This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/3138362e3233322e3136302e302f32342d3234203d3e203533313934.roa
File:                     3138362e3233322e3136302e302f32342d3234203d3e203533313934.roa (raw, json)
Hash identifier:          9qphoE5bd/HuaTy+L+7Dv9fyAyzbLPqWbc+2PRo9Gp0=
Subject key identifier:   17:30:35:8C:15:F0:C1:11:FA:73:6B:97:62:20:5E:9C:25:AE:F0:88
Certificate issuer:       /CN=D898A501884A69107F2B7763B90247B1A49C3A70
Certificate serial:       544462B5948AFD9FFE9A51B19D6AB533C25964C3
Authority key identifier: D8:98:A5:01:88:4A:69:10:7F:2B:77:63:B9:02:47:B1:A4:9C:3A:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D898A501884A69107F2B7763B90247B1A49C3A70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/3138362e3233322e3136302e302f32342d3234203d3e203533313934.roa
Signing time:             Sat 22 Nov 2025 13:13:30 +0000
ROA not before:           Sat 22 Nov 2025 13:08:30 +0000
ROA not after:            Sat 21 Nov 2026 13:13:30 +0000
asID:                     53194
IP address blocks:        186.232.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/D898A501884A69107F2B7763B90247B1A49C3A70.crl
                          rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/D898A501884A69107F2B7763B90247B1A49C3A70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D898A501884A69107F2B7763B90247B1A49C3A70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:44:62:b5:94:8a:fd:9f:fe:9a:51:b1:9d:6a:b5:33:c2:59:64:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D898A501884A69107F2B7763B90247B1A49C3A70
        Validity
            Not Before: Nov 22 13:08:30 2025 GMT
            Not After : Nov 21 13:13:30 2026 GMT
        Subject: CN=1730358C15F0C111FA736B9762205E9C25AEF088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:70:1f:9e:e2:87:70:62:83:3b:94:01:48:
                    ea:95:d1:9b:9d:da:81:04:08:19:56:31:15:4a:fe:
                    6a:2c:be:26:82:29:3e:1e:f3:66:ee:96:41:d5:de:
                    ce:65:f3:5f:0e:2b:7a:ef:ed:99:ae:d2:54:2f:31:
                    25:c8:37:a8:93:36:89:5f:1a:c7:e9:4e:31:69:15:
                    34:89:f1:d5:bf:82:3d:9f:a8:f5:fa:ca:04:77:68:
                    3c:d1:8f:f5:a6:c9:51:2d:1b:e2:0d:79:ec:ae:d6:
                    53:97:24:84:a5:e5:ce:f4:3d:03:ea:a1:f4:af:63:
                    18:d8:c9:49:35:3e:12:7e:23:26:ca:bb:75:e2:43:
                    75:99:7a:dc:1d:6d:e8:1a:68:23:44:87:b4:2f:63:
                    e8:05:21:6c:03:59:03:02:19:f2:9d:7d:c2:c2:16:
                    bc:93:a9:52:dd:b8:c6:c5:d0:49:be:9d:43:63:04:
                    19:9f:39:fe:fd:1e:03:92:56:a1:e0:99:2d:7e:35:
                    76:89:4d:c8:29:37:a7:04:79:73:52:5e:7f:95:97:
                    b6:3e:e3:76:66:1e:eb:15:2b:d3:09:e2:82:0a:9a:
                    c0:1e:70:91:35:82:c4:e8:8d:b8:35:b0:ce:96:65:
                    8b:3f:01:fd:5d:1f:2c:3e:b5:81:a5:b6:10:e5:78:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:30:35:8C:15:F0:C1:11:FA:73:6B:97:62:20:5E:9C:25:AE:F0:88
            X509v3 Authority Key Identifier:
                keyid:D8:98:A5:01:88:4A:69:10:7F:2B:77:63:B9:02:47:B1:A4:9C:3A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/D898A501884A69107F2B7763B90247B1A49C3A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D898A501884A69107F2B7763B90247B1A49C3A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeGzerkurV2wGFWMa9h2MeFubJ5g1DEtA9AUGnvRL73C/0/3138362e3233322e3136302e302f32342d3234203d3e203533313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:52:ba:60:a9:52:78:d0:bd:f5:4e:b0:13:0c:c1:64:33:
         d1:f8:71:4e:21:86:d1:e8:1c:1a:55:9e:b1:b9:0f:fa:af:1c:
         f9:73:b0:b2:cd:62:fe:dd:e3:69:fc:f0:78:cd:db:af:89:dc:
         a4:e1:54:68:c6:43:9d:0f:09:a2:63:4e:65:81:51:50:80:6a:
         8c:1e:09:d5:ee:ef:7f:07:32:59:e3:ee:68:30:f9:d7:3e:3d:
         3d:75:90:a5:cf:53:35:2d:35:e3:3a:b0:c0:25:45:26:17:2e:
         b8:50:8d:15:49:1c:49:e4:10:5b:e9:61:b7:da:e5:d3:da:31:
         21:14:58:6b:d6:e1:88:fa:1a:1a:6a:d1:ee:2f:80:84:5a:65:
         ad:bd:b0:65:7f:6d:b3:d3:4e:f1:19:2b:ee:54:4d:57:39:8d:
         c0:fa:85:fb:51:76:2c:e6:7b:34:7f:28:c2:d9:09:fe:d7:71:
         e6:ea:82:8c:6b:16:90:ce:c6:81:89:77:82:02:60:1e:f0:a0:
         bd:c6:0d:3f:48:47:d5:5e:e2:c0:54:ac:77:2f:c2:b9:ad:a6:
         af:0a:09:e7:0a:64:0d:1e:57:3b:66:8e:6d:07:44:28:d1:cb:
         b3:c1:82:bb:c6:da:4b:43:53:6e:54:2e:91:7a:87:dd:6b:8d:
         d8:39:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:05 2025 by rpki-client