This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233362e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233362e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          ZjbkUj3eeQ5ZRjbmDhxu/6rFYIuQJRIsmxecN5CpEEA=
Subject key identifier:   79:29:79:2D:8B:D9:37:8B:85:D6:1F:A0:55:83:A6:22:C3:61:B1:1A
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       2486CBF7624F69E190C2973AE380BFB3119141F0
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233362e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 13 Jan 2026 13:00:01 +0000
ROA not before:           Tue 13 Jan 2026 12:55:01 +0000
ROA not after:            Tue 12 Jan 2027 13:00:01 +0000
asID:                     28124
IP address blocks:        187.108.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:86:cb:f7:62:4f:69:e1:90:c2:97:3a:e3:80:bf:b3:11:91:41:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 13 12:55:01 2026 GMT
            Not After : Jan 12 13:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:a2:23:d2:21:d9:4e:82:09:da:ec:7b:b7:
                    49:1f:a7:e9:5e:90:92:89:23:80:88:3d:5d:20:ef:
                    44:3c:ea:0f:40:1e:c2:d6:26:5f:59:1a:ca:87:bd:
                    e5:8e:55:dc:01:a6:6f:f6:f5:f8:2f:d6:d0:74:b1:
                    ab:93:35:a9:b9:3b:95:96:6a:c2:28:44:b1:15:66:
                    91:6c:f1:0f:0a:f5:3d:db:a6:23:86:7d:01:0a:4b:
                    5a:e5:d0:58:d9:b7:c3:d4:c5:44:37:c5:ae:74:65:
                    0b:4a:7b:f3:97:e6:41:a6:e2:f4:a9:5c:f9:d3:1c:
                    99:fa:59:c2:b6:f7:53:1f:13:81:74:12:be:9c:26:
                    41:53:55:0c:94:43:81:b5:25:c0:76:c1:af:05:b2:
                    71:01:8d:82:be:bb:d4:fa:2b:ef:31:7a:c3:2e:66:
                    f1:2a:e7:f4:6d:e2:76:43:d8:95:bf:49:dd:42:8c:
                    64:f3:2a:8d:6e:e5:78:4d:36:dd:42:78:b4:91:b9:
                    f7:50:1e:e4:9e:86:07:2c:0e:05:18:05:e1:92:31:
                    33:50:3f:80:a8:e1:7b:c6:3b:98:f0:5c:bd:f7:d5:
                    4d:51:b1:c2:2d:c0:29:b7:62:7d:60:4f:1c:ea:11:
                    8c:f8:aa:e4:43:af:42:8f:54:01:28:6c:34:ee:40:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:29:79:2D:8B:D9:37:8B:85:D6:1F:A0:55:83:A6:22:C3:61:B1:1A
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233362e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:42:b1:16:22:f7:ea:eb:94:cc:57:69:ec:ca:0f:bd:81:
         be:85:62:eb:13:b2:06:f9:b8:bf:08:da:32:28:b2:f8:e3:26:
         7a:42:5e:96:b3:96:8b:be:b9:28:1f:01:3b:fb:a5:27:15:65:
         c3:2c:c7:de:bf:6e:73:5e:ab:5f:42:d0:6a:f0:fc:18:0f:4c:
         06:d0:98:70:86:b2:e5:d6:11:1a:a9:b4:a7:c0:a2:26:5f:1c:
         31:05:24:d8:f7:b0:c9:b4:09:01:4a:95:c8:b4:87:ac:49:24:
         d9:4d:4d:8b:df:16:57:92:07:64:71:6b:da:cc:f2:34:99:de:
         c8:a9:a3:80:da:7c:c4:a7:33:dd:0c:75:f0:c1:3e:64:a4:2e:
         bd:54:ff:a1:cf:ea:df:b1:fa:07:7f:33:17:03:e2:a1:c7:2d:
         25:a3:fb:5d:1f:71:b6:bd:ad:42:10:00:44:ac:90:5a:a3:08:
         6f:b8:22:97:f3:cd:2a:35:07:e3:8f:e9:2a:73:d2:2b:e8:31:
         4d:2e:50:43:e5:cd:6f:9e:67:1f:37:95:81:b0:f2:a9:1c:96:
         49:23:ed:47:d3:98:a8:1a:5e:6a:d7:3e:1e:7d:af:48:6f:df:
         c1:13:88:ae:5d:21:5c:43:c7:bb:d7:87:54:6a:fe:27:60:92:
         5e:ae:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----