This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133342e302f32342d3234203d3e203532363632.roa
File:                     3138392e3131332e3133342e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier:          6MQTQYD26haBW2kNpctuwbSlV4pWqhbhJLSPORBXWoo=
Subject key identifier:   6B:D0:0E:63:0A:0F:7E:D8:4C:A2:32:33:FB:16:54:C2:40:B9:D7:57
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       7054E898E27CECE2A191FAC08FBA990F269AE4CC
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133342e302f32342d3234203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:18:01 +0000
ROA not before:           Tue 25 Nov 2025 17:13:01 +0000
ROA not after:            Tue 24 Nov 2026 17:18:01 +0000
asID:                     52662
IP address blocks:        189.113.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:54:e8:98:e2:7c:ec:e2:a1:91:fa:c0:8f:ba:99:0f:26:9a:e4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:13:01 2025 GMT
            Not After : Nov 24 17:18:01 2026 GMT
        Subject: CN=6BD00E630A0F7ED84CA23233FB1654C240B9D757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:e9:2a:b4:de:97:5d:dc:39:8d:bf:9a:0e:
                    1b:c0:84:b3:3e:07:6d:58:25:60:65:7f:27:ba:be:
                    ef:26:08:7f:73:0a:9e:55:b4:de:47:86:43:b5:0b:
                    dd:03:f9:dd:e1:24:f6:f5:4e:dc:04:8d:ea:8c:e4:
                    77:90:54:13:a4:45:bb:dc:82:5e:f9:8c:6f:16:37:
                    ad:5c:f8:40:11:4a:fa:10:23:d3:b5:0e:17:b2:16:
                    31:c6:75:09:ee:8c:e0:0a:21:d6:3a:2a:ee:b4:8e:
                    69:09:1a:2c:85:0f:d3:8d:cd:80:5a:e6:5c:1f:dd:
                    d2:05:29:72:dd:83:35:be:2c:99:ad:9e:9b:ad:6c:
                    b2:0f:9e:89:bd:9a:1f:75:c1:c6:e5:86:0c:8b:f5:
                    6e:86:9c:40:80:92:e2:ff:c0:d9:d0:33:24:c6:d6:
                    8e:f5:06:17:6a:95:f6:cd:a8:0d:85:96:ad:03:a5:
                    3d:97:a0:7c:e2:b8:a0:9f:6e:8b:7d:7c:f2:83:37:
                    31:58:24:9f:2a:13:58:fb:1d:3b:1d:db:57:08:7a:
                    db:30:3f:bc:52:72:a9:ef:5e:66:28:2b:85:66:a9:
                    2e:63:23:ef:3c:ec:49:0f:66:f0:12:e7:c5:0d:76:
                    e9:05:10:6b:48:67:3d:32:e5:7a:a1:22:d7:17:bc:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:0E:63:0A:0F:7E:D8:4C:A2:32:33:FB:16:54:C2:40:B9:D7:57
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133342e302f32342d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:2e:2b:c0:34:5c:ea:5d:f7:96:1f:21:bc:17:f4:ad:1a:f5:
         13:b9:2e:cb:3b:55:e1:c0:e7:dd:5a:8d:6b:a3:8c:10:35:e2:
         24:23:27:6f:4c:7c:3b:b1:b8:b7:df:94:5d:09:67:93:04:ed:
         7b:dd:b9:6c:eb:27:78:62:17:a1:b3:3d:3d:42:fa:5e:f5:6a:
         47:e7:81:64:31:4c:e0:7e:5f:ca:bd:05:a0:30:0f:ed:ea:ab:
         48:9e:42:57:1b:ba:37:8c:c9:5d:46:d3:27:d5:20:7b:3a:66:
         7c:33:84:c7:5a:62:b7:37:2a:82:5a:ad:d3:f5:30:12:35:42:
         83:ff:f0:31:b9:3a:ff:a5:b5:b9:8f:0f:09:92:3a:37:ab:73:
         ad:be:9a:ed:50:d8:a2:9c:58:eb:07:5c:ff:af:95:54:1e:b6:
         a1:9f:05:84:aa:37:04:cc:f7:7e:21:8a:51:9e:54:71:c6:84:
         62:c8:73:7c:69:ad:d8:25:10:cf:95:89:a4:ff:51:45:5e:6e:
         2f:80:a2:b9:60:d8:a4:5a:db:f1:ac:97:8b:75:20:bc:df:8f:
         82:0e:0c:e7:ae:67:5d:63:b3:46:ea:34:08:af:11:d2:c6:f0:
         ec:9a:7e:8b:8f:39:33:8d:81:2c:0b:e7:9f:04:bd:28:95:f2:
         ab:df:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:50 2025 by rpki-client