This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3138392e34352e3136302e302f32302d3230203d3e203631393337.roa
File:                     3138392e34352e3136302e302f32302d3230203d3e203631393337.roa (raw, json)
Hash identifier:          Mw6BteMTFlm9H/R0wlPKeyi9NFmLlCvk2ZF76kwnWwo=
Subject key identifier:   EE:83:3D:3F:34:2A:8C:24:EE:30:F3:29:8E:09:71:FD:9E:19:D1:38
Certificate issuer:       /CN=DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303
Certificate serial:       37410BAA1F705DC49E9FB114E1BD722F3BEAA549
Authority key identifier: DA:2E:3A:87:70:ED:AF:BB:8A:09:0C:D7:35:FE:54:86:A4:CF:33:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3138392e34352e3136302e302f32302d3230203d3e203631393337.roa
Signing time:             Mon 29 Dec 2025 20:09:43 +0000
ROA not before:           Mon 29 Dec 2025 20:04:43 +0000
ROA not after:            Mon 28 Dec 2026 20:09:43 +0000
asID:                     61937
IP address blocks:        189.45.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 18:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:41:0b:aa:1f:70:5d:c4:9e:9f:b1:14:e1:bd:72:2f:3b:ea:a5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303
        Validity
            Not Before: Dec 29 20:04:43 2025 GMT
            Not After : Dec 28 20:09:43 2026 GMT
        Subject: CN=EE833D3F342A8C24EE30F3298E0971FD9E19D138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:82:49:de:02:29:98:b9:40:9a:70:4a:76:
                    17:2f:b1:3b:9b:2f:84:7e:00:d6:91:04:15:b5:11:
                    16:b7:53:99:40:4e:2f:d9:d3:87:e6:4d:00:18:ec:
                    e0:02:c8:63:e3:b2:9c:3d:cc:e0:29:93:86:36:61:
                    81:1c:b8:30:06:cd:42:05:3b:13:d4:84:68:18:59:
                    64:08:d9:db:c3:89:37:ad:09:1d:ec:56:38:ac:77:
                    ec:8d:d6:ac:67:81:ec:7c:f2:8c:e8:c3:94:8d:f0:
                    54:86:ed:74:11:dd:53:87:5c:f0:7b:a1:7d:d6:25:
                    34:40:5f:e8:e3:c2:90:e6:6e:2e:ae:9a:39:51:dc:
                    e5:27:5d:0e:9c:fd:38:54:61:10:14:93:03:e5:3f:
                    90:ba:a8:14:20:6b:57:d1:69:f2:51:80:e4:1c:71:
                    9b:a5:4c:7a:ff:0a:a6:0a:9d:9a:db:ce:a2:41:94:
                    61:11:3b:51:90:4e:ea:50:ef:1c:98:26:a7:1a:3d:
                    09:55:fa:53:e0:c7:8f:2d:d0:1d:fa:71:10:24:f4:
                    3b:92:d0:63:7f:d9:f8:b7:61:3c:c1:b0:51:57:88:
                    f3:a3:38:25:f9:bb:80:f8:44:82:0b:1d:0c:65:a6:
                    ee:b4:d7:5f:8f:54:ee:dc:e9:0e:1e:d1:7b:0e:e6:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:83:3D:3F:34:2A:8C:24:EE:30:F3:29:8E:09:71:FD:9E:19:D1:38
            X509v3 Authority Key Identifier:
                keyid:DA:2E:3A:87:70:ED:AF:BB:8A:09:0C:D7:35:FE:54:86:A4:CF:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/3138392e34352e3136302e302f32302d3230203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:db:d8:d9:58:60:d0:eb:af:29:a3:0f:46:78:87:39:02:8f:
         20:31:17:45:f8:1a:06:01:18:4e:4a:b5:50:d6:01:69:a9:be:
         b6:7f:c1:e8:d3:30:9a:e6:01:84:98:7b:9b:af:be:b4:11:0a:
         ec:1c:6a:c1:d8:3c:21:3d:e2:b5:24:1b:49:7d:c3:f0:c8:4b:
         13:96:1e:df:c4:dd:16:f1:53:96:99:b7:95:1a:ec:e2:ed:9a:
         95:11:00:bd:44:35:bc:b6:80:88:d7:0e:a8:78:4f:63:3e:8b:
         bc:c4:9a:a1:31:af:e3:82:ca:1c:31:93:29:29:9a:06:5d:89:
         88:73:49:aa:8e:06:cd:c2:41:26:cc:10:a1:3f:e5:a2:52:7b:
         9b:0f:b8:92:ff:3c:6a:5a:33:c2:98:da:3c:9b:92:b7:4e:90:
         20:f5:6a:dc:3a:51:7a:31:ee:54:3d:1c:f8:de:ae:09:35:a0:
         e0:4a:f3:21:b5:a0:aa:b5:00:37:fa:37:86:17:44:3f:f9:37:
         51:cf:9f:26:06:6d:92:14:4d:4e:c9:9d:57:9f:1d:63:09:7c:
         1e:94:e7:27:7f:a5:46:52:ea:dd:86:92:e1:c5:bd:34:66:72:
         84:b2:fa:6e:dc:6e:1c:b1:26:c4:de:7b:41:7f:e7:f4:68:ed:
         c0:0b:5c:91
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN0ELqh9wXcSen7EU4b1yLzvqpUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEyRTNBODc3MEVEQUZCQjhBMDkwQ0Q3MzVGRTU0ODZB
NENGMzMwMzAeFw0yNTEyMjkyMDA0NDNaFw0yNjEyMjgyMDA5NDNaMDMxMTAvBgNV
BAMTKEVFODMzRDNGMzQyQThDMjRFRTMwRjMyOThFMDk3MUZEOUUxOUQxMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8oJJ3gIpmLlAmnBKdhcvsTub
L4R+ANaRBBW1ERa3U5lATi/Z04fmTQAY7OACyGPjspw9zOApk4Y2YYEcuDAGzUIF
OxPUhGgYWWQI2dvDiTetCR3sVjisd+yN1qxngex88ozow5SN8FSG7XQR3VOHXPB7
oX3WJTRAX+jjwpDmbi6umjlR3OUnXQ6c/ThUYRAUkwPlP5C6qBQga1fRafJRgOQc
cZulTHr/CqYKnZrbzqJBlGERO1GQTupQ7xyYJqcaPQlV+lPgx48t0B36cRAk9DuS
0GN/2fi3YTzBsFFXiPOjOCX5u4D4RIILHQxlpu6011+PVO7c6Q4e0XsO5gvPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7oM9PzQqjCTuMPMpjglx/Z4Z0TgwHwYDVR0j
BBgwFoAU2i46h3Dtr7uKCQzXNf5UhqTPMwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRW
eVovMC9EQTJFM0E4NzcwRURBRkJCOEEwOTBDRDczNUZFNTQ4NkE0Q0YzMzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMkUzQTg3NzBFREFGQkI4
QTA5MENENzM1RkU1NDg2QTRDRjMzMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzllcmZ3TFlLcnFrUEVpcTFpVmg0VEUzeWVXU0NnV28xNXZiZTZ6RXc0VnlaLzAv
MzEzODM5MmUzNDM1MmUzMTM2MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNjMx
MzkzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvS2gMA0GCSqGSIb3DQEBCwUAA4IBAQAr29jZWGDQ
668pow9GeIc5Ao8gMRdF+BoGARhOSrVQ1gFpqb62f8Ho0zCa5gGEmHubr760EQrs
HGrB2DwhPeK1JBtJfcPwyEsTlh7fxN0W8VOWmbeVGuzi7ZqVEQC9RDW8toCI1w6o
eE9jPou8xJqhMa/jgsocMZMpKZoGXYmIc0mqjgbNwkEmzBChP+WiUnubD7iS/zxq
WjPCmNo8m5K3TpAg9WrcOlF6Me5UPRz43q4JNaDgSvMhtaCqtQA3+jeGF0Q/+TdR
z58mBm2SFE1OyZ1Xnx1jCXwelOcnf6VGUurdhpLhxb00ZnKEsvpu3G4csSbE3ntB
f+f0aO3AC1yR
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:02:20 2026 by rpki-client