This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133382e302f32342d3234203d3e203532363632.roa
File:                     3138392e3131332e3133382e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier:          PKl/Mc2nbDhaNxOy22jmfqm2msL1414nvLSi6ZekaRU=
Subject key identifier:   6F:EC:C1:1A:AD:E6:1C:65:B7:62:3E:72:92:8F:65:F5:F9:E7:0A:E2
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       11BEDEED19381CA815BF0173D91BC5B0265A9094
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133382e302f32342d3234203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:18:01 +0000
ROA not before:           Tue 25 Nov 2025 17:13:01 +0000
ROA not after:            Tue 24 Nov 2026 17:18:01 +0000
asID:                     52662
IP address blocks:        189.113.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:be:de:ed:19:38:1c:a8:15:bf:01:73:d9:1b:c5:b0:26:5a:90:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:13:01 2025 GMT
            Not After : Nov 24 17:18:01 2026 GMT
        Subject: CN=6FECC11AADE61C65B7623E72928F65F5F9E70AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:a6:0d:f6:e9:06:7e:79:1e:64:8f:0c:71:
                    40:5e:41:4c:0c:bf:e5:ab:dd:9f:87:d3:08:28:1f:
                    1b:62:99:af:62:fc:1b:d2:9d:dc:61:95:61:5f:8a:
                    41:6e:f5:f1:1c:bf:03:51:a4:5a:b5:47:de:7d:0f:
                    32:40:6e:93:8d:c8:73:bc:97:ff:71:9e:76:f0:77:
                    85:9c:7a:4f:6a:37:ff:8b:bd:f4:64:54:01:cf:ab:
                    27:84:f8:07:f0:cf:78:d2:af:3b:67:a5:31:44:01:
                    e9:8c:d4:a2:c7:41:79:2b:a7:fb:df:17:22:eb:90:
                    b0:f9:23:4a:e0:04:02:a4:8c:11:61:c3:52:f4:73:
                    57:97:14:bb:ac:6e:21:f3:31:5a:59:f3:d8:18:37:
                    99:66:a4:06:f9:5f:d9:87:66:9a:50:58:de:4a:82:
                    45:d2:ea:c3:a5:e1:07:a5:46:ac:d6:1a:12:90:3c:
                    29:cd:77:60:82:1b:77:b3:96:c7:52:09:11:4c:68:
                    e9:5d:17:fe:b3:7b:d4:e9:47:9c:80:de:20:36:d9:
                    69:bb:62:7e:c1:b3:8a:b3:1b:c6:ee:3c:59:42:6c:
                    93:df:73:14:70:cf:74:9e:b5:e4:f1:96:56:12:fc:
                    d7:47:97:8c:9e:3e:a3:cb:d5:93:b2:a7:e6:76:50:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EC:C1:1A:AD:E6:1C:65:B7:62:3E:72:92:8F:65:F5:F9:E7:0A:E2
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133382e302f32342d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:5e:f9:65:d0:5d:8f:fb:68:7b:dd:bf:f1:e0:22:c8:e3:74:
         d6:df:f0:54:a0:c7:e5:26:00:f5:f6:e3:18:44:9b:da:2b:0d:
         3d:ca:8e:0b:13:4a:c9:f8:cd:54:00:38:7a:9f:2f:c3:c1:47:
         c8:69:26:21:20:63:b2:1f:56:a4:32:93:14:24:8b:6a:31:3c:
         9d:7a:ea:61:1c:98:00:a7:1a:db:ab:06:b8:46:ea:3b:63:09:
         8a:c0:2e:a1:19:db:56:8a:00:9c:8b:45:77:63:16:6f:06:84:
         ea:c8:3b:33:16:11:4b:07:31:5d:f7:59:b1:65:37:c2:5d:95:
         97:ec:32:09:50:2c:54:80:a2:e9:65:e9:e5:45:85:be:cd:32:
         6d:91:d1:a7:4d:97:b0:5d:2e:c9:db:97:0c:68:dc:3a:96:85:
         02:36:5c:a4:db:2f:9d:ad:3d:a4:b3:d5:c9:e7:60:c9:03:fd:
         c9:6b:66:16:1b:44:12:16:40:8a:51:cd:9e:82:02:40:c4:3e:
         dc:bf:53:54:63:8e:0e:3d:28:75:7a:b8:31:aa:ed:ef:8e:29:
         7e:ae:74:98:27:68:aa:bf:d2:4a:6c:29:fb:66:13:e6:26:62:
         b5:c3:43:14:da:fd:58:98:74:eb:a8:72:34:18:dc:f3:37:ca:
         71:d8:22:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:25 2025 by rpki-client