This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34322e302f32342d3234203d3e20323632383735.roa
File:                     3138392e3131332e34322e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          0f9xgRrqP5oeK6SRjW9a1z6PoeYo5mFkRGow4XzFdRw=
Subject key identifier:   DE:2D:A5:4D:7B:0C:BD:C6:84:5F:43:12:08:A0:CD:A8:95:2F:BA:79
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       0DD10BE76C425ADB918BC31D6BD5333036A36E60
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34322e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 04 Dec 2025 13:38:48 +0000
ROA not before:           Thu 04 Dec 2025 13:33:48 +0000
ROA not after:            Thu 03 Dec 2026 13:38:48 +0000
asID:                     262875
IP address blocks:        189.113.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d1:0b:e7:6c:42:5a:db:91:8b:c3:1d:6b:d5:33:30:36:a3:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Dec  4 13:33:48 2025 GMT
            Not After : Dec  3 13:38:48 2026 GMT
        Subject: CN=DE2DA54D7B0CBDC6845F431208A0CDA8952FBA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:4e:12:fe:9b:f7:a6:bd:87:a4:2c:fb:f3:
                    6e:fb:b9:86:a3:46:62:56:00:08:53:61:d3:d6:81:
                    a8:a2:0d:f2:a8:ea:22:7a:9c:be:87:c0:76:68:8e:
                    42:5d:79:fa:c7:c3:6a:4a:66:39:7a:74:08:a1:79:
                    54:14:ed:e7:93:d2:e5:8f:c7:50:87:7c:e7:a1:d0:
                    84:ac:fc:bd:46:f7:0e:1d:2f:4c:4d:8f:a5:eb:8b:
                    c4:ba:86:af:96:4b:ac:d1:29:11:65:20:7b:74:72:
                    3f:71:4a:ad:ca:f6:72:1e:fe:8a:50:c9:4a:79:64:
                    1e:99:3d:8b:e3:86:e7:92:8d:9d:e7:23:d4:7d:c9:
                    92:a6:34:a2:aa:bd:61:a7:a3:97:3a:ba:54:38:20:
                    19:9e:97:95:3c:9b:26:3b:71:3d:cc:56:f0:25:b6:
                    5e:3b:7a:f2:36:31:ca:6b:dc:2a:0a:0c:cc:74:61:
                    06:01:0b:8d:b6:2e:bf:d7:74:e5:a2:f1:11:4c:5b:
                    a0:83:6b:2e:29:8e:3f:8d:73:f0:7f:05:55:e7:f9:
                    34:99:00:9f:5f:1c:f9:82:c7:3b:af:75:ed:db:71:
                    81:04:51:66:5d:2e:8d:3d:3c:a2:16:18:5a:5b:7f:
                    b1:4e:41:26:96:a9:87:70:3b:92:7b:ed:98:ee:89:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2D:A5:4D:7B:0C:BD:C6:84:5F:43:12:08:A0:CD:A8:95:2F:BA:79
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34322e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:3e:c1:d9:ae:6e:f6:0c:ac:20:d3:59:ff:42:28:af:7c:44:
         99:f9:89:71:1b:5d:ad:a1:9d:41:1d:04:9a:bb:32:be:f4:fa:
         9f:48:18:b7:59:66:2c:4e:d5:cb:3e:3b:8c:39:c4:90:f0:22:
         4f:56:49:69:2a:97:99:14:07:8e:47:93:35:70:be:3e:01:c1:
         7a:9a:d2:09:0c:75:48:e2:97:f0:bb:29:22:6c:34:f2:21:72:
         55:db:a0:4a:b3:2a:a9:de:8e:6d:59:c7:cb:1a:f5:6d:cf:a6:
         b0:48:c5:b4:bb:c9:ae:47:03:47:bf:7d:08:70:d0:d7:54:70:
         16:e7:4e:c5:85:94:da:ec:c2:a8:7d:43:ac:79:02:1c:a6:54:
         52:c5:d3:74:9b:53:c2:73:df:c4:24:26:c9:a2:24:57:49:3a:
         c8:6d:85:41:62:f3:03:ec:69:84:b5:44:b3:84:ff:e5:4f:39:
         1e:a9:bd:9d:e8:e4:00:99:32:31:ae:26:c8:ac:27:98:31:60:
         f3:e3:5c:bf:2c:13:b9:b2:eb:34:30:b4:0b:7b:56:57:c8:26:
         ed:04:ff:0e:36:da:34:45:87:db:9c:a6:99:a8:56:46:ec:6d:
         3b:8a:4e:e6:fc:c1:c3:44:19:f4:2c:ec:8c:c8:ad:10:39:94:
         2a:fa:54:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDdEL52xCWtuRi8Mda9UzMDajbmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFDMTI2RTIwNkQwODQzMEExM0VEQTJERkVBOUI2RjlD
NjFCQkY0MTAeFw0yNTEyMDQxMzMzNDhaFw0yNjEyMDMxMzM4NDhaMDMxMTAvBgNV
BAMTKERFMkRBNTREN0IwQ0JEQzY4NDVGNDMxMjA4QTBDREE4OTUyRkJBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzk4S/pv3pr2HpCz78277uYaj
RmJWAAhTYdPWgaiiDfKo6iJ6nL6HwHZojkJdefrHw2pKZjl6dAiheVQU7eeT0uWP
x1CHfOeh0ISs/L1G9w4dL0xNj6Xri8S6hq+WS6zRKRFlIHt0cj9xSq3K9nIe/opQ
yUp5ZB6ZPYvjhueSjZ3nI9R9yZKmNKKqvWGno5c6ulQ4IBmel5U8myY7cT3MVvAl
tl47evI2Mcpr3CoKDMx0YQYBC422Lr/XdOWi8RFMW6CDay4pjj+Nc/B/BVXn+TSZ
AJ9fHPmCxzuvde3bcYEEUWZdLo09PKIWGFpbf7FOQSaWqYdwO5J77ZjuiT79AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3i2lTXsMvcaEX0MSCKDNqJUvunkwHwYDVR0j
BBgwFoAU6sEm4gbQhDChPtot/qm2+cYbv0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDdaY3QyNW1TZml0UnBCTjJvWGhMUEc1bmp2WlRRc2tIOEwybk5Idmhh
WmUvMC9FQUMxMjZFMjA2RDA4NDMwQTEzRURBMkRGRUE5QjZGOUM2MUJCRjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBQzEyNkUyMDZEMDg0MzBB
MTNFREEyREZFQTlCNkY5QzYxQkJGNDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3WmN0MjVtU2ZpdFJwQk4yb1hoTFBHNW5qdlpUUXNrSDhMMm5OSHZoYVplLzAv
MzEzODM5MmUzMTMxMzMyZTM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9cSowDQYJKoZIhvcNAQELBQADggEBAKA+wdmu
bvYMrCDTWf9CKK98RJn5iXEbXa2hnUEdBJq7Mr70+p9IGLdZZixO1cs+O4w5xJDw
Ik9WSWkql5kUB45HkzVwvj4BwXqa0gkMdUjil/C7KSJsNPIhclXboEqzKqnejm1Z
x8sa9W3PprBIxbS7ya5HA0e/fQhw0NdUcBbnTsWFlNrswqh9Q6x5AhymVFLF03Sb
U8Jz38QkJsmiJFdJOshthUFi8wPsaYS1RLOE/+VPOR6pvZ3o5ACZMjGuJsisJ5gx
YPPjXL8sE7my6zQwtAt7VlfIJu0E/w422jRFh9ucppmoVkbsbTuKTub8wcNEGfQs
7IzIrRA5lCr6VBg=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:27 2025 by rpki-client