This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa
File:                     3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa (raw, json)
Hash identifier:          KRQDYuIfMd1BvtJG+dmZ1ZX83KY4bWrSyEv+UVMNFCY=
Subject key identifier:   85:65:C5:E1:FE:73:7D:03:07:CD:33:44:DD:A4:C5:30:51:D7:37:12
Certificate issuer:       /CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
Certificate serial:       6C4974EEC619E3DB6676894010A2C94255C8D782
Authority key identifier: EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa
Signing time:             Mon 29 Dec 2025 17:51:07 +0000
ROA not before:           Mon 29 Dec 2025 17:46:07 +0000
ROA not after:            Mon 28 Dec 2026 17:51:07 +0000
asID:                     53123
IP address blocks:        187.111.192.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl
                          rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:49:74:ee:c6:19:e3:db:66:76:89:40:10:a2:c9:42:55:c8:d7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
        Validity
            Not Before: Dec 29 17:46:07 2025 GMT
            Not After : Dec 28 17:51:07 2026 GMT
        Subject: CN=8565C5E1FE737D0307CD3344DDA4C53051D73712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:0a:18:39:10:7b:bd:62:49:a4:92:dc:6c:
                    af:5d:85:50:2c:69:42:dd:11:b2:b7:42:0e:ec:a4:
                    a1:ee:ba:b1:2e:f6:68:ea:58:ff:f8:96:9e:a7:c9:
                    fc:3d:1d:61:a8:f5:f2:5d:ff:0b:55:77:c3:d8:a6:
                    7f:75:3a:e0:4d:3c:80:1d:91:80:a7:c0:f4:3a:49:
                    b2:a3:ff:8c:a5:b5:7e:b4:8e:7e:6e:21:dc:8f:31:
                    82:e7:be:19:0d:9b:d6:38:44:ac:db:9f:3a:53:ce:
                    4c:dc:fb:c4:34:c1:a0:b7:cd:67:88:ed:3f:fc:fb:
                    48:60:b8:04:7b:42:85:52:d7:bc:39:df:c8:8f:db:
                    38:1c:60:f0:6a:56:d0:39:f7:07:d8:56:8c:59:0e:
                    85:bd:78:85:ce:86:06:01:87:95:95:fa:e2:b6:07:
                    3e:16:d1:09:4d:e2:d9:0e:14:25:86:ba:a6:c7:32:
                    c7:7d:75:3e:cb:93:57:d8:b1:36:a6:5f:96:63:91:
                    75:9b:3c:15:9e:4f:9a:65:2f:94:f8:bd:29:b4:b3:
                    bb:30:ae:0c:37:3b:17:9b:72:da:83:a1:d5:7b:45:
                    f6:f9:a3:04:8b:24:7b:b6:67:47:c2:ca:0a:07:67:
                    f1:7f:79:e6:91:f7:9e:7d:99:48:d6:91:e5:8b:ab:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:65:C5:E1:FE:73:7D:03:07:CD:33:44:DD:A4:C5:30:51:D7:37:12
            X509v3 Authority Key Identifier:
                keyid:EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:24:1d:69:31:5e:78:85:dc:fe:43:27:d2:56:76:52:70:8b:
         d3:cc:dc:7c:da:cc:35:ef:29:40:0a:9a:d0:2b:cc:dd:9f:54:
         ce:4c:cc:a4:cd:c4:a6:a0:6d:4d:8a:67:8e:59:45:97:ad:79:
         ce:36:b6:08:fe:9b:9d:09:6c:c4:89:66:c2:ed:d3:42:4c:da:
         4a:e5:41:b1:43:00:b0:c2:39:28:85:4b:77:f0:bc:04:c5:48:
         fa:4c:10:a8:85:5e:72:02:d4:fe:b6:8b:41:90:28:3e:3b:2b:
         3e:97:9d:0e:bb:e7:61:2e:69:59:e9:1d:d7:10:e7:6f:7a:3a:
         af:c0:b9:d5:bc:02:25:73:3d:55:76:8c:35:10:e5:59:6b:9b:
         1d:f8:19:42:72:21:b9:12:d3:7c:df:cf:1f:e4:b6:c0:75:a3:
         b1:c7:1d:d8:51:f6:f5:e8:bb:77:3d:f7:18:7f:f9:97:04:c7:
         27:e9:3b:4b:52:3a:a3:40:a8:bb:60:ff:a9:e6:8c:cb:20:ed:
         cf:b7:2d:9d:93:3b:03:cf:b5:0b:db:ad:30:63:ae:a4:6c:6b:
         ae:c4:ab:3b:a6:7a:09:c0:42:5b:2a:13:43:db:d8:a6:66:2d:
         ae:75:72:de:d7:d2:45:1d:39:5a:1c:67:95:90:9e:97:4c:4c:
         02:78:1e:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbEl07sYZ49tmdolAEKLJQlXI14IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJDNThBRThCQUZFREEwQkI3MUZDNEU2NDUxOUY3NTZF
MUZFNzE5MzAeFw0yNTEyMjkxNzQ2MDdaFw0yNjEyMjgxNzUxMDdaMDMxMTAvBgNV
BAMTKDg1NjVDNUUxRkU3MzdEMDMwN0NEMzM0NEREQTRDNTMwNTFENzM3MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCVAoYORB7vWJJpJLcbK9dhVAs
aULdEbK3Qg7spKHuurEu9mjqWP/4lp6nyfw9HWGo9fJd/wtVd8PYpn91OuBNPIAd
kYCnwPQ6SbKj/4yltX60jn5uIdyPMYLnvhkNm9Y4RKzbnzpTzkzc+8Q0waC3zWeI
7T/8+0hguAR7QoVS17w538iP2zgcYPBqVtA59wfYVoxZDoW9eIXOhgYBh5WV+uK2
Bz4W0QlN4tkOFCWGuqbHMsd9dT7Lk1fYsTamX5ZjkXWbPBWeT5plL5T4vSm0s7sw
rgw3OxebctqDodV7Rfb5owSLJHu2Z0fCygoHZ/F/eeaR9559mUjWkeWLq8ADAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhWXF4f5zfQMHzTNE3aTFMFHXNxIwHwYDVR0j
BBgwFoAU68WK6Lr+2gu3H8TmRRn3VuH+cZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1VhQjJYcjduWFBSckhZRUZ1NXd3QlZuWDJ0d0M4a2RYVDg2aHVVZmRV
Z3gvMC9FQkM1OEFFOEJBRkVEQTBCQjcxRkM0RTY0NTE5Rjc1NkUxRkU3MTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCQzU4QUU4QkFGRURBMEJC
NzFGQzRFNjQ1MTlGNzU2RTFGRTcxOTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dVYUIyWHI3blhQUnJIWUVGdTV3d0JWblgydHdDOGtkWFQ4Nmh1VWZkVWd4LzAv
MzEzODM3MmUzMTMxMzEyZTMxMzkzMjJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDM1
MzMzMTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO7b8AwDQYJKoZIhvcNAQELBQADggEBAIEkHWkx
XniF3P5DJ9JWdlJwi9PM3HzazDXvKUAKmtArzN2fVM5MzKTNxKagbU2KZ45ZRZet
ec42tgj+m50JbMSJZsLt00JM2krlQbFDALDCOSiFS3fwvATFSPpMEKiFXnIC1P62
i0GQKD47Kz6XnQ6752EuaVnpHdcQ5296Oq/AudW8AiVzPVV2jDUQ5Vlrmx34GUJy
IbkS03zfzx/ktsB1o7HHHdhR9vXou3c99xh/+ZcExyfpO0tSOqNAqLtg/6nmjMsg
7c+3LZ2TOwPPtQvbrTBjrqRsa67EqzumegnAQlsqE0Pb2KZmLa51ct7X0kUdOVoc
Z5WQnpdMTAJ4Hkw=
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:48:21 2026 by rpki-client