This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133332e302f32342d3234203d3e203532363632.roa
File:                     3138392e3131332e3133332e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier:          qBHkovhkKuLQ/jlsVlyA8VIZDS6gEcfjgtJygTW9fdM=
Subject key identifier:   E4:D9:E0:EA:36:3B:B8:63:7E:4B:A6:3C:E9:6C:58:EB:5C:55:90:5F
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       180F2754599051F7F912B6AF33CF0A23972F9907
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133332e302f32342d3234203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:58 +0000
ROA not before:           Tue 25 Nov 2025 17:12:58 +0000
ROA not after:            Tue 24 Nov 2026 17:17:58 +0000
asID:                     52662
IP address blocks:        189.113.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0f:27:54:59:90:51:f7:f9:12:b6:af:33:cf:0a:23:97:2f:99:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:58 2025 GMT
            Not After : Nov 24 17:17:58 2026 GMT
        Subject: CN=E4D9E0EA363BB8637E4BA63CE96C58EB5C55905F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:21:a2:aa:e7:96:3d:bf:b3:64:f2:f9:d2:
                    a8:b5:c9:93:67:b5:42:b1:60:28:b8:6b:ae:cf:a5:
                    98:9d:59:ba:d7:f0:23:c9:40:95:65:2e:6e:df:d4:
                    40:ad:07:e2:52:3d:6d:6d:2d:8c:88:09:44:4c:ca:
                    94:88:64:e3:e8:87:e7:e5:94:bc:2e:24:1a:37:7b:
                    a7:87:80:31:98:e9:9d:c7:69:26:ca:1c:35:13:4b:
                    60:e0:66:51:c7:34:37:f2:0a:69:e7:f7:2c:5f:c4:
                    d0:86:cb:ff:6d:b0:c6:5e:a8:4c:05:9c:e2:94:3d:
                    9f:d6:16:cb:c7:f8:2d:f9:b8:df:dd:22:36:f1:1f:
                    64:c2:eb:74:5d:a2:e1:4b:ec:76:e1:12:27:36:79:
                    fe:5f:9e:6e:c7:95:69:4a:ad:e4:94:9f:16:d9:f0:
                    b0:32:70:d9:77:05:81:8f:19:2a:74:cd:1d:3e:38:
                    91:9e:f1:c9:35:8b:91:ec:4b:3e:1a:73:74:c7:2a:
                    02:23:5b:cc:79:76:07:36:46:8b:3b:e4:83:46:32:
                    72:b3:99:6f:c5:44:80:c5:ca:7a:0b:fe:d9:b6:8d:
                    e9:9d:bb:c8:b7:98:be:f4:90:30:90:19:fe:90:18:
                    bb:b4:21:70:29:03:45:20:f8:63:a4:8d:36:92:9b:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D9:E0:EA:36:3B:B8:63:7E:4B:A6:3C:E9:6C:58:EB:5C:55:90:5F
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133332e302f32342d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:2f:92:3b:7a:34:8a:76:57:bd:11:45:74:79:1e:5d:03:
         e1:81:63:e2:10:cf:99:a2:e8:bf:2b:ad:b1:15:d9:ae:46:06:
         1e:39:c2:5f:51:f5:e1:3f:5d:7b:09:f5:5a:8f:9b:b3:77:01:
         9f:d7:64:c8:f6:d8:07:6f:89:16:c2:2a:80:8e:41:fc:5d:c3:
         7c:c9:43:6d:8b:9d:85:b9:b1:44:9e:99:7d:34:21:83:37:e3:
         2e:22:5a:8b:ca:8b:40:d3:ed:3e:9a:2b:fb:86:8c:0e:8e:cb:
         e6:9a:b4:5e:76:15:05:68:a9:5f:27:6f:05:3e:0b:07:63:4e:
         d1:e4:4a:80:35:da:bf:fa:80:f9:8e:7f:07:4b:6e:0c:ed:cb:
         6f:e5:9b:9b:87:27:bb:ff:88:cd:af:cd:0c:f5:ee:24:b0:40:
         a9:21:a2:f5:ab:8d:e8:bf:5e:3a:ef:be:0b:e8:70:2b:e5:9e:
         e1:bd:00:dd:99:7e:f4:74:44:45:71:f4:b1:5f:e8:ef:86:6a:
         de:80:f8:8f:95:5d:5e:11:3e:82:c3:ae:ef:93:3a:35:1e:11:
         3b:19:3d:aa:13:b4:26:a8:af:0a:35:bd:97:84:e9:42:39:88:
         af:cf:82:c3:85:fe:b1:da:be:85:2c:c2:9f:db:fc:cc:67:e0:
         46:98:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:24 2025 by rpki-client