This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233372e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233372e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          ePrYEbYLzv9mBml0HqU6fXc29coP2gFvrPh0pregg48=
Subject key identifier:   FC:DF:71:55:D0:33:4C:74:D7:49:75:40:21:D6:C9:93:5B:E4:66:B2
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       4606BB307171397A3FC4BC857D2C05FD1B08A83F
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233372e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:13:50 +0000
ROA not before:           Tue 11 Feb 2025 12:08:50 +0000
ROA not after:            Tue 10 Feb 2026 12:13:50 +0000
asID:                     28124
IP address blocks:        187.108.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Dec 2025 05:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:06:bb:30:71:71:39:7a:3f:c4:bc:85:7d:2c:05:fd:1b:08:a8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:08:50 2025 GMT
            Not After : Feb 10 12:13:50 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:76:a7:66:c2:da:0f:51:49:c9:18:10:37:
                    82:8e:17:67:28:04:f7:88:91:e4:b0:21:1d:c3:15:
                    63:07:5f:8b:fd:77:37:17:69:6e:b8:97:50:63:da:
                    92:01:3b:d8:76:2c:cf:dc:8c:ae:c1:7b:0c:f1:0d:
                    fe:e3:b7:0d:6f:4a:16:4f:7c:76:9c:0d:80:2e:7d:
                    b8:4b:d4:ad:a8:ff:a6:b8:b9:f5:44:e8:9d:63:a0:
                    dc:25:cf:c3:fe:ad:d6:e6:f3:ed:8a:d7:42:d9:68:
                    ea:6d:b9:8a:2a:81:73:e9:6a:30:de:69:ef:62:8b:
                    80:f2:56:c3:ac:f8:c3:e3:be:47:58:6f:51:a4:c0:
                    3b:d8:97:c3:73:6f:8a:26:93:c1:9e:04:e5:07:9d:
                    a4:a2:a9:14:e5:81:63:52:68:e8:6a:5a:2c:ef:1f:
                    5a:b8:47:77:4e:36:96:7d:99:c2:83:ca:41:6a:f3:
                    75:e4:a8:cf:0d:e4:c9:28:7b:9d:01:1f:30:62:85:
                    6f:58:5d:3a:32:45:59:1a:8f:03:d1:2f:97:be:62:
                    5b:de:9c:dc:46:48:e1:d3:55:a9:e9:7f:e1:b7:0c:
                    ee:00:c5:69:80:48:a0:65:dd:18:44:01:ea:89:5d:
                    61:7e:46:14:ce:95:65:22:8b:a4:89:50:fa:7a:5e:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DF:71:55:D0:33:4C:74:D7:49:75:40:21:D6:C9:93:5B:E4:66:B2
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233372e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d6:e8:6e:f0:80:79:63:c9:7e:41:03:d0:d7:a9:77:21:47:
         0e:12:a2:0f:3f:0a:a3:92:7e:55:5e:0b:1c:65:cb:a2:32:3c:
         c3:52:c0:5f:eb:30:80:e4:15:b3:62:cf:f8:01:b0:20:dc:31:
         28:c0:d6:a9:0e:fe:65:16:1f:bb:8b:4d:56:50:c1:01:ec:57:
         a6:40:c7:94:a1:4b:e9:19:99:9a:ca:20:28:e2:8b:fe:8b:f2:
         5c:ca:ea:07:e1:2e:ce:e2:92:cd:cc:ea:14:4c:9e:18:20:c1:
         7b:55:08:c0:b2:ed:1f:05:30:fd:f0:40:7f:58:4e:2e:c3:89:
         af:1f:57:c3:6c:bd:ea:9b:4c:37:3d:ff:e4:f8:d3:1a:f9:81:
         27:d8:2f:49:08:87:b9:a2:10:69:3c:87:d9:94:98:73:43:42:
         ad:a2:c8:ac:c8:34:fb:64:eb:4d:93:68:97:d4:67:9f:85:8d:
         f0:e8:13:a9:45:53:13:e1:6e:ed:23:ca:a5:a8:d6:ad:f2:12:
         d5:bb:61:7e:75:86:74:aa:c0:11:ae:ea:38:2a:1f:7b:f9:2c:
         f2:3a:a1:41:21:53:4c:3b:9c:1d:d6:73:18:3d:85:a8:b9:f5:
         94:70:ee:14:1d:f5:9e:72:91:34:c7:05:1f:c7:50:f8:08:22:
         44:a5:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----