4b:
         77:25:5f:04:f3:a4:95:63:1f:bf:6b:52:3d:7c:ea:c8:1a:98:
         13:7b:55:8a:94:f5:50:e1:17:81:a6:87:77:18:f5:72:22:31:
         f8:12:08:68:14:14:df:18:aa:c4:8a:11:7a:9b:4e:dc:0f:67:
         3e:fa:8a:9e:bb:98:c1:8e:74:e9:fd:01:5f:71:8f:5c:60:60:
         41:75:81:f0:af:ae:cd:db:67:24:6a:56:d7:6c:50:13:d5:b9:
         5e:24:fa:ed:5f:3b:ec:73:57:39:ba:f0:2f:a4:28:90:38:e8:
         64:5c:b9:bc:1f:17:f8:67:03:c7:0e:69:de:02:a0:8e:61:ce:
         e5:75:07:fd:f5:9d:e5:6c:ef:48:38:e7:df:96:da:3c:3c:a0:
         a3:91:bb:fc:89:88:2d:78:71:ef:c8:df:34:78:56:84:a9:9b:
         f4:aa:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----