This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233392e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233392e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          AmTB/9CmytgXS/mB5YlttcGEjHj36RuANni7vcPXtbs=
Subject key identifier:   69:9C:ED:43:1E:55:7C:9E:A9:44:54:87:BB:53:12:97:C6:B1:06:CA
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       75C301F6DBA1BE3F2D44D13399BE0EE0D31BE1EA
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233392e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 13 Jan 2026 11:00:00 +0000
ROA not before:           Tue 13 Jan 2026 10:55:00 +0000
ROA not after:            Tue 12 Jan 2027 11:00:00 +0000
asID:                     28124
IP address blocks:        187.108.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c3:01:f6:db:a1:be:3f:2d:44:d1:33:99:be:0e:e0:d3:1b:e1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 13 10:55:00 2026 GMT
            Not After : Jan 12 11:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:3b:c7:97:c8:df:9f:9c:ab:2d:2c:9c:9c:
                    65:63:5e:23:f7:9c:88:23:4b:ae:60:fd:f0:9e:3c:
                    b7:53:b3:11:06:0a:a9:6c:ba:a1:4d:0c:66:f5:39:
                    72:7c:90:14:f9:c5:b3:29:9d:96:1a:03:6f:30:c9:
                    47:44:13:30:25:a8:88:68:f0:ef:3d:26:51:ac:49:
                    3b:a4:6f:7f:31:ed:2f:5b:a0:29:8e:ae:9e:9d:e5:
                    4d:af:39:c3:9c:96:1f:11:72:05:74:7c:ac:12:29:
                    35:ec:a6:65:60:32:81:13:ba:a2:bf:12:63:13:5c:
                    d9:cd:c1:99:05:65:9c:97:85:7c:40:6b:ff:19:25:
                    68:46:34:b7:0e:f1:33:e2:cc:9f:3c:f7:2e:1a:1b:
                    af:92:f3:84:e7:31:1d:bf:8d:ba:95:ba:e2:00:99:
                    8e:b7:67:42:b6:a6:ec:e6:7a:47:b8:5f:29:29:ff:
                    46:9f:f6:c0:c0:8d:35:8f:ac:b8:55:05:ce:5f:dd:
                    0d:a0:38:ad:8c:f4:89:7f:8e:d1:72:5d:ac:70:5a:
                    dc:fb:57:fe:a6:83:5c:56:fa:19:33:05:a4:56:ea:
                    c4:47:14:84:04:73:b4:22:5c:57:4d:1f:6f:b2:65:
                    e3:85:5f:b8:a2:59:00:96:64:cf:d9:a1:e7:db:42:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9C:ED:43:1E:55:7C:9E:A9:44:54:87:BB:53:12:97:C6:B1:06:CA
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233392e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:25:86:73:d7:74:db:c2:60:70:dc:6c:ac:5f:a8:21:b5:
         6e:d3:23:c5:32:5f:20:51:c5:28:3d:0e:7a:23:fa:e2:7e:51:
         dd:05:72:d7:88:97:12:88:b5:32:13:a0:59:84:a7:c4:62:d8:
         bd:34:cc:03:96:fe:2c:35:ef:58:72:e8:fa:c2:d1:81:4e:76:
         ee:dd:07:de:43:1b:a6:bd:87:df:41:99:15:b3:74:44:af:16:
         37:e4:33:b3:24:2c:4f:81:3e:52:5c:62:b5:0e:86:d7:a9:c5:
         90:1c:51:b7:e0:9a:84:60:cc:6f:7a:43:bc:2a:e3:a5:16:3a:
         d8:42:8c:3a:43:7d:2a:df:7f:ea:f3:6e:dd:19:4d:ab:66:00:
         f9:01:e9:b5:38:61:e0:a0:3d:26:f2:96:71:06:a7:8d:99:b0:
         f9:a1:56:55:35:a5:3f:47:02:83:f0:78:96:ab:42:fe:40:49:
         58:30:6b:56:b4:da:02:7f:89:7e:bd:dd:2c:b9:45:0d:3a:e9:
         54:63:c0:e5:31:b3:a9:4a:69:f3:5a:4d:43:ff:98:e4:cd:1f:
         35:14:a7:30:a9:46:69:d6:19:18:55:52:26:39:7f:08:c2:26:
         96:5b:e9:11:c5:d3:c5:56:21:19:fb:c8:5c:ce:04:69:00:f6:
         70:92:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----