This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32302d3230203d3e203532363632.roa
File:                     3138392e3131332e3132382e302f32302d3230203d3e203532363632.roa (raw, json)
Hash identifier:          UaomN7R7ii8cF5SgawO+cFdW+4g42zaEoBOXL5pRElI=
Subject key identifier:   C4:58:4E:48:A6:68:B2:49:6D:54:A5:24:E1:6E:07:D3:E9:4F:8A:00
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       410E1CD806A92394A38729E30596EE53058CF1E2
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32302d3230203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:54 +0000
ROA not before:           Tue 25 Nov 2025 17:12:54 +0000
ROA not after:            Tue 24 Nov 2026 17:17:54 +0000
asID:                     52662
IP address blocks:        189.113.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0e:1c:d8:06:a9:23:94:a3:87:29:e3:05:96:ee:53:05:8c:f1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:54 2025 GMT
            Not After : Nov 24 17:17:54 2026 GMT
        Subject: CN=C4584E48A668B2496D54A524E16E07D3E94F8A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a4:47:3f:55:d2:69:f6:25:ee:ad:a9:1f:8d:
                    f5:11:20:e1:35:50:26:be:57:d6:25:8c:77:c5:24:
                    80:7a:d0:1f:4f:d1:82:39:ac:7c:37:5d:a6:81:00:
                    e9:51:26:6b:8a:b9:f0:60:bb:2b:8d:d2:5a:bb:5a:
                    6b:f0:60:65:3b:ca:56:fc:6e:eb:0a:fd:3d:82:84:
                    f1:c7:7c:14:49:4e:a4:14:b8:37:10:13:fc:7b:72:
                    ef:00:ad:d3:3b:83:4c:9b:0f:35:72:82:91:6b:4a:
                    5a:c7:42:53:0a:a3:ac:51:8f:ed:71:de:b1:07:6c:
                    d6:5f:f5:a4:f2:ee:ee:1c:b6:d0:fa:5e:26:1d:99:
                    4e:ac:0b:7e:50:82:3d:96:90:7d:72:29:e8:0a:6e:
                    16:a6:8d:89:00:2e:dd:7b:a6:e8:d4:58:33:b9:00:
                    56:8d:cb:da:85:13:61:c2:36:94:00:e2:b5:0a:12:
                    11:d5:18:05:20:1f:41:e5:25:77:5d:43:52:8f:68:
                    20:3a:4a:42:10:40:43:de:ba:2d:f7:af:b6:83:9c:
                    93:6d:f1:3e:40:20:97:ab:18:80:77:33:c3:ae:1f:
                    fa:23:a9:7b:83:ab:3d:79:16:13:68:8c:b1:4c:3c:
                    3a:7f:61:89:af:26:9f:5a:16:d7:51:fb:48:54:0a:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:4E:48:A6:68:B2:49:6D:54:A5:24:E1:6E:07:D3:E9:4F:8A:00
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32302d3230203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:55:74:b9:69:c7:11:32:61:08:09:19:cb:fb:30:71:28:88:
         ff:fc:35:2c:5a:3c:3a:55:83:25:c4:4d:1c:76:69:79:5a:76:
         ac:22:95:2e:a6:a4:7f:3c:f1:dd:c9:ab:04:fe:a9:de:ef:d0:
         2e:ba:c4:38:fa:33:a7:65:8d:e9:05:2d:0c:10:d5:80:1e:8f:
         c6:dc:cf:48:87:26:ed:3d:0c:66:43:44:a7:bb:bb:f3:8c:91:
         df:cf:3d:48:f8:0a:f8:62:6e:e1:97:3b:c8:38:09:84:c7:9f:
         12:68:de:a5:63:73:7d:02:23:53:89:94:3b:6a:cc:7f:bd:18:
         56:1f:13:ca:9c:fb:a1:48:6a:d9:9f:25:32:86:45:69:8f:b7:
         09:f9:68:59:fd:c1:3a:99:ab:91:66:ea:5c:00:ef:a1:08:b8:
         16:36:08:4d:4b:78:e8:6f:a6:61:cf:e7:00:b0:62:d2:d2:3c:
         81:68:5a:53:91:37:49:3c:69:a9:fc:98:39:7b:8d:3a:73:2a:
         77:4a:7a:cd:37:5a:00:8b:02:05:3b:0e:3c:44:cd:4f:79:ce:
         ac:df:10:d9:f4:cf:0f:41:f6:3e:c5:a3:7d:c8:2e:95:a2:4f:
         bf:2a:13:cc:36:82:d3:af:ae:2a:24:5b:0d:85:27:1c:af:50:
         d0:54:8a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:01 2025 by rpki-client