This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3234203d3e20323732383531.roa
File:                     3138392e33382e31362e302f32322d3234203d3e20323732383531.roa (raw, json)
Hash identifier:          pwAFzey++bfdCAEqs6AwC1mB5SHNJ+K8kkP4Hz4x4Lk=
Subject key identifier:   C8:44:4E:22:37:A8:98:BF:E7:C9:3A:42:E2:0B:62:1C:1C:68:01:58
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       561CA4663987E576AEF9E9FC995C19172B61BAF1
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3234203d3e20323732383531.roa
Signing time:             Wed 10 Dec 2025 23:38:11 +0000
ROA not before:           Wed 10 Dec 2025 23:33:11 +0000
ROA not after:            Wed 09 Dec 2026 23:38:11 +0000
asID:                     272851
IP address blocks:        189.38.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 06:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1c:a4:66:39:87:e5:76:ae:f9:e9:fc:99:5c:19:17:2b:61:ba:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Dec 10 23:33:11 2025 GMT
            Not After : Dec  9 23:38:11 2026 GMT
        Subject: CN=C8444E2237A898BFE7C93A42E20B621C1C680158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:21:ef:ac:89:cf:4e:13:bd:20:7b:25:96:
                    48:55:30:4f:42:7a:a9:fd:7a:ba:a3:9d:eb:fd:66:
                    6b:40:b3:48:2a:e7:a1:f9:90:9f:e5:b2:86:f5:8d:
                    48:7b:34:66:5d:34:46:40:2d:fa:6b:54:c0:3f:5f:
                    2a:6a:5c:cf:1d:d8:36:3a:84:0c:13:92:40:cb:1b:
                    e1:42:c1:a2:c4:72:8c:fa:90:29:97:17:48:54:2c:
                    43:11:74:2a:4d:89:e5:63:67:13:e6:b0:c2:db:46:
                    38:45:0a:46:85:f6:5e:d4:75:a8:fa:d2:1d:64:33:
                    c3:2a:38:c4:ab:54:fc:b5:02:b8:77:9b:2c:51:19:
                    cc:37:3e:fc:9e:d9:3e:7c:a6:61:a1:c0:ce:23:4f:
                    ff:6f:c7:c4:5e:27:b0:b2:18:5a:ef:31:6a:73:05:
                    ec:38:4e:dd:74:9a:1f:c7:ee:bb:28:c5:35:87:2b:
                    8e:c9:7e:d1:5f:58:91:14:8a:5c:5a:ee:9b:1c:ad:
                    1c:99:b4:67:d6:f2:7e:98:a4:58:4b:a9:65:0f:8d:
                    e0:3c:05:49:42:35:94:33:8b:ff:6b:b3:09:69:d4:
                    b4:fe:0a:c7:e9:ca:ba:db:e2:b0:50:cc:e4:80:87:
                    25:66:e9:9e:a0:05:bd:50:24:f1:17:30:41:dc:9f:
                    d0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:44:4E:22:37:A8:98:BF:E7:C9:3A:42:E2:0B:62:1C:1C:68:01:58
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32322d3234203d3e20323732383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:fb:6a:5c:59:f8:fc:48:ae:0c:50:5e:25:50:c6:6d:18:10:
         e4:12:8c:09:b8:f7:af:e6:55:4d:b1:4d:ce:8b:98:86:7a:f1:
         6e:a6:cb:4a:4e:ed:32:18:5c:bd:43:a2:43:61:6e:aa:b0:fe:
         8d:10:7a:68:d1:fa:2b:81:b8:de:1b:6f:ec:46:ba:40:a0:60:
         74:da:38:ca:2a:0e:ef:52:64:61:86:de:df:6c:83:56:de:88:
         74:23:c2:e9:57:0d:74:ec:db:7b:87:26:8b:5e:1c:d1:d2:eb:
         11:c6:42:57:96:88:66:49:f9:96:91:9a:2d:45:78:33:53:83:
         c5:20:14:c3:29:d0:81:7b:77:9c:5d:01:71:97:a5:13:2e:ff:
         71:eb:f6:27:1f:b4:27:73:bf:c7:0e:10:71:94:72:18:11:b8:
         00:81:19:8b:9f:20:91:2f:e5:de:a0:4e:f9:2c:8b:58:95:06:
         89:61:b2:04:a0:98:1b:c5:6b:f5:12:4e:7d:90:7c:e3:58:f3:
         38:92:05:16:b0:6a:3a:93:5d:c1:56:17:76:22:74:87:62:cd:
         b2:09:d4:5b:81:a0:16:a7:8f:09:2d:01:fd:c9:26:a2:74:d8:
         24:eb:20:8d:c0:c6:ff:61:f2:7c:cf:2a:72:20:91:f3:cc:7b:
         a3:2b:a6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:25:25 2025 by rpki-client