This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3130382e302f32342d3234203d3e20323730333732.roa
File:                     3139302e38392e3130382e302f32342d3234203d3e20323730333732.roa (raw, json)
Hash identifier:          rjTrSrIKbVUJpFUcCv7ajHjJSHBvC98DEW0Nwq5hy7g=
Subject key identifier:   AC:5D:EE:60:F6:E9:56:E2:EA:12:8D:A5:BF:40:4C:65:CE:DE:B8:F4
Certificate issuer:       /CN=333AAB9C5800B382505D0F07C8D2EAE0547A8531
Certificate serial:       49A8FD066A3D9FCF9F41827C9258418C4A83ACFE
Authority key identifier: 33:3A:AB:9C:58:00:B3:82:50:5D:0F:07:C8:D2:EA:E0:54:7A:85:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3130382e302f32342d3234203d3e20323730333732.roa
Signing time:             Thu 11 Dec 2025 01:56:38 +0000
ROA not before:           Thu 11 Dec 2025 01:51:38 +0000
ROA not after:            Thu 10 Dec 2026 01:56:38 +0000
asID:                     270372
IP address blocks:        190.89.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.crl
                          rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a8:fd:06:6a:3d:9f:cf:9f:41:82:7c:92:58:41:8c:4a:83:ac:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333AAB9C5800B382505D0F07C8D2EAE0547A8531
        Validity
            Not Before: Dec 11 01:51:38 2025 GMT
            Not After : Dec 10 01:56:38 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7f:29:c8:1b:8f:d5:a1:b0:38:1a:d9:6b:e0:
                    8a:09:d7:4e:6c:0c:7a:17:0f:c3:f2:3f:c3:d0:f2:
                    ed:7f:72:7e:5f:4d:b8:ac:a4:be:40:b9:d1:b5:56:
                    59:dd:d3:41:8e:3d:28:9d:36:64:f1:ca:fa:0a:70:
                    73:7e:41:3f:da:8f:11:69:5f:de:fc:5b:67:0f:25:
                    42:2f:c3:f2:84:91:ac:92:5e:30:db:4e:81:9f:e0:
                    42:89:b7:2b:3b:96:9f:9b:21:09:ff:09:a9:34:b8:
                    38:d9:f3:c0:73:76:64:d6:f8:0a:2c:49:39:4a:fd:
                    87:b0:3c:c4:b6:1f:33:21:cd:63:d2:a1:09:50:0a:
                    7a:60:ba:1e:34:ed:36:a5:82:7e:9a:b0:eb:0e:34:
                    4f:a8:ab:75:51:71:bf:79:fa:27:1a:81:28:4f:3a:
                    f0:c0:44:60:96:ec:b6:6d:fa:37:83:f0:78:ad:f2:
                    be:39:c5:f7:fb:1d:b7:ee:51:8a:8a:85:dc:0f:70:
                    38:9e:10:7c:c5:a0:b3:65:1c:b6:2b:df:e6:45:68:
                    b4:32:16:10:e2:f7:ff:0a:ef:f6:d2:bf:d6:e8:16:
                    4f:3c:e3:76:03:a6:93:5f:f8:3b:7a:c1:a4:5e:e6:
                    89:3d:ba:e3:4c:e4:19:f2:94:8b:79:fe:ce:81:cd:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:EE:60:F6:E9:56:E2:EA:12:8D:A5:BF:40:4C:65:CE:DE:B8:F4
            X509v3 Authority Key Identifier:
                keyid:33:3A:AB:9C:58:00:B3:82:50:5D:0F:07:C8:D2:EA:E0:54:7A:85:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3130382e302f32342d3234203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:6e:56:bb:9c:9b:a3:79:97:23:dc:2e:64:48:49:dc:6c:
         5b:e2:01:29:9a:05:f7:cf:b7:42:d5:a5:fe:07:ef:67:a3:d0:
         c7:8e:da:45:bb:b0:9c:d1:6a:a1:e5:a4:07:49:18:ca:dc:0c:
         60:a2:92:a3:f0:50:3a:c3:83:db:b7:42:73:16:fe:30:6f:65:
         09:cc:31:eb:87:ba:e0:d1:59:8f:98:9d:50:90:de:a6:14:de:
         66:bf:0b:e5:0f:5a:32:c0:68:6d:cd:e3:1b:45:4c:87:ad:2d:
         8b:84:0b:09:62:30:27:49:f2:f3:7c:2e:ed:68:16:56:56:f1:
         c9:d6:27:d9:57:b2:34:e5:a8:b6:f8:ef:ec:b3:3d:a5:73:ca:
         e6:13:ca:18:be:79:fb:3e:db:c5:9d:a6:62:07:81:2c:06:d0:
         38:a0:c0:b5:a5:51:72:7d:44:09:00:92:a5:c0:7e:40:78:95:
         d6:e9:e5:4c:5d:c4:bd:eb:73:ff:5b:5c:bb:31:81:8d:56:c4:
         04:53:ac:1b:60:d1:13:c8:0a:fb:5c:39:56:f2:8b:2c:62:e6:
         99:ed:22:68:4c:26:df:6d:c5:45:62:f8:ca:55:49:d0:93:3f:
         d3:50:a2:fb:97:7a:c1:13:6f:05:98:06:42:bd:e6:38:44:30:
         dc:86:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:28:51 2025 by rpki-client