This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32332d3233203d3e203532363632.roa
File:                     3138392e3131332e3133362e302f32332d3233203d3e203532363632.roa (raw, json)
Hash identifier:          S6KYNvC8IOOErdW43YzTYZZiQrTEPP4xRHH4wT53xJw=
Subject key identifier:   F7:1B:12:F7:23:6B:59:8B:DA:6B:4B:B9:78:83:D4:22:DD:78:6D:F0
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       4967048983F7D43B44FA09A8212F0E5B8F46E29D
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32332d3233203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:18:01 +0000
ROA not before:           Tue 25 Nov 2025 17:13:01 +0000
ROA not after:            Tue 24 Nov 2026 17:18:01 +0000
asID:                     52662
IP address blocks:        189.113.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:67:04:89:83:f7:d4:3b:44:fa:09:a8:21:2f:0e:5b:8f:46:e2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:13:01 2025 GMT
            Not After : Nov 24 17:18:01 2026 GMT
        Subject: CN=F71B12F7236B598BDA6B4BB97883D422DD786DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8a:31:05:9b:0d:a3:a4:06:57:c3:41:8f:ef:
                    86:ae:a3:39:91:0f:45:8a:9a:5d:65:d9:d5:43:00:
                    97:e5:59:ff:43:88:aa:41:b6:b1:e3:2e:f5:14:23:
                    1d:a6:6d:69:9b:7b:20:46:da:f4:e8:1f:be:83:60:
                    90:7b:f5:1e:77:ee:24:45:6b:3c:b3:a3:b1:6d:e3:
                    16:78:96:a3:ef:38:e2:90:c4:ff:c6:fa:9d:c8:a9:
                    d6:0c:cb:87:1f:43:c4:c3:07:95:ec:df:57:fa:0a:
                    61:eb:09:12:37:6f:ba:11:d2:96:80:34:fb:dc:f4:
                    fd:ff:c6:93:d4:c3:0c:cb:78:05:7b:d6:75:18:1e:
                    3b:5c:96:21:fd:3f:50:d0:cd:a2:86:f5:28:cc:59:
                    bc:a9:ec:89:e5:b6:81:4e:45:9a:a0:95:da:0b:86:
                    d0:6a:9e:e0:6e:56:49:ff:b0:a7:64:33:5b:6a:48:
                    30:e4:cd:e1:32:f3:b7:76:c9:aa:18:b6:43:07:67:
                    99:8c:40:3a:13:d3:d2:06:57:dd:7a:d8:7f:d1:ec:
                    28:17:c9:29:14:1e:71:13:5a:fe:76:de:f8:14:a5:
                    4f:c2:0d:ac:09:80:4c:81:bb:8b:6f:96:25:d2:fa:
                    b7:b8:23:60:30:c9:12:2d:9f:47:94:aa:b2:e5:da:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1B:12:F7:23:6B:59:8B:DA:6B:4B:B9:78:83:D4:22:DD:78:6D:F0
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32332d3233203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:80:81:5f:e9:75:58:50:96:9a:8c:6f:b8:66:87:ac:b4:a4:
         20:2d:e5:8a:8b:3e:2f:e1:ad:97:a3:7e:39:9a:55:67:4f:ae:
         0a:ed:c8:4d:6c:0b:1a:e2:0f:82:0a:f3:97:67:46:e3:df:57:
         06:ad:35:db:24:d5:42:90:92:15:2a:12:d3:1c:af:79:9d:48:
         1c:4d:0a:c3:3d:e6:e9:e2:22:bb:61:e8:5f:37:f0:a3:74:c8:
         36:6c:2c:ca:b2:ea:f8:e4:6f:58:30:30:3c:62:f5:fa:1c:f8:
         61:28:08:a0:46:7e:d0:85:ef:40:50:ae:c4:7d:89:3e:80:fd:
         3f:04:d2:81:89:80:f7:e7:99:be:6a:01:65:62:aa:a8:04:f3:
         4d:c7:66:b6:38:57:b6:4a:c3:c8:90:0d:38:21:8e:38:f6:e1:
         01:d3:75:1b:36:31:ed:b7:b7:11:09:8d:eb:96:01:d2:f1:a3:
         1f:9a:09:1a:ff:48:28:ce:8d:b7:5a:d6:1a:f6:67:06:fc:22:
         fc:53:c8:d3:0c:ce:94:46:5c:d8:bb:03:2c:06:e7:45:4c:57:
         97:f0:b8:d1:a0:73:d2:6c:69:56:66:06:a3:64:bd:3a:59:76:
         ba:76:4d:6e:40:67:0a:38:db:f3:c8:58:c1:85:92:48:3d:e5:
         fd:84:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:00 2025 by rpki-client