This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39382e302f32332d3233203d3e20323634313431.roa
File:                     3138362e3235302e39382e302f32332d3233203d3e20323634313431.roa (raw, json)
Hash identifier:          N10TnbimYvvdoeoABg+iT5GogvutxqWLe7dv0mrpt8I=
Subject key identifier:   B8:FF:D4:0F:45:7A:ED:F2:9E:FD:7E:56:27:0B:02:1B:AA:B1:BF:B9
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       70F47574468A7DD387FE07C39040C102F93ECB1C
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39382e302f32332d3233203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:50 +0000
ROA not before:           Thu 04 Dec 2025 20:33:50 +0000
ROA not after:            Thu 03 Dec 2026 20:38:50 +0000
asID:                     264141
IP address blocks:        186.250.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f4:75:74:46:8a:7d:d3:87:fe:07:c3:90:40:c1:02:f9:3e:cb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:50 2025 GMT
            Not After : Dec  3 20:38:50 2026 GMT
        Subject: CN=B8FFD40F457AEDF29EFD7E56270B021BAAB1BFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:9f:96:c4:56:e3:72:e8:67:27:bf:9b:b5:
                    37:4e:15:7b:45:db:8d:0d:c8:fb:01:1f:2d:2a:9d:
                    01:00:71:95:43:b5:26:ac:2c:23:10:23:9b:95:24:
                    25:44:7f:90:07:fb:69:24:8c:cc:a6:e1:c9:6f:0f:
                    fd:c3:2c:94:39:36:e8:74:66:84:09:aa:a8:d3:d1:
                    2b:47:61:1f:54:c4:96:b5:4b:44:51:22:9f:92:d4:
                    27:3d:2b:da:f3:80:e0:b2:08:7d:97:aa:95:01:26:
                    54:d1:a9:fd:59:52:6d:b2:46:d5:7a:0c:52:55:c7:
                    6b:ec:dd:b0:f6:95:97:97:15:4e:ad:34:65:f3:44:
                    4b:49:a8:4f:03:dc:d8:9d:6f:11:84:2b:f2:bf:f9:
                    4b:93:44:e1:0c:71:59:93:3a:19:ab:1e:d0:fd:34:
                    7b:d2:6a:97:e8:5e:50:7b:6b:08:79:cb:2b:e2:47:
                    08:98:b0:15:66:74:18:5b:ed:b6:9e:b8:f7:49:53:
                    ee:f6:ff:73:b5:8b:0e:ee:f3:26:c1:86:2f:43:ac:
                    e1:7d:d9:0c:6e:0b:46:ae:63:67:b0:d0:8a:a1:1c:
                    00:85:b9:0b:d4:ff:15:1e:17:26:00:ae:4d:07:1d:
                    6f:58:c4:ce:fd:6d:8a:7b:c4:45:59:3a:70:7e:9d:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FF:D4:0F:45:7A:ED:F2:9E:FD:7E:56:27:0B:02:1B:AA:B1:BF:B9
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39382e302f32332d3233203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:ef:3a:d1:7c:ab:c7:3b:8e:6b:75:82:dc:75:bf:cd:51:a2:
         66:72:08:df:b7:fc:be:96:bc:7d:3b:ed:c5:17:f1:9d:63:5b:
         4c:9c:77:ce:37:36:89:01:5d:f8:33:fb:61:cc:09:65:c4:a8:
         24:f4:d8:c8:39:4d:d1:db:e8:3a:5b:e6:79:35:4e:89:be:86:
         6f:01:24:ce:cb:16:30:8b:4b:db:32:20:36:7b:1f:52:68:af:
         34:6c:52:e1:57:1c:18:43:58:24:87:9b:97:4c:75:8c:23:13:
         48:78:26:a6:bb:8e:85:d9:75:bd:b5:31:ee:e5:92:46:cd:ab:
         12:05:2e:19:f7:55:05:2e:fe:3c:c8:3c:09:a1:5f:4a:51:36:
         a2:28:2f:a2:28:97:02:0e:7f:ad:cf:fe:d1:15:da:f4:fa:2f:
         6b:3a:d6:12:c1:5a:2d:76:ec:cb:36:fc:e9:99:55:71:0c:f3:
         93:10:77:fb:b5:2d:c8:8e:0b:1c:c2:d0:78:9f:a4:a0:42:9a:
         8b:23:9a:ca:50:27:63:81:01:ff:26:92:d4:4a:f6:d3:d0:ef:
         2c:32:73:c4:f5:25:f6:7e:bc:89:96:ac:0c:3f:6c:dc:28:ff:
         0b:1c:34:3f:ea:45:56:bd:ed:e0:70:39:9e:15:6d:13:18:2c:
         25:7e:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:08 2025 by rpki-client