This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133302e302f32332d3233203d3e203532363632.roa
File:                     3138392e3131332e3133302e302f32332d3233203d3e203532363632.roa (raw, json)
Hash identifier:          Lcb6dFl7Ep2TGrmXv120HpMjdIuRxel5/HeLppe3zFo=
Subject key identifier:   DC:58:40:D0:63:29:34:DD:54:61:A2:1A:CD:E0:2F:1D:01:E3:DF:E4
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       14A5CABF5291E32299950D173ED7CDF22340CB1A
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133302e302f32332d3233203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:58 +0000
ROA not before:           Tue 25 Nov 2025 17:12:58 +0000
ROA not after:            Tue 24 Nov 2026 17:17:58 +0000
asID:                     52662
IP address blocks:        189.113.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a5:ca:bf:52:91:e3:22:99:95:0d:17:3e:d7:cd:f2:23:40:cb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:58 2025 GMT
            Not After : Nov 24 17:17:58 2026 GMT
        Subject: CN=DC5840D0632934DD5461A21ACDE02F1D01E3DFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:32:1a:42:8a:40:50:76:11:32:8e:e3:b3:
                    9c:d1:9a:28:9f:cb:3e:b4:f3:73:4c:b5:15:f9:b9:
                    d2:7f:ff:99:2b:dc:07:55:e4:4b:a1:3b:9d:c1:6d:
                    f6:1c:43:12:ac:a7:e7:23:6e:0a:30:19:0b:8a:8c:
                    12:84:32:55:60:01:3d:4b:dc:1f:1c:c1:2b:32:81:
                    b0:09:75:13:ff:4f:0c:54:74:5d:9c:25:b4:62:c3:
                    f7:e4:7d:2d:d5:52:51:a6:15:41:34:01:95:2a:1d:
                    10:69:f8:56:ae:78:7e:ef:4b:49:12:e1:e3:72:bc:
                    72:69:c9:ff:4b:b5:44:e9:67:7e:55:b2:1b:0f:5a:
                    10:90:54:03:30:fb:65:32:10:04:ca:5c:4f:eb:24:
                    7a:49:62:eb:a7:47:41:ab:e1:8c:94:7e:8f:5d:70:
                    4d:e8:2f:41:14:1a:74:2c:b9:ad:00:52:4d:ef:37:
                    58:3d:79:9d:43:52:97:d6:f8:48:73:22:11:d6:7b:
                    90:32:64:c4:fc:3b:6f:53:a5:72:b4:73:6c:f9:43:
                    dd:18:58:4c:4b:4c:c9:5f:f6:2f:fb:47:4a:2f:47:
                    ae:44:e9:b6:94:93:5a:2a:dc:13:20:d0:3a:8a:a3:
                    f9:5f:60:77:75:0e:91:4d:78:07:3a:38:e8:63:c2:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:58:40:D0:63:29:34:DD:54:61:A2:1A:CD:E0:2F:1D:01:E3:DF:E4
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133302e302f32332d3233203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:d8:21:6e:c3:ee:5b:1a:bf:d6:e2:a2:5f:4c:4a:aa:ac:76:
         e1:2e:da:9e:3a:46:7f:2a:23:9c:c1:a6:31:f0:a5:03:d4:2b:
         b9:dc:0e:2e:48:4e:85:87:d9:31:0b:6a:80:5e:6a:23:a1:50:
         cf:ef:76:ea:0c:fc:90:6f:00:27:6c:ed:c2:ab:a8:5b:d8:aa:
         df:52:bc:01:3c:c0:99:cd:0c:48:5b:57:4e:7b:22:96:17:ea:
         37:d4:32:56:83:c3:f0:9a:28:7e:04:9d:e7:ce:d4:06:f1:0f:
         25:c5:76:3d:8e:78:c2:c6:d6:bd:80:76:13:2e:ab:11:36:80:
         b6:ae:d1:2a:2d:dc:fb:97:ee:95:19:4f:0c:46:d3:29:cc:8f:
         7b:f3:b3:a9:c9:a5:fa:03:7e:ff:b7:43:9c:d8:9e:da:dc:b6:
         b6:c2:43:f6:11:a8:3b:83:6c:c1:44:76:77:c4:53:d5:c9:50:
         a9:62:93:1c:df:0f:92:ca:a2:3c:3e:cf:de:65:7d:08:93:b7:
         90:20:4a:c8:ae:c9:90:9c:30:d8:3c:bc:25:15:52:e6:68:9f:
         19:d0:ee:4b:35:35:df:b3:82:f7:b0:5e:fb:6c:b6:21:6e:55:
         e8:a8:c5:fd:5d:2c:ee:c9:99:12:96:9a:5d:e4:c3:02:7b:ee:
         7d:35:05:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:34 2025 by rpki-client