This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133372e302f32342d3234203d3e203532363632.roa
File:                     3138392e3131332e3133372e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier:          iLNBxoVqTdYrbq1ItgSvFcYaFLLpG6meeWaJ8pFD3uo=
Subject key identifier:   C6:74:C3:10:6F:01:B8:AA:F1:78:17:5C:B0:12:9B:7E:7C:5B:26:7D
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       3E1FBE09FF6C99D460ADE9DC49CCFAC16D3C1EC7
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133372e302f32342d3234203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:55 +0000
ROA not before:           Tue 25 Nov 2025 17:12:55 +0000
ROA not after:            Tue 24 Nov 2026 17:17:55 +0000
asID:                     52662
IP address blocks:        189.113.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1f:be:09:ff:6c:99:d4:60:ad:e9:dc:49:cc:fa:c1:6d:3c:1e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:55 2025 GMT
            Not After : Nov 24 17:17:55 2026 GMT
        Subject: CN=C674C3106F01B8AAF178175CB0129B7E7C5B267D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:2f:42:c0:3e:b7:05:78:be:83:ac:61:59:
                    cd:13:5d:7e:b6:37:06:e3:7d:90:4f:e5:b8:a1:c0:
                    e4:f0:59:14:74:e1:d1:22:be:91:6e:77:0e:1f:db:
                    5f:da:72:78:60:60:f3:d5:c2:83:c9:f1:06:44:61:
                    25:e9:62:c0:25:d7:ff:da:0a:35:47:2c:53:5f:bf:
                    71:66:84:99:15:04:0b:ee:6f:06:5e:6e:12:b2:7e:
                    05:28:0c:59:1c:05:a4:6a:eb:88:7f:da:19:19:76:
                    a1:74:9d:4c:33:87:2c:cb:41:40:d1:ff:68:04:54:
                    e8:3b:c1:fa:49:da:be:89:a4:16:1b:1d:ea:1d:8c:
                    e6:72:76:84:9e:f7:e2:1e:f3:22:d1:81:04:47:dd:
                    ea:27:54:ca:98:e6:e1:72:4f:52:6e:05:68:d7:42:
                    1f:0c:ad:29:c7:a1:ac:3d:a7:41:83:ae:12:c5:e3:
                    1c:64:70:16:39:3a:2c:3d:82:bd:6c:45:c1:6d:bd:
                    ae:45:2f:0c:d3:c0:83:40:ff:1b:6f:7e:31:d7:51:
                    0c:47:bf:70:a4:d1:e8:4f:6c:6a:25:4b:f6:cf:e8:
                    b1:0a:f3:a2:a4:d0:d9:e0:1e:af:e3:09:30:92:95:
                    a6:d2:ef:ad:c1:09:da:4c:cc:66:56:f4:90:d8:16:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:C3:10:6F:01:B8:AA:F1:78:17:5C:B0:12:9B:7E:7C:5B:26:7D
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133372e302f32342d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:52:f1:f0:7a:df:07:2e:9d:7a:fe:54:e8:4d:db:4b:6e:0f:
         61:d7:15:27:42:de:29:9f:37:e5:d8:ba:39:67:82:77:f0:5b:
         d4:3c:2c:2d:48:c4:5f:d0:6a:e6:03:bf:b6:08:6e:5d:a4:96:
         0a:0a:c5:17:49:54:ee:ae:c2:70:2c:c0:45:12:4d:4b:18:2e:
         7c:60:ce:82:d8:96:76:03:89:e6:3d:a8:c0:6b:9b:07:6f:2c:
         66:a0:b8:54:ee:7b:34:9b:31:03:75:bb:a9:2f:b8:68:5a:21:
         1c:b3:aa:af:94:12:4d:c2:78:e8:b0:4e:c9:be:cd:22:1f:2a:
         c1:2c:45:5d:59:9e:a5:18:4b:a8:c3:5e:2d:01:29:6f:91:9e:
         22:87:75:c7:79:89:3b:c2:1e:53:61:8d:c8:48:12:09:90:f2:
         59:27:fe:d4:af:7f:dc:df:23:e8:55:53:ee:e3:43:a8:b6:06:
         0c:a4:99:a8:8d:12:a0:59:8b:d7:8b:56:30:54:5e:f3:e4:3f:
         c1:26:3d:f0:79:9b:3b:da:9a:67:4e:12:36:fb:d8:a6:a8:43:
         16:ef:79:a9:b7:dd:ca:a2:92:ab:4d:62:94:40:64:1c:01:a6:
         4b:c5:4a:f8:df:63:bf:06:02:b2:f2:e0:d1:6a:e4:f2:a8:68:
         dd:22:56:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:49 2025 by rpki-client