This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131302e302f32342d3234203d3e20323730333732.roa
File:                     3139302e38392e3131302e302f32342d3234203d3e20323730333732.roa (raw, json)
Hash identifier:          eVRzmi/8EHGprUsqpBzctI3xlkNez2myVeLtfU+ojmE=
Subject key identifier:   6B:FB:64:92:A8:93:88:C3:B2:05:CD:63:A5:D9:50:31:9D:0B:42:BC
Certificate issuer:       /CN=333AAB9C5800B382505D0F07C8D2EAE0547A8531
Certificate serial:       625926A890552B35666784CD75A21DD9658948B0
Authority key identifier: 33:3A:AB:9C:58:00:B3:82:50:5D:0F:07:C8:D2:EA:E0:54:7A:85:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131302e302f32342d3234203d3e20323730333732.roa
Signing time:             Thu 11 Dec 2025 01:56:47 +0000
ROA not before:           Thu 11 Dec 2025 01:51:47 +0000
ROA not after:            Thu 10 Dec 2026 01:56:47 +0000
asID:                     270372
IP address blocks:        190.89.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.crl
                          rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:59:26:a8:90:55:2b:35:66:67:84:cd:75:a2:1d:d9:65:89:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333AAB9C5800B382505D0F07C8D2EAE0547A8531
        Validity
            Not Before: Dec 11 01:51:47 2025 GMT
            Not After : Dec 10 01:56:47 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:de:ef:6f:aa:fd:ee:69:64:9d:bc:48:e2:
                    41:5a:11:b8:4a:d2:83:6f:90:dd:16:fd:70:64:44:
                    3b:17:31:49:01:4e:9b:9a:26:37:32:45:ba:6d:40:
                    d6:29:2a:aa:bd:bf:ed:55:ad:51:17:fd:8f:85:35:
                    f4:e1:ac:eb:37:6e:a9:42:e9:7e:dc:a2:51:e6:fc:
                    8f:ef:bb:86:5d:f2:3a:0c:9f:95:99:e6:ee:5d:ff:
                    f8:b4:4a:fb:a2:2e:ce:9a:5a:e6:e1:49:b5:3b:cd:
                    6f:62:6c:aa:7e:94:b8:74:cc:66:3b:15:c4:e9:4e:
                    81:7f:35:c5:2d:38:14:97:67:e4:41:d2:e5:be:ff:
                    10:4f:6f:d7:1b:85:38:2e:3d:9e:4c:e1:30:45:21:
                    a9:42:68:f9:5e:7f:3f:75:82:9f:22:9d:2c:a1:96:
                    11:39:56:b8:6d:c4:c0:a9:c9:a0:4b:d8:2d:8d:4a:
                    4c:5a:b4:d4:26:70:52:12:c4:33:41:70:6b:ef:22:
                    8d:0b:5d:90:3a:3d:9b:0c:1e:9a:a0:61:00:47:5b:
                    b3:16:3b:a8:2a:e4:81:53:83:b2:2a:c4:88:f2:d7:
                    f5:ca:4f:fb:29:d7:89:12:c4:7b:a5:ad:2c:83:64:
                    e8:5d:79:e9:2a:12:d1:85:ce:1e:89:4f:e9:e1:86:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FB:64:92:A8:93:88:C3:B2:05:CD:63:A5:D9:50:31:9D:0B:42:BC
            X509v3 Authority Key Identifier:
                keyid:33:3A:AB:9C:58:00:B3:82:50:5D:0F:07:C8:D2:EA:E0:54:7A:85:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131302e302f32342d3234203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:84:1e:e1:95:a3:9d:a3:f4:10:b1:5f:6f:03:f7:96:87:
         4e:68:68:d4:58:10:b0:7c:a1:9e:3d:e8:2b:a7:6c:24:88:66:
         fa:f2:c8:58:b9:bc:89:38:cb:1b:f1:c4:13:d0:6a:65:85:0b:
         65:86:79:36:61:41:a5:e4:9d:36:bd:85:ff:ab:19:3d:16:40:
         16:b5:9a:1a:87:ea:b2:70:92:4b:ca:b1:0c:83:59:fd:e3:46:
         4d:a5:9e:e5:e4:12:11:e5:f7:0c:02:4d:2d:f1:2b:f4:4e:4e:
         77:22:28:ac:3c:67:0d:8e:92:29:7e:46:aa:b0:ac:5f:27:bc:
         cb:66:9c:bf:0e:ae:3a:ff:64:71:36:39:08:2d:e9:09:98:25:
         a1:4e:b6:1c:5b:d6:4e:fb:25:5e:53:38:57:5b:88:99:45:10:
         11:11:94:80:74:89:aa:86:78:1a:4b:94:21:a6:8b:65:87:e5:
         3f:dd:74:60:30:d7:b7:5e:03:00:55:e7:eb:34:ca:b2:3b:e4:
         ac:75:ff:1e:e5:b1:b9:7a:27:9c:b0:e9:9e:a5:4a:93:88:22:
         36:24:b7:c6:8e:dd:52:65:23:c7:fb:4c:9c:5e:3a:da:a6:54:
         5b:54:cb:e6:49:7a:9c:a0:7b:f3:83:ef:cd:97:3d:fa:2a:7b:
         78:a1:1b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:28:52 2025 by rpki-client