This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133352e302f32342d3234203d3e203532363632.roa
File:                     3138392e3131332e3133352e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier:          JKOfT1ESYDl5Eizpwb+zj69HdRJTJlr/s8voSJR+OC8=
Subject key identifier:   87:E2:B8:7D:E6:F3:8F:0B:58:64:7E:0D:DD:D3:DB:A8:A9:D0:F6:F5
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       5811551D52CA39A7FA6735A42BB9EAE565BB19F5
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133352e302f32342d3234203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:57 +0000
ROA not before:           Tue 25 Nov 2025 17:12:57 +0000
ROA not after:            Tue 24 Nov 2026 17:17:57 +0000
asID:                     52662
IP address blocks:        189.113.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:11:55:1d:52:ca:39:a7:fa:67:35:a4:2b:b9:ea:e5:65:bb:19:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:57 2025 GMT
            Not After : Nov 24 17:17:57 2026 GMT
        Subject: CN=87E2B87DE6F38F0B58647E0DDDD3DBA8A9D0F6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:7a:ed:89:31:ce:b5:e8:bf:ee:fa:b5:1c:
                    aa:90:d3:d3:c0:98:d7:d1:90:2c:da:0a:ec:07:be:
                    70:74:47:fd:e6:f3:a6:7b:99:5d:5d:4d:ba:05:08:
                    ac:24:a1:48:d3:15:52:7d:17:b4:a3:c3:04:76:20:
                    4f:be:e2:a3:c8:42:1a:40:d0:7c:db:a3:54:a4:b4:
                    ec:fe:c1:94:e3:57:e5:35:e8:51:7f:e3:a9:3c:a1:
                    92:e5:ec:c7:62:a0:04:af:1e:91:47:6a:d4:77:46:
                    5e:f2:6d:f1:ea:fb:29:19:b1:b3:ba:d4:7f:af:5c:
                    ca:b3:94:30:3b:30:51:56:aa:61:af:d3:7d:45:74:
                    a2:b1:5f:be:f7:39:ed:36:f4:50:e2:5d:56:31:e9:
                    a1:0c:45:56:d6:35:03:3f:06:57:38:91:06:7c:4c:
                    3a:dd:71:7b:41:66:e7:90:8d:20:52:2b:97:d9:4a:
                    4f:95:0d:0e:1e:ca:25:7f:3e:36:27:92:1e:43:c6:
                    01:b0:81:c7:7d:57:7b:a2:9f:45:6b:8e:59:70:13:
                    98:d0:5b:de:30:d8:12:e4:62:6b:a8:87:d6:3e:50:
                    16:a6:87:3e:a3:93:c1:49:94:ca:82:18:65:20:cb:
                    d7:21:68:2d:60:b5:4e:c7:ad:56:03:51:16:df:1e:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E2:B8:7D:E6:F3:8F:0B:58:64:7E:0D:DD:D3:DB:A8:A9:D0:F6:F5
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133352e302f32342d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a4:a8:d6:9b:1c:f9:e5:46:1c:e0:b4:33:4d:bd:dc:5d:f9:
         3a:59:50:ec:18:97:a6:61:ae:6a:e5:06:08:32:e3:30:ce:89:
         84:fb:f7:49:51:20:b8:04:2d:d1:b2:4d:2a:54:de:dd:90:d3:
         4e:9e:22:17:79:5f:23:0b:c1:73:07:89:44:81:21:c8:b9:f0:
         52:09:1b:69:c5:c3:f0:d1:43:59:91:de:bb:95:40:1e:53:4e:
         61:aa:02:c4:33:39:2f:2a:f5:8b:2b:e7:7a:05:f3:ff:51:9a:
         ea:31:34:eb:a7:a3:93:10:ce:22:74:d9:d7:46:ec:9f:b9:cb:
         e3:25:bb:18:44:09:22:52:31:89:ad:8e:2e:6a:73:b7:bb:15:
         a5:ce:75:cf:7f:40:ee:18:d7:6e:75:cc:b7:ea:8a:71:0f:99:
         18:72:21:3b:6d:a3:e4:ca:03:aa:7f:4f:8d:cd:49:3d:88:17:
         4e:e0:a1:a0:1f:47:ae:d1:aa:7f:be:fc:39:3a:c4:0c:65:e9:
         65:41:e5:55:d3:e1:71:df:04:7d:d9:8e:bf:86:b8:12:1a:bb:
         19:62:b3:ee:0a:77:8d:fb:5a:0f:54:00:fd:a2:5a:a6:39:08:
         24:2c:95:20:11:14:61:df:a2:d2:86:51:18:e5:fe:2a:42:42:
         20:7a:09:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWBFVHVLKOaf6ZzWkK7nq5WW7GfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5RDIxQjA3MDIxMDVENEFFRTdCMjY1QjM5NzVEMzQx
NTRCMUMwNjAeFw0yNTExMjUxNzEyNTdaFw0yNjExMjQxNzE3NTdaMDMxMTAvBgNV
BAMTKDg3RTJCODdERTZGMzhGMEI1ODY0N0UwRERERDNEQkE4QTlEMEY2RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGnrtiTHOtei/7vq1HKqQ09PA
mNfRkCzaCuwHvnB0R/3m86Z7mV1dTboFCKwkoUjTFVJ9F7SjwwR2IE++4qPIQhpA
0Hzbo1SktOz+wZTjV+U16FF/46k8oZLl7MdioASvHpFHatR3Rl7ybfHq+ykZsbO6
1H+vXMqzlDA7MFFWqmGv031FdKKxX773Oe029FDiXVYx6aEMRVbWNQM/Blc4kQZ8
TDrdcXtBZueQjSBSK5fZSk+VDQ4eyiV/PjYnkh5DxgGwgcd9V3uin0VrjllwE5jQ
W94w2BLkYmuoh9Y+UBamhz6jk8FJlMqCGGUgy9chaC1gtU7HrVYDURbfHouJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUh+K4febzjwtYZH4N3dPbqKnQ9vUwHwYDVR0j
BBgwFoAUyJ0hsHAhBdSu57Jls5ddNBVLHAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD
RFQvMC9DODlEMjFCMDcwMjEwNUQ0QUVFN0IyNjVCMzk3NUQzNDE1NEIxQzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OUQyMUIwNzAyMTA1RDRB
RUU3QjI2NUIzOTc1RDM0MTU0QjFDMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv
MzEzODM5MmUzMTMxMzMyZTMxMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9cYcwDQYJKoZIhvcNAQELBQADggEBAIukqNab
HPnlRhzgtDNNvdxd+TpZUOwYl6ZhrmrlBggy4zDOiYT790lRILgELdGyTSpU3t2Q
006eIhd5XyMLwXMHiUSBIci58FIJG2nFw/DRQ1mR3ruVQB5TTmGqAsQzOS8q9Ysr
53oF8/9RmuoxNOuno5MQziJ02ddG7J+5y+MluxhECSJSMYmtji5qc7e7FaXOdc9/
QO4Y1251zLfqinEPmRhyITtto+TKA6p/T43NST2IF07goaAfR67Rqn++/Dk6xAxl
6WVB5VXT4XHfBH3Zjr+GuBIauxlis+4Kd437Wg9UAP2iWqY5CCQslSARFGHfotKG
URjl/ipCQiB6CRo=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:56 2025 by rpki-client