This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3134332e302f32342d3234203d3e203532363632.roa
File:                     3138392e3131332e3134332e302f32342d3234203d3e203532363632.roa (raw, json)
Hash identifier:          Is5gTkq100rpiMccCDHxk/K3Yc06Nq0lISK+iwb4evM=
Subject key identifier:   37:27:99:4B:E6:0E:D4:D8:7B:5D:74:2F:C0:01:23:00:F7:58:52:B0
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       1294D3743724F9AD90E8ACCC5C3C1FB4BED9203B
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3134332e302f32342d3234203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:53 +0000
ROA not before:           Tue 25 Nov 2025 17:12:53 +0000
ROA not after:            Tue 24 Nov 2026 17:17:53 +0000
asID:                     52662
IP address blocks:        189.113.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:94:d3:74:37:24:f9:ad:90:e8:ac:cc:5c:3c:1f:b4:be:d9:20:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:53 2025 GMT
            Not After : Nov 24 17:17:53 2026 GMT
        Subject: CN=3727994BE60ED4D87B5D742FC0012300F75852B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:85:c8:c5:77:b2:63:04:24:75:c7:93:16:5c:
                    94:d4:b1:2f:90:99:7b:16:97:f4:02:84:02:1e:c0:
                    60:17:38:8f:ef:0e:fa:f2:7a:06:4f:80:e0:7f:74:
                    60:d6:79:51:22:19:8d:fc:1d:4f:ea:12:63:09:1e:
                    59:1a:64:6c:e9:a7:f1:00:5c:90:4f:9a:b5:85:3e:
                    b7:58:a7:06:30:84:a6:d9:0f:be:ff:31:18:59:79:
                    6d:80:72:77:ec:d0:9d:53:68:c2:e5:ab:33:72:1b:
                    37:2e:dc:19:df:ae:bc:dc:63:1b:23:41:6e:88:52:
                    bd:4d:7d:25:e9:3c:86:98:c0:2b:c4:6d:a8:5c:de:
                    90:15:d8:1f:8e:e4:3a:70:0f:fb:a4:51:49:8c:4f:
                    b1:89:6e:3c:7d:70:86:da:39:ba:2c:52:3b:5a:09:
                    8d:66:c2:a0:5e:77:88:2b:e3:67:56:28:9c:70:dd:
                    af:81:44:41:0c:4f:55:03:a7:1a:ed:97:db:39:c3:
                    3a:be:68:02:19:8a:51:9a:7d:5e:35:03:fd:07:9a:
                    fd:c1:14:50:5c:93:c1:37:59:14:2a:4d:87:3a:6a:
                    e8:52:06:48:fa:db:e6:f8:fe:24:65:8a:5a:e1:ad:
                    61:35:4f:00:83:c4:e8:d4:8d:bc:d5:c7:82:8f:e4:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:27:99:4B:E6:0E:D4:D8:7B:5D:74:2F:C0:01:23:00:F7:58:52:B0
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3134332e302f32342d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:02:63:46:5b:ff:20:ba:09:98:1d:fb:92:e1:e5:5b:24:df:
         77:28:9a:b1:9a:f9:d4:10:06:bf:3c:46:f4:af:2c:50:c9:47:
         c4:f2:d1:9f:1d:d8:35:5c:4b:c8:5f:93:40:a4:7f:5c:cf:b7:
         53:ed:df:9d:8d:f9:85:0c:78:9d:16:26:37:96:09:d9:57:c0:
         e7:4a:08:30:90:62:ea:70:d7:03:f6:b9:8f:89:48:a6:65:c4:
         46:a6:79:8b:aa:29:51:6d:81:00:a8:ea:c5:c9:87:d9:29:5c:
         6d:d7:23:82:8a:77:9b:d0:68:58:55:fb:2c:57:0e:38:9e:55:
         2a:a7:b5:a6:31:14:a0:be:47:d9:35:ca:8a:2b:94:28:70:a7:
         63:ea:8e:90:61:6d:76:a5:ce:f2:f2:09:4f:22:1a:1c:c4:e9:
         4b:95:fa:84:cb:22:1f:b3:84:9e:e1:cf:18:11:45:e7:48:0f:
         89:4f:cd:40:3a:60:b7:ff:42:33:2e:de:05:e3:fd:20:73:33:
         99:40:c3:c1:a5:48:da:a7:0d:06:ae:db:04:1f:43:ad:cd:10:
         a3:26:b2:20:be:56:6c:bd:2d:ba:91:a5:b4:c2:f4:37:7a:5a:
         ca:2e:ce:d8:ae:79:a0:bb:d4:39:1a:39:0c:5b:08:ef:6e:57:
         cb:19:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:20 2025 by rpki-client