This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133382e3131382e3136382e302f32322d3234203d3e20313938393439.roa
File:                     3133382e3131382e3136382e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          L5L5TWlNJTyGE3Es/UE9yIKAfmNRuBSFl778HHl42JE=
Subject key identifier:   E9:A9:E8:4A:AE:00:E9:17:5D:D7:38:6F:8A:A1:3F:75:84:C8:B0:EE
Certificate issuer:       /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial:       0424F488AF55E35C943B19443A8F11C85129D515
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133382e3131382e3136382e302f32322d3234203d3e20313938393439.roa
Signing time:             Tue 06 Jan 2026 16:56:31 +0000
ROA not before:           Tue 06 Jan 2026 16:51:31 +0000
ROA not after:            Tue 05 Jan 2027 16:56:31 +0000
asID:                     198949
IP address blocks:        138.118.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Jan 2026 13:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:24:f4:88:af:55:e3:5c:94:3b:19:44:3a:8f:11:c8:51:29:d5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
        Validity
            Not Before: Jan  6 16:51:31 2026 GMT
            Not After : Jan  5 16:56:31 2027 GMT
        Subject: CN=E9A9E84AAE00E9175DD7386F8AA13F7584C8B0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:4b:02:b3:60:f2:dd:64:63:d7:97:90:7b:
                    2c:c6:9f:2d:4c:83:7b:4b:cc:af:7b:47:c2:3d:60:
                    4d:b1:6c:8f:43:20:4a:40:fa:2b:32:80:6e:95:d7:
                    76:e0:63:33:e1:f2:41:53:70:71:db:58:4a:6f:f1:
                    9c:f1:a9:1a:74:6c:8d:c1:61:f9:21:b4:40:52:71:
                    7c:7d:57:10:04:44:5e:cc:02:77:79:c0:47:11:b0:
                    c5:eb:65:35:1d:07:5b:45:e3:3c:3b:19:1e:7b:28:
                    34:bc:a2:34:a8:f3:16:7b:56:8e:45:5a:21:44:52:
                    77:12:41:57:bf:b7:46:21:b2:88:15:fd:a9:4f:cd:
                    53:19:00:36:9e:96:fc:3c:0d:5a:15:f4:bb:07:e3:
                    df:92:11:53:dd:56:08:0f:0e:3e:33:05:5d:23:c4:
                    d9:19:1c:09:db:c6:fc:08:e5:55:74:f5:37:53:c8:
                    c9:d0:b5:c7:60:be:b3:c1:3c:e2:3b:98:18:68:bc:
                    2d:18:3b:55:f2:16:04:6b:c8:2d:98:55:42:49:f1:
                    53:a4:37:db:07:fb:52:63:b1:9b:c3:99:10:4f:6d:
                    df:ea:ca:70:8b:b0:04:d5:75:20:50:d5:97:33:ab:
                    eb:40:94:a7:bb:75:cf:7a:f3:a3:9c:bf:46:55:d0:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:E8:4A:AE:00:E9:17:5D:D7:38:6F:8A:A1:3F:75:84:C8:B0:EE
            X509v3 Authority Key Identifier:
                keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133382e3131382e3136382e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:47:03:74:94:4d:9f:d4:d0:54:43:47:c6:32:a7:ba:6a:4e:
         5b:77:cf:a5:8f:24:7b:cf:49:99:91:a0:60:63:13:37:b2:87:
         ab:ce:4b:87:c3:97:48:a6:41:a3:bb:25:71:2d:bb:cf:d8:31:
         98:9e:70:3c:b4:2b:38:8f:3f:ee:6d:45:3a:06:fc:89:88:1a:
         9f:95:48:33:65:1f:64:8b:6f:bb:59:f5:e2:39:e5:6b:04:d3:
         37:60:9f:ef:cd:b2:0b:6b:91:40:04:9d:72:6f:33:7e:f5:a2:
         48:6e:54:f3:cf:b3:15:9a:a4:3d:c5:3a:ba:1c:b4:f4:47:dd:
         63:ac:40:cb:66:2a:6e:c5:27:1f:f8:a7:95:79:66:aa:e5:c5:
         dd:e4:c1:1d:b1:f6:9c:fd:ca:05:c9:67:f4:39:6f:30:ad:5b:
         ae:ac:62:0b:e5:7f:bb:64:43:d0:5e:8a:08:32:ca:97:41:0b:
         ba:16:ab:88:32:c1:7d:69:08:92:b4:a1:8d:d2:57:fe:cd:51:
         25:fe:5a:1c:07:93:7f:b2:04:9b:a8:e5:5d:38:2a:59:eb:07:
         3c:84:b8:13:2e:ee:ca:18:b3:e7:f1:80:24:fe:d3:3f:eb:0b:
         9d:8c:64:b6:07:e5:54:0b:e0:03:74:c2:f0:11:c0:58:df:9c:
         8a:ab:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:31:06 2026 by rpki-client