This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34312e302f32342d3234203d3e20323632383735.roa
File:                     3138392e3131332e34312e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          6JBIvm7N9BKFzbactUHrBmlcgjvk478usyu5pelMV20=
Subject key identifier:   0D:B2:B0:39:5E:49:9D:8A:6A:BC:D0:10:1B:F1:5C:8B:E7:59:AC:BF
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       1CCAE1DA60E7D8C9A50E73E9CF61F91C52C1D828
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34312e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 04 Dec 2025 13:38:46 +0000
ROA not before:           Thu 04 Dec 2025 13:33:46 +0000
ROA not after:            Thu 03 Dec 2026 13:38:46 +0000
asID:                     262875
IP address blocks:        189.113.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ca:e1:da:60:e7:d8:c9:a5:0e:73:e9:cf:61:f9:1c:52:c1:d8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Dec  4 13:33:46 2025 GMT
            Not After : Dec  3 13:38:46 2026 GMT
        Subject: CN=0DB2B0395E499D8A6ABCD0101BF15C8BE759ACBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:a2:66:86:16:b7:88:3e:54:56:04:3a:dc:
                    34:04:0b:be:60:1e:f8:18:8f:18:81:f0:1d:d2:c9:
                    35:00:c6:e1:cc:68:cb:8f:af:41:a6:86:de:80:27:
                    6f:67:78:ef:44:30:2a:c1:37:3e:63:c8:2b:8b:c7:
                    43:5d:4d:fb:05:75:36:84:39:cb:d3:e4:65:91:aa:
                    2f:08:63:66:0b:94:63:c7:4f:94:8e:e2:e2:f6:92:
                    ef:a7:83:33:ed:84:47:55:f3:2c:90:f2:44:e6:f7:
                    dd:06:b7:a6:7a:6d:74:48:d8:ae:34:07:4e:b9:79:
                    50:cd:24:fc:d2:66:e6:1b:30:53:ba:09:49:61:21:
                    55:aa:8c:8b:82:bf:d2:c1:4e:f6:9d:db:26:24:e2:
                    c8:8b:4f:44:b5:01:e3:4b:bf:a7:99:c5:3d:ee:84:
                    e4:f9:6d:00:37:e2:58:9f:67:db:4c:d5:3c:54:bc:
                    91:d9:1e:1d:1c:d9:aa:98:4a:a8:59:18:ba:f5:37:
                    0c:f9:8e:ef:e2:2d:21:a5:31:ca:72:c0:92:ed:dc:
                    a8:79:8b:79:23:54:a3:17:1c:31:49:31:ee:ad:7f:
                    e3:6d:5d:c5:ca:a8:e0:60:61:d4:c0:43:7a:44:4b:
                    c6:9f:dd:ec:c3:82:74:b0:cb:0c:de:9a:6b:67:8a:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B2:B0:39:5E:49:9D:8A:6A:BC:D0:10:1B:F1:5C:8B:E7:59:AC:BF
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34312e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:1e:63:49:62:2a:26:3a:23:d3:6a:ea:a3:c5:fd:64:a6:
         74:d0:5d:f2:52:8a:d6:3e:a5:fb:05:bf:f9:af:8a:b2:f8:97:
         80:82:b1:f4:6d:9d:ee:55:ae:b4:b2:f1:ae:20:eb:84:a6:dd:
         45:ba:32:ab:7b:7c:ff:ed:22:db:b5:68:27:b8:79:ab:8e:c0:
         5c:59:4e:1f:58:80:e3:38:53:de:6f:08:97:4c:d8:15:0c:23:
         18:87:03:ea:f2:4e:e3:b0:a2:7b:b3:1f:3e:8c:91:51:ab:13:
         5a:24:5e:fe:e8:ad:d0:da:8c:42:83:b9:9b:f8:7b:d0:b9:f0:
         92:b3:49:af:c5:75:fe:c7:b4:2c:ee:2f:39:4b:1d:c9:aa:bf:
         dc:59:9e:82:70:a5:04:25:71:81:f2:ab:27:02:15:ba:ad:65:
         29:60:b6:5e:07:28:92:a9:29:b8:d0:b9:2b:c1:8c:83:91:50:
         46:13:4a:82:cf:0c:a3:a8:fd:cc:b4:4a:87:18:c9:6a:28:cb:
         b3:fb:0a:e6:05:12:9e:4f:19:86:c3:c5:95:4d:49:cf:21:02:
         ac:eb:77:08:74:dd:cc:30:05:da:fa:7f:e3:f4:79:c0:4b:23:
         0c:53:05:5f:82:03:62:fe:35:77:e8:f1:e9:55:a3:a7:a8:3c:
         c6:60:a2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:19:39 2025 by rpki-client