This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38312e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38312e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          Q9ulgKnqz+VkCV2sLerkLiJe6qmytob77pdRwZeK/O0=
Subject key identifier:   55:D7:98:7B:49:0E:6E:F3:F3:82:0B:9A:84:0E:4A:A8:7B:30:C4:CA
Certificate issuer:       /CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Certificate serial:       454E632FFC0CD4A1FFC6DDDD5F4A716A1D1422D7
Authority key identifier: 89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38312e302f32342d3234203d3e20323634393336.roa
Signing time:             Wed 26 Nov 2025 15:54:44 +0000
ROA not before:           Wed 26 Nov 2025 15:49:44 +0000
ROA not after:            Wed 25 Nov 2026 15:54:44 +0000
asID:                     264936
IP address blocks:        168.232.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4e:63:2f:fc:0c:d4:a1:ff:c6:dd:dd:5f:4a:71:6a:1d:14:22:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
        Validity
            Not Before: Nov 26 15:49:44 2025 GMT
            Not After : Nov 25 15:54:44 2026 GMT
        Subject: CN=55D7987B490E6EF3F3820B9A840E4AA87B30C4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:cf:81:8f:fc:aa:73:0f:e3:08:5c:5d:e0:
                    cc:22:9c:33:82:84:01:28:9c:eb:1a:a8:51:9e:15:
                    14:37:53:48:3e:4e:bc:ec:63:a9:81:ec:75:06:9a:
                    4f:72:fc:44:26:59:35:ff:bc:63:7d:79:44:bb:8f:
                    7e:dc:2f:de:44:0f:e7:88:52:71:c6:d6:5a:96:81:
                    9a:ef:4e:a6:1a:55:a0:5a:35:0e:c7:fb:0c:63:04:
                    36:18:2a:a0:9d:40:1a:af:e2:bc:cd:0b:83:58:dc:
                    9c:97:fb:5d:69:46:0b:f1:5e:25:1c:43:4c:d5:60:
                    ca:e0:af:80:62:2f:57:54:03:00:a1:90:17:82:e1:
                    56:59:da:bf:da:59:ac:1a:24:36:da:01:93:1d:a9:
                    ca:eb:76:48:d3:eb:a1:f1:89:30:a5:70:49:41:be:
                    e9:23:24:66:18:d0:b6:6d:b1:b5:04:4e:52:10:97:
                    2e:d2:8a:27:c6:d6:bd:73:1d:53:8c:97:38:83:8d:
                    ef:90:13:14:50:6f:5f:fc:7c:5b:d9:23:90:d3:0c:
                    bb:97:de:11:0f:84:62:92:b1:c3:ef:b6:a6:3e:f9:
                    76:a8:f3:d9:8d:f2:ca:48:4e:7c:39:5a:8e:a1:ae:
                    9b:1f:da:03:54:12:15:0e:e7:2e:2d:59:a9:38:ab:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D7:98:7B:49:0E:6E:F3:F3:82:0B:9A:84:0E:4A:A8:7B:30:C4:CA
            X509v3 Authority Key Identifier:
                keyid:89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38312e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:24:6e:73:13:51:e3:61:26:4a:c1:fd:dd:05:0a:e6:ad:0d:
         9f:28:02:e0:af:36:09:39:90:8e:07:25:4c:35:9e:4d:25:19:
         b2:e4:8d:c4:1d:89:7c:3d:2a:79:14:cf:82:d3:7e:7d:3a:fd:
         10:4d:7d:4d:98:91:8c:f8:72:89:3f:2d:0e:06:e1:88:4d:ff:
         64:94:68:3e:a9:5e:24:ce:1c:63:a4:4f:f9:a1:d9:b1:3c:c0:
         d9:6b:08:21:09:82:f2:6b:20:f6:d3:23:7e:38:66:52:12:f0:
         e3:8a:11:c0:89:dc:1d:20:36:96:e8:8b:d3:b5:5e:94:ee:b9:
         53:c4:f9:46:23:81:a8:c1:8d:08:73:21:4a:02:39:88:02:c1:
         f8:f1:fb:bd:ec:08:c7:be:b7:b3:b4:da:9f:5b:46:09:46:49:
         c3:61:fb:d3:22:cd:83:c7:bb:9b:ac:dc:4e:c9:d5:38:b7:46:
         4f:12:36:7f:13:d5:58:7a:98:73:64:57:0a:71:7e:bc:46:b9:
         d6:6f:c0:55:9d:3a:fb:4d:a7:6e:d0:a8:6a:7f:cd:d8:75:4e:
         65:c8:f5:83:13:8e:e3:7b:3e:ae:54:d2:04:ef:80:83:f1:16:
         12:cf:d7:df:0c:8b:b6:cf:ed:2f:76:95:1d:c8:16:aa:0d:33:
         00:5f:de:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURU5jL/wM1KH/xt3dX0pxah0UItcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlDMkQ3RjA3RkYxQzNCQUQ0NDE1Mjg1MjA1NzJFQjMz
Qzc2M0NFQjAeFw0yNTExMjYxNTQ5NDRaFw0yNjExMjUxNTU0NDRaMDMxMTAvBgNV
BAMTKDU1RDc5ODdCNDkwRTZFRjNGMzgyMEI5QTg0MEU0QUE4N0IzMEM0Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCum8+Bj/yqcw/jCFxd4MwinDOC
hAEonOsaqFGeFRQ3U0g+TrzsY6mB7HUGmk9y/EQmWTX/vGN9eUS7j37cL95ED+eI
UnHG1lqWgZrvTqYaVaBaNQ7H+wxjBDYYKqCdQBqv4rzNC4NY3JyX+11pRgvxXiUc
Q0zVYMrgr4BiL1dUAwChkBeC4VZZ2r/aWawaJDbaAZMdqcrrdkjT66HxiTClcElB
vukjJGYY0LZtsbUETlIQly7SiifG1r1zHVOMlziDje+QExRQb1/8fFvZI5DTDLuX
3hEPhGKSscPvtqY++Xao89mN8spITnw5Wo6hrpsf2gNUEhUO5y4tWak4q8J7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVdeYe0kObvPzgguahA5KqHswxMowHwYDVR0j
BBgwFoAUicLX8H/xw7rUQVKFIFcuszx2POswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMC84OUMyRDdGMDdGRjFDM0JBRDQ0MTUyODUyMDU3MkVCMzNDNzYzQ0VCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QzJEN0YwN0ZGMUMzQkFE
NDQxNTI4NTIwNTcyRUIzM0M3NjNDRUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv
MzEzNjM4MmUzMjMzMzIyZTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzOTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACo6FEwDQYJKoZIhvcNAQELBQADggEBABIkbnMT
UeNhJkrB/d0FCuatDZ8oAuCvNgk5kI4HJUw1nk0lGbLkjcQdiXw9KnkUz4LTfn06
/RBNfU2YkYz4cok/LQ4G4YhN/2SUaD6pXiTOHGOkT/mh2bE8wNlrCCEJgvJrIPbT
I344ZlIS8OOKEcCJ3B0gNpboi9O1XpTuuVPE+UYjgajBjQhzIUoCOYgCwfjx+73s
CMe+t7O02p9bRglGScNh+9MizYPHu5us3E7J1Ti3Rk8SNn8T1Vh6mHNkVwpxfrxG
udZvwFWdOvtNp27QqGp/zdh1TmXI9YMTjuN7Pq5U0gTvgIPxFhLP198Mi7bP7S92
lR3IFqoNMwBf3tE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:47:05 2025 by rpki-client