This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32312d3231203d3e203532363632.roa
File:                     3138392e3131332e3133362e302f32312d3231203d3e203532363632.roa (raw, json)
Hash identifier:          vUfssGTjCGEDr28+YG9xV6EyiE6E5SXHtBirMTYGeTs=
Subject key identifier:   FF:3B:CB:0B:BC:D9:AF:E2:9A:53:97:77:8C:BF:56:B4:F0:A6:F0:B4
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       54B9A35BA8AA1566A59CEC7E50AC6BB4EE39DA67
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32312d3231203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:56 +0000
ROA not before:           Tue 25 Nov 2025 17:12:56 +0000
ROA not after:            Tue 24 Nov 2026 17:17:56 +0000
asID:                     52662
IP address blocks:        189.113.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b9:a3:5b:a8:aa:15:66:a5:9c:ec:7e:50:ac:6b:b4:ee:39:da:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:56 2025 GMT
            Not After : Nov 24 17:17:56 2026 GMT
        Subject: CN=FF3BCB0BBCD9AFE29A5397778CBF56B4F0A6F0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:35:40:ef:40:aa:ad:96:cc:ae:aa:bf:f6:
                    17:cf:8c:73:77:93:9c:f1:f9:65:d7:3b:93:18:bf:
                    74:8e:98:9c:88:e4:c1:83:03:6d:47:d2:c7:70:ad:
                    8b:0e:91:06:da:bf:a6:f0:d0:37:e2:c6:39:c7:a7:
                    da:82:80:27:f8:d3:20:65:36:00:1d:8b:07:b2:a0:
                    07:14:8b:5b:60:2e:ee:41:f4:21:21:0a:4f:7f:1a:
                    c3:25:b7:52:6e:54:8b:93:c1:b4:40:5f:80:af:09:
                    40:65:d8:47:df:10:96:09:c4:73:2c:9d:4c:f1:9c:
                    94:97:32:cf:e4:58:70:71:08:fc:87:f6:64:db:3e:
                    4b:00:0f:78:55:4f:b9:33:40:0c:48:97:97:ad:39:
                    c3:84:0a:2e:82:25:84:03:46:63:ba:0e:cb:93:8c:
                    71:a6:6d:38:e6:fe:65:3d:a7:96:39:06:aa:20:dc:
                    e3:27:7e:43:8d:36:d8:20:93:9e:f5:dc:b2:21:5a:
                    6b:fd:00:d2:79:09:8f:80:af:4b:fa:61:45:c6:92:
                    3f:67:4a:18:73:4f:77:2c:08:d6:09:c0:6e:af:01:
                    05:ee:6b:45:6b:07:97:44:15:36:2c:98:a9:16:ce:
                    67:71:5d:77:f3:38:aa:33:87:97:c9:d9:17:05:87:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3B:CB:0B:BC:D9:AF:E2:9A:53:97:77:8C:BF:56:B4:F0:A6:F0:B4
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32312d3231203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:71:fc:39:58:94:97:9b:32:b7:ba:e0:9d:a5:51:08:61:85:
         cc:6f:8f:bf:66:bd:e5:36:a3:cb:1b:96:b6:be:7a:0a:94:ee:
         c8:4d:5b:95:72:fd:df:28:be:b9:52:7a:32:58:a2:e5:4c:5d:
         59:10:b0:8a:59:62:0f:5f:85:64:05:37:94:c0:f8:9a:48:5d:
         7d:9f:b7:30:55:8e:fe:a5:fa:30:9e:02:24:24:6e:e7:30:57:
         d1:2a:c3:29:67:66:df:4d:ea:8c:47:60:75:95:ad:a8:0a:c8:
         b6:1b:33:0d:b1:43:22:b0:c8:03:89:e1:d2:59:b2:0c:33:c6:
         46:58:51:05:83:ff:52:99:f4:c4:c0:f1:d7:3a:0f:35:b3:15:
         7c:42:8f:73:e5:07:cb:25:ee:b4:0e:c9:49:66:14:bf:96:b4:
         c9:c3:59:5c:9a:46:8b:df:19:1a:d7:a9:86:37:3f:56:b0:3c:
         f3:d4:37:d1:cc:45:99:15:ff:93:56:9a:af:db:4a:7b:b7:ce:
         47:a0:43:69:e4:45:bc:9c:8d:59:09:94:79:a0:e2:ae:31:76:
         85:5a:39:e8:00:0b:75:df:5e:93:1b:8a:70:69:1c:e3:0b:48:
         32:e3:b6:a5:9e:6c:20:1d:d6:2a:9e:70:42:00:43:ba:1c:1c:
         a6:f4:f1:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVLmjW6iqFWalnOx+UKxrtO452mcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5RDIxQjA3MDIxMDVENEFFRTdCMjY1QjM5NzVEMzQx
NTRCMUMwNjAeFw0yNTExMjUxNzEyNTZaFw0yNjExMjQxNzE3NTZaMDMxMTAvBgNV
BAMTKEZGM0JDQjBCQkNEOUFGRTI5QTUzOTc3NzhDQkY1NkI0RjBBNkYwQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hDVA70CqrZbMrqq/9hfPjHN3
k5zx+WXXO5MYv3SOmJyI5MGDA21H0sdwrYsOkQbav6bw0DfixjnHp9qCgCf40yBl
NgAdiweyoAcUi1tgLu5B9CEhCk9/GsMlt1JuVIuTwbRAX4CvCUBl2EffEJYJxHMs
nUzxnJSXMs/kWHBxCPyH9mTbPksAD3hVT7kzQAxIl5etOcOECi6CJYQDRmO6DsuT
jHGmbTjm/mU9p5Y5Bqog3OMnfkONNtggk5713LIhWmv9ANJ5CY+Ar0v6YUXGkj9n
ShhzT3csCNYJwG6vAQXua0VrB5dEFTYsmKkWzmdxXXfzOKozh5fJ2RcFh6YHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/zvLC7zZr+KaU5d3jL9WtPCm8LQwHwYDVR0j
BBgwFoAUyJ0hsHAhBdSu57Jls5ddNBVLHAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD
RFQvMC9DODlEMjFCMDcwMjEwNUQ0QUVFN0IyNjVCMzk3NUQzNDE1NEIxQzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OUQyMUIwNzAyMTA1RDRB
RUU3QjI2NUIzOTc1RDM0MTU0QjFDMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv
MzEzODM5MmUzMTMxMzMyZTMxMzMzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM1
MzIzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO9cYgwDQYJKoZIhvcNAQELBQADggEBAIlx/DlY
lJebMre64J2lUQhhhcxvj79mveU2o8sblra+egqU7shNW5Vy/d8ovrlSejJYouVM
XVkQsIpZYg9fhWQFN5TA+JpIXX2ftzBVjv6l+jCeAiQkbucwV9EqwylnZt9N6oxH
YHWVragKyLYbMw2xQyKwyAOJ4dJZsgwzxkZYUQWD/1KZ9MTA8dc6DzWzFXxCj3Pl
B8sl7rQOyUlmFL+WtMnDWVyaRovfGRrXqYY3P1awPPPUN9HMRZkV/5NWmq/bSnu3
zkegQ2nkRbycjVkJlHmg4q4xdoVaOegAC3XfXpMbinBpHOMLSDLjtqWebCAd1iqe
cEIAQ7ocHKb08eg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:56 2025 by rpki-client