This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39382e302f32342d3234203d3e20323634313431.roa
File:                     3138362e3235302e39382e302f32342d3234203d3e20323634313431.roa (raw, json)
Hash identifier:          2Q+tGNE4CxKTXd1NXe4Plox3p4ZhMVBmE9nOXxdgsIE=
Subject key identifier:   00:E6:8F:5B:21:9D:1E:7A:E2:1A:8E:FD:7B:E2:50:48:90:6E:CB:E6
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       15E6B892A20516AC7C12822C5E5A0D2889B80411
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39382e302f32342d3234203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:52 +0000
ROA not before:           Thu 04 Dec 2025 20:33:52 +0000
ROA not after:            Thu 03 Dec 2026 20:38:52 +0000
asID:                     264141
IP address blocks:        186.250.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e6:b8:92:a2:05:16:ac:7c:12:82:2c:5e:5a:0d:28:89:b8:04:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:52 2025 GMT
            Not After : Dec  3 20:38:52 2026 GMT
        Subject: CN=00E68F5B219D1E7AE21A8EFD7BE25048906ECBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:3d:5c:95:83:0b:6b:24:a5:81:2b:7c:78:
                    5f:d8:88:e0:fa:11:f5:30:ad:2d:ac:73:2c:4f:6a:
                    03:32:85:ed:a6:30:b5:d9:ef:fe:87:3b:4a:8d:37:
                    5d:63:56:d9:5e:1a:6e:c2:f4:7b:d8:c9:2d:f0:65:
                    70:3a:b1:97:92:01:ae:31:e6:02:72:ca:20:5f:0f:
                    03:1a:e6:d5:b9:14:8c:55:66:b2:3d:88:9d:17:77:
                    86:5e:36:64:96:93:db:af:72:05:45:2f:68:5b:08:
                    b1:1a:f6:b8:f7:d4:df:6e:16:53:f0:ad:db:e1:c3:
                    c2:01:b3:de:8e:b9:40:ff:2b:38:9c:6e:0b:60:08:
                    e8:4c:f2:52:9d:f4:cf:c6:5a:3e:87:fb:33:14:e8:
                    83:68:0e:26:f5:15:6f:bf:3d:bc:0b:ff:6f:33:e3:
                    65:d8:94:ff:e5:5a:c1:8d:b6:18:0e:bb:b6:ef:6c:
                    2d:db:50:ba:22:3d:80:de:87:4d:7a:e2:4e:c9:0c:
                    2e:56:1a:56:f2:08:63:7b:3f:d6:ab:16:36:8f:12:
                    35:04:ae:4b:ac:7b:c3:6b:48:48:db:c3:c5:fa:81:
                    b4:b5:57:e2:d0:01:b2:8d:e6:39:eb:d4:2e:03:02:
                    69:77:71:05:ed:5c:6b:25:b5:31:f0:f8:57:f2:98:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E6:8F:5B:21:9D:1E:7A:E2:1A:8E:FD:7B:E2:50:48:90:6E:CB:E6
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e39382e302f32342d3234203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a0:d7:cd:45:38:6f:e0:c9:4b:f6:be:2d:e8:38:16:ae:71:
         1d:9b:fa:a5:02:e3:5d:aa:16:26:6e:5e:be:3c:45:32:dd:ad:
         77:60:60:a2:84:23:48:da:bc:89:11:dc:98:e4:85:fc:d5:5c:
         c4:3d:82:ba:8a:70:8c:8c:2a:da:c1:7c:e1:b0:d7:a2:e4:6b:
         bc:84:2d:e5:28:fc:d5:2b:18:53:e5:fd:1f:d8:70:57:7b:bb:
         22:ab:a3:fc:d8:a7:99:3f:98:2b:db:b9:89:29:92:3d:66:61:
         72:65:4d:c9:28:e5:0b:17:ea:ff:c3:44:77:c3:76:3c:8d:b8:
         5d:bc:b0:aa:13:2f:35:a6:ba:bd:b0:8e:cf:0e:58:9a:d9:7a:
         6b:22:85:bf:74:61:5f:e2:46:e2:3d:b3:cd:39:04:b9:7a:19:
         4a:50:a8:50:fa:a1:08:22:79:43:c5:02:60:b5:27:d9:41:4d:
         9c:13:52:65:1a:39:67:d2:20:8a:d4:c0:59:21:56:61:a1:94:
         fe:08:14:36:9b:84:61:28:d6:2d:b1:76:41:8a:dc:f5:ca:16:
         91:f6:b2:21:ce:42:c1:e3:cc:7c:b0:53:be:f9:bc:71:3a:b2:
         42:07:da:f3:96:54:2c:97:9a:d0:f3:2b:e8:c5:d0:ec:55:16:
         a5:59:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:32:26 2025 by rpki-client