This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3134322e302f32332d3233203d3e203532363632.roa
File:                     3138392e3131332e3134322e302f32332d3233203d3e203532363632.roa (raw, json)
Hash identifier:          6LXISsXVIWTqonqqVk2Y+Qmmk0ZmcNYFKoqaCdHtvuM=
Subject key identifier:   53:C3:1A:BC:DB:50:96:6F:E5:88:B4:96:8D:BA:CC:24:66:52:53:C0
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       172C3851AC342A0261999292162A6F05068105DC
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3134322e302f32332d3233203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:53 +0000
ROA not before:           Tue 25 Nov 2025 17:12:53 +0000
ROA not after:            Tue 24 Nov 2026 17:17:53 +0000
asID:                     52662
IP address blocks:        189.113.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2c:38:51:ac:34:2a:02:61:99:92:92:16:2a:6f:05:06:81:05:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:53 2025 GMT
            Not After : Nov 24 17:17:53 2026 GMT
        Subject: CN=53C31ABCDB50966FE588B4968DBACC24665253C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:ea:ad:5d:a5:5d:2c:4b:d3:8c:b3:c0:91:
                    ee:fa:c3:ea:42:a7:f9:e7:e8:61:af:61:fd:ee:cc:
                    cd:cb:65:ce:ca:b2:4b:6c:13:4b:87:83:f6:73:ec:
                    c7:0d:c4:41:fb:bb:60:7f:60:6b:46:f1:d8:1f:20:
                    d8:0b:3f:d2:4c:7b:90:ed:b0:13:54:ef:bd:b1:ef:
                    ae:36:72:b0:b2:a1:c8:b7:10:37:cc:7e:25:0f:a6:
                    f4:a3:a1:69:f0:2f:59:17:58:19:69:d8:ce:95:5e:
                    c1:0b:bd:17:3e:e0:7f:da:89:37:57:ef:1d:0b:d4:
                    50:f4:48:46:19:d1:80:c7:92:0a:38:78:f2:e8:2b:
                    ac:33:6a:91:9f:50:1c:05:f1:06:e6:ba:bd:b5:7e:
                    d0:31:f7:aa:ce:45:7b:1c:74:fa:c4:3f:2b:68:2d:
                    89:59:11:32:37:13:80:2a:df:09:8c:af:7c:f8:bc:
                    d4:15:ab:03:9a:8b:05:73:c7:43:21:dd:e3:6b:ab:
                    0b:74:a5:0f:a5:22:b1:6b:e0:25:f3:b8:8b:79:4e:
                    57:fb:4e:a5:9a:bb:bd:05:a7:33:41:c6:e9:b6:4b:
                    6c:e0:80:6e:7f:38:7a:2c:00:50:21:eb:7e:57:9d:
                    5e:c7:46:c4:4f:f6:c2:1c:12:70:8e:8e:15:46:7b:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C3:1A:BC:DB:50:96:6F:E5:88:B4:96:8D:BA:CC:24:66:52:53:C0
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3134322e302f32332d3233203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:8d:4d:4d:42:fc:1c:d1:41:25:68:62:23:95:67:01:1d:02:
         f3:8e:9a:44:38:5f:91:4d:38:cd:e6:ef:d5:bc:02:b4:e9:90:
         ef:56:41:45:a7:5c:d7:2a:fb:d1:3d:c3:fe:66:14:7f:ae:43:
         02:a2:64:37:c3:8f:03:af:cc:90:18:63:62:44:fb:1a:91:35:
         83:5d:9e:c7:23:27:d8:35:bc:69:3a:c4:c0:48:77:60:2d:38:
         d4:36:42:7c:14:39:54:15:92:3b:c1:b8:78:58:71:c9:d3:28:
         b4:61:39:05:c0:a6:5b:d4:8c:0e:70:01:bc:32:be:fb:34:1c:
         10:fc:37:a4:07:0d:43:f9:2a:66:73:65:33:c0:be:ea:04:38:
         9c:29:1a:e1:a3:6a:8a:60:93:6f:df:5a:a3:aa:fd:b3:22:3f:
         83:35:9c:43:7c:9b:b2:b0:6b:4d:a5:6f:0d:3d:e1:3b:6e:d9:
         e5:bd:44:80:45:dd:79:22:14:19:fa:f1:65:c8:76:96:48:54:
         bd:a2:cb:1d:a0:96:0b:49:6f:69:90:36:01:f2:61:5c:42:24:
         76:64:30:2f:ab:2d:08:9e:8b:81:6e:ca:d7:ba:fc:6f:2b:e2:
         0b:b7:50:a2:98:32:9a:9d:07:8f:8c:72:ee:e4:9a:de:c5:b1:
         3d:55:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:51 2025 by rpki-client