This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32322d3232203d3e203532383338.roa
File:                     3133382e302e3138382e302f32322d3232203d3e203532383338.roa (raw, json)
Hash identifier:          PBh1G7RnX7vTmU9RPkSKMhSP3unxJsjyFAJ/Gd4Vgjw=
Subject key identifier:   3F:35:85:81:31:1B:33:6F:3D:D7:E8:AD:26:C7:C0:96:EB:0D:B5:61
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       5A7ED5EC058866FC5F011F425EE7A99EF925EEF1
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32322d3232203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:32:27 +0000
ROA not before:           Wed 03 Dec 2025 00:27:27 +0000
ROA not after:            Wed 02 Dec 2026 00:32:27 +0000
asID:                     52838
IP address blocks:        138.0.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7e:d5:ec:05:88:66:fc:5f:01:1f:42:5e:e7:a9:9e:f9:25:ee:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:27:27 2025 GMT
            Not After : Dec  2 00:32:27 2026 GMT
        Subject: CN=3F358581311B336F3DD7E8AD26C7C096EB0DB561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ec:4b:8c:07:ee:b1:a7:ec:ef:1c:ae:42:c3:
                    a0:3f:17:cc:82:36:05:26:8f:89:1b:f8:62:92:87:
                    ca:b2:a6:5b:f6:70:67:85:af:98:83:6e:5e:dd:11:
                    3e:2e:7c:39:ae:4c:9d:a9:f3:85:d9:71:a2:99:d6:
                    3e:33:b3:a0:ef:92:ec:42:7c:67:19:6d:85:1e:87:
                    c2:cd:42:63:1e:7d:fa:06:07:8a:aa:16:71:ae:00:
                    ec:74:9a:fe:db:c2:08:98:75:39:8d:8f:96:c4:b1:
                    ee:19:0a:92:2e:90:34:2c:aa:42:a8:7a:a6:d3:e2:
                    f3:55:bf:42:da:eb:1b:ab:d1:f1:78:6e:3a:7a:54:
                    80:dd:bc:55:14:af:20:04:98:84:97:4f:e5:0d:a3:
                    46:ae:e3:50:7a:44:0d:e3:46:eb:b7:80:05:31:32:
                    5f:7d:69:0f:c5:ca:ad:8f:b0:be:2a:2d:cc:8f:2a:
                    53:ac:5d:c5:7e:f8:3f:a5:74:44:6a:f2:d6:33:99:
                    e0:b1:fc:c4:29:da:a0:ce:53:17:19:97:de:d6:2e:
                    6f:cb:b9:0d:1c:28:a5:3a:af:eb:2f:0e:2a:45:b8:
                    37:b4:63:f0:e1:00:25:4b:fd:9b:e0:51:b9:14:7c:
                    cf:d1:93:ee:5e:fe:0c:03:e3:3b:44:d5:3a:c1:26:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:35:85:81:31:1B:33:6F:3D:D7:E8:AD:26:C7:C0:96:EB:0D:B5:61
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32322d3232203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:fa:2a:58:e6:63:9a:13:3f:03:53:00:c7:3c:c8:14:da:
         47:f1:8e:7f:6c:25:1f:09:32:88:1d:1a:b7:43:30:bb:07:28:
         2c:9b:cd:ba:30:90:63:d9:f7:5e:d0:6a:1d:c8:02:7b:21:ee:
         d5:e3:d3:7d:4e:65:b2:a3:9b:e7:f1:00:2f:d1:ce:5d:fd:82:
         4b:01:01:d0:19:6f:90:4d:f3:59:5a:f5:ca:5f:88:f0:e0:c2:
         c9:43:6b:5d:4c:31:2b:dd:4a:d2:21:7f:dc:cc:10:f8:b1:35:
         de:f9:40:78:bf:1e:3a:ea:d7:98:46:8d:16:51:98:08:e4:7b:
         0f:d0:35:c4:b3:8e:27:ce:0e:34:e8:f3:26:9d:f8:fe:9a:0d:
         99:59:d8:45:3c:60:9f:98:60:d5:41:57:66:c2:0c:3e:d9:27:
         ec:d5:e8:44:7e:42:7c:57:ae:30:70:6b:c7:80:5e:a6:4e:6b:
         29:1c:bb:88:d4:2c:0e:23:f9:fe:a5:5d:d4:c5:eb:11:c6:0c:
         c0:21:47:5a:e9:24:5f:0d:b9:2e:82:62:e6:f4:48:ea:0c:8f:
         0d:95:0f:5b:e1:71:60:49:29:3d:dc:2c:ef:94:59:85:0c:3c:
         2f:ff:84:13:b7:53:c5:0e:23:cb:03:5f:27:74:9f:af:9c:5e:
         84:7c:bf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:21 2025 by rpki-client