This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/3138362e3233322e3136302e302f32302d3234203d3e203533313934.roa
File:                     3138362e3233322e3136302e302f32302d3234203d3e203533313934.roa (raw, json)
Hash identifier:          fGB0qGRLGFI58D32XSZ9Hwr+kIMrGk46I0U9z5oq4UY=
Subject key identifier:   3B:F7:5C:43:02:3B:3A:C2:B3:78:62:77:21:A5:6F:36:C0:1B:FA:4C
Certificate issuer:       /CN=D898A501884A69107F2B7763B90247B1A49C3A70
Certificate serial:       4DDBB869C1372B3997043EE55E7B7942EF6092E9
Authority key identifier: D8:98:A5:01:88:4A:69:10:7F:2B:77:63:B9:02:47:B1:A4:9C:3A:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D898A501884A69107F2B7763B90247B1A49C3A70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/3138362e3233322e3136302e302f32302d3234203d3e203533313934.roa
Signing time:             Thu 20 Nov 2025 14:50:23 +0000
ROA not before:           Thu 20 Nov 2025 14:45:23 +0000
ROA not after:            Thu 19 Nov 2026 14:50:23 +0000
asID:                     53194
IP address blocks:        186.232.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/D898A501884A69107F2B7763B90247B1A49C3A70.crl
                          rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/D898A501884A69107F2B7763B90247B1A49C3A70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D898A501884A69107F2B7763B90247B1A49C3A70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:db:b8:69:c1:37:2b:39:97:04:3e:e5:5e:7b:79:42:ef:60:92:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D898A501884A69107F2B7763B90247B1A49C3A70
        Validity
            Not Before: Nov 20 14:45:23 2025 GMT
            Not After : Nov 19 14:50:23 2026 GMT
        Subject: CN=3BF75C43023B3AC2B378627721A56F36C01BFA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bb:d1:f4:d7:62:a6:9c:df:42:1f:a1:a4:30:
                    64:67:fd:19:be:cd:f5:28:94:70:12:3f:9a:42:4e:
                    a4:7a:f0:55:cf:e8:65:db:e4:72:62:02:92:d1:e8:
                    e5:d2:bc:d3:de:36:74:28:12:a0:53:64:5f:af:bc:
                    26:2d:f5:45:48:2f:a9:ba:6d:f4:06:4d:1e:74:6f:
                    50:0d:5f:71:9b:6a:6d:e1:2d:a6:5e:26:9f:5b:4f:
                    e8:95:b0:55:f9:92:e5:02:38:9e:5a:7d:9d:59:d5:
                    cf:da:59:69:19:b8:5e:e7:6d:51:a3:0c:d0:a5:7e:
                    57:0b:b7:52:9b:ab:68:b1:32:f4:83:0b:a5:68:b8:
                    a3:97:d4:60:06:83:94:25:5d:78:c2:c0:a6:3c:4b:
                    1d:94:c1:2d:17:20:27:29:55:29:fc:a5:aa:f7:b9:
                    8e:b4:cf:9c:82:a7:5d:6a:9b:60:1f:20:bc:de:ff:
                    41:d4:73:9f:1d:4c:83:c0:b8:c3:41:0d:e4:4f:13:
                    e6:df:92:a2:cc:c4:3c:cf:eb:27:c1:a5:93:9a:f4:
                    41:8b:e4:46:12:75:92:4f:63:db:64:76:3a:35:99:
                    92:2d:fa:80:70:83:30:05:83:2e:13:d9:32:84:d3:
                    c8:c6:98:86:bb:00:da:11:6d:32:dd:cc:9a:b3:7b:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F7:5C:43:02:3B:3A:C2:B3:78:62:77:21:A5:6F:36:C0:1B:FA:4C
            X509v3 Authority Key Identifier:
                keyid:D8:98:A5:01:88:4A:69:10:7F:2B:77:63:B9:02:47:B1:A4:9C:3A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/D898A501884A69107F2B7763B90247B1A49C3A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D898A501884A69107F2B7763B90247B1A49C3A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/3138362e3233322e3136302e302f32302d3234203d3e203533313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:a2:6c:23:e7:2f:98:05:9d:15:a0:3a:3d:eb:3b:3f:04:ae:
         53:84:b5:40:c5:ad:60:f9:e1:28:48:ee:b4:88:18:03:9f:54:
         d5:e1:88:48:f4:c4:1e:91:b8:0d:ec:60:29:7e:cf:e3:6e:54:
         e5:9f:7a:ee:0a:42:c8:70:8f:6b:67:f6:00:16:61:6e:17:90:
         50:ea:bc:fb:27:50:b2:f2:2e:86:73:80:d5:26:b6:65:45:f9:
         ec:a5:23:e2:48:e5:b9:ae:c9:b6:66:6c:82:7e:c1:31:bb:6d:
         1e:d6:4e:6e:14:cc:ce:bb:75:6d:50:a7:3d:5d:f7:61:2b:79:
         40:1b:7e:c5:c9:e2:32:7c:00:c5:ed:f1:ba:21:17:03:76:db:
         b6:d9:97:4e:0d:b9:30:ec:91:2d:6f:4d:45:24:d6:71:9b:a0:
         b0:5c:c2:c1:41:17:3d:18:87:e8:46:f9:89:d5:39:41:50:6b:
         be:f5:8e:c2:74:a0:ab:01:3c:0d:47:dd:2e:6f:9e:a2:90:b8:
         77:5f:7d:ae:9f:43:ef:08:6a:88:27:75:50:d0:16:ec:21:a3:
         63:f9:37:14:b3:43:31:8c:95:e0:28:d1:e3:8e:c5:ea:88:6f:
         1e:e7:62:ab:bf:43:82:ea:5e:15:51:b0:39:7e:2e:23:35:a5:
         2d:23:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:44 2025 by rpki-client