This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa
File:                     3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa (raw, json)
Hash identifier:          TK9cjxXYHw51RJM53XebKBjhILyTSyilBqhJXvOqhKQ=
Subject key identifier:   A4:A7:7A:69:AA:BC:E0:1A:6B:5B:8A:D3:56:96:BC:7D:1E:B0:01:71
Certificate issuer:       /CN=0B87152C81608FF3E967A3FEF41277E924CC8816
Certificate serial:       7A94A674F6AE051B2BF4C3704DA7E9E31CF1E429
Authority key identifier: 0B:87:15:2C:81:60:8F:F3:E9:67:A3:FE:F4:12:77:E9:24:CC:88:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa
Signing time:             Sat 13 Dec 2025 00:41:37 +0000
ROA not before:           Sat 13 Dec 2025 00:36:37 +0000
ROA not after:            Sat 12 Dec 2026 00:41:37 +0000
asID:                     270398
IP address blocks:        189.126.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.crl
                          rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 06:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:94:a6:74:f6:ae:05:1b:2b:f4:c3:70:4d:a7:e9:e3:1c:f1:e4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B87152C81608FF3E967A3FEF41277E924CC8816
        Validity
            Not Before: Dec 13 00:36:37 2025 GMT
            Not After : Dec 12 00:41:37 2026 GMT
        Subject: CN=A4A77A69AABCE01A6B5B8AD35696BC7D1EB00171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:53:fb:8b:9b:5f:36:71:a2:2a:39:fc:81:
                    43:01:ad:e0:d9:ea:0c:89:f5:a0:6d:9c:10:c6:9e:
                    2f:38:8f:1e:0e:f3:5a:23:b7:da:32:24:55:06:4c:
                    59:e6:1d:1a:6e:56:ec:03:c6:5e:cd:c5:ca:6c:07:
                    0d:3d:70:c1:7d:b0:36:bb:ba:22:08:70:f7:4c:80:
                    78:1f:a8:51:d5:9b:e1:7c:7f:cd:44:ac:ea:8a:94:
                    82:85:8f:83:7f:84:55:d9:f1:96:88:ee:5c:50:3c:
                    a2:9f:37:a6:c3:db:25:44:f9:f0:8e:8a:74:aa:78:
                    8c:75:c6:0d:df:ad:7a:1b:53:b9:9a:58:18:57:c7:
                    f4:2a:a5:1a:b0:b5:b5:87:be:03:61:01:6e:22:6c:
                    a4:d1:43:17:f2:86:12:a3:37:94:2d:a4:13:60:3b:
                    98:85:a9:57:d7:ba:42:dc:cb:21:26:c2:43:8c:a6:
                    3f:df:54:19:6c:13:44:7e:7b:82:cf:89:60:fc:9e:
                    17:35:bd:dc:a2:de:7c:d8:1f:0f:b9:e8:77:2f:35:
                    af:3d:28:0d:4c:d4:e2:f2:91:58:53:3c:2d:c5:55:
                    c9:8e:3e:46:c4:af:d9:05:e6:20:f1:31:9e:12:0b:
                    16:7e:33:a5:77:d7:bd:f6:77:e5:51:e5:ec:3a:ff:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A7:7A:69:AA:BC:E0:1A:6B:5B:8A:D3:56:96:BC:7D:1E:B0:01:71
            X509v3 Authority Key Identifier:
                keyid:0B:87:15:2C:81:60:8F:F3:E9:67:A3:FE:F4:12:77:E9:24:CC:88:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/0B87152C81608FF3E967A3FEF41277E924CC8816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B87152C81608FF3E967A3FEF41277E924CC8816.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/1/3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:13:76:64:96:31:1f:2e:d6:d2:4a:59:a1:82:1c:84:3d:
         f2:65:1b:85:be:ec:4d:24:49:47:81:2d:e8:28:1b:2c:57:2d:
         96:8d:ae:37:73:e1:94:fc:a6:6c:19:a4:65:2f:90:59:1b:ad:
         bc:a6:e6:f0:ee:43:fd:1e:21:29:62:a5:86:7a:b3:93:33:1e:
         09:d3:32:ee:cd:93:74:c8:90:bf:37:f6:ab:3e:7e:ff:0c:a7:
         9d:f1:a2:87:18:11:f5:33:67:2c:8c:81:34:cd:06:e1:22:0d:
         98:75:53:a6:0a:41:2a:d1:4e:42:48:d3:9c:a7:d4:82:64:90:
         b6:35:71:83:77:8b:7e:9f:63:d5:85:d0:a7:50:3c:97:55:54:
         cb:9f:e2:2c:fb:2e:d1:54:08:79:20:6c:d1:68:aa:8b:90:d1:
         32:fd:83:db:ee:3d:14:a7:27:ab:f1:32:0a:76:41:95:d5:45:
         f6:ec:79:58:b3:b5:fb:1c:bf:6b:15:9a:dd:9f:0a:20:19:8d:
         5c:ac:9d:7e:24:2e:ef:50:64:29:5a:d6:a8:4c:70:1c:6c:c3:
         d2:7b:f8:7e:57:dc:55:9e:6b:f2:3c:92:96:61:fd:45:50:43:
         a0:39:18:ca:be:e7:81:9c:aa:e8:39:a3:74:b2:27:13:a6:15:
         e2:69:f8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:02:34 2025 by rpki-client