This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33322e302f32312d3231203d3e20323632383735.roa
File:                     3138392e3131332e33322e302f32312d3231203d3e20323632383735.roa (raw, json)
Hash identifier:          3AEcbkBQdn0wKB3BbtWSr+ZpcqfJZ6bTu1egjw8TqTo=
Subject key identifier:   DC:49:13:40:A8:5D:5F:C1:EF:64:9B:56:AD:AC:E5:CE:EF:D7:EC:4E
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       7A5194C2D62033B2921228A470FEC33396A3DED9
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33322e302f32312d3231203d3e20323632383735.roa
Signing time:             Thu 04 Dec 2025 13:38:45 +0000
ROA not before:           Thu 04 Dec 2025 13:33:45 +0000
ROA not after:            Thu 03 Dec 2026 13:38:45 +0000
asID:                     262875
IP address blocks:        189.113.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:51:94:c2:d6:20:33:b2:92:12:28:a4:70:fe:c3:33:96:a3:de:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Dec  4 13:33:45 2025 GMT
            Not After : Dec  3 13:38:45 2026 GMT
        Subject: CN=DC491340A85D5FC1EF649B56ADACE5CEEFD7EC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a6:59:55:27:f8:1d:09:7b:96:74:70:68:c4:
                    94:4d:67:1c:68:59:9a:59:d3:63:51:3c:34:21:c8:
                    f8:50:d5:5c:06:0e:fb:1c:5f:31:ae:4c:ce:44:c9:
                    6e:0c:55:d5:2b:7b:26:da:0b:da:2f:02:9b:bb:eb:
                    ff:15:ab:77:67:46:67:ab:2f:b2:c2:13:21:7b:93:
                    74:d6:ed:78:81:07:40:3a:02:f9:74:c9:89:d3:f6:
                    61:05:f5:60:45:1b:08:1f:19:4c:fe:33:fa:2d:fd:
                    ab:b9:d4:f0:de:0b:8e:35:82:81:ef:35:6c:6c:67:
                    ea:00:a8:10:fe:85:78:57:a7:6e:d2:e1:7d:00:f8:
                    ab:07:d0:27:74:9a:5b:37:80:35:9c:27:77:dd:69:
                    db:2b:2e:4b:eb:77:3c:e0:53:3f:27:9b:59:29:1b:
                    f1:14:e7:69:1e:5c:aa:e2:e6:a5:a4:f4:c7:89:63:
                    8a:a7:75:8f:21:1d:e7:05:db:6c:cb:1d:4b:ab:53:
                    d1:66:19:5a:d3:0c:2b:3e:71:52:67:96:a4:72:95:
                    9d:a1:a6:e5:fe:e6:c6:00:f7:4c:f9:70:79:b4:5f:
                    51:69:a3:d9:07:02:84:c4:20:19:b5:ff:50:03:4e:
                    d4:07:0c:62:a5:a0:fd:b1:d5:86:d3:e2:aa:55:59:
                    74:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:49:13:40:A8:5D:5F:C1:EF:64:9B:56:AD:AC:E5:CE:EF:D7:EC:4E
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33322e302f32312d3231203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:92:0b:8b:c3:6b:70:a5:a8:44:54:48:81:44:cb:ac:3c:
         3a:1a:24:b2:51:bc:a0:86:a4:15:aa:85:ea:f1:d3:16:0b:fb:
         65:21:d4:4d:c0:9e:cf:f0:72:80:f0:a4:a1:36:7d:99:1c:5c:
         6f:6d:b2:d8:a7:13:e5:d7:b9:8a:11:c5:f2:4e:ed:69:2a:61:
         dd:4c:9f:65:c8:61:7d:e7:98:cb:30:c6:07:a9:3f:31:ca:1c:
         d1:bc:f9:0a:48:de:e5:97:14:6e:0a:00:fc:88:40:2b:e6:99:
         58:27:b8:6e:46:e3:26:41:15:12:56:b8:23:67:31:65:e1:6f:
         4c:94:61:31:1d:4d:27:d5:f8:ee:96:90:55:9f:45:de:ed:50:
         2d:33:ec:1f:6a:73:f5:8f:4a:85:60:ec:11:0c:54:a9:a4:f8:
         5a:33:e6:d8:61:13:aa:2a:68:1b:a0:b6:26:f6:b4:5a:93:eb:
         cf:a1:43:7f:f4:24:87:fb:fb:f0:c7:83:99:7f:bb:6b:41:eb:
         c8:85:6c:fa:80:26:d4:06:51:bc:8e:10:a1:8b:84:cf:fb:79:
         03:a3:4f:28:75:7e:fb:fb:86:93:c8:7c:93:c5:63:8f:ef:9c:
         9f:e1:ea:52:b1:eb:bf:82:f5:aa:cd:3e:b8:b4:b2:82:42:75:
         26:fd:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:11:00 2025 by rpki-client