This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32342d3234203d3e203532383338.roa
File:                     3133382e302e3138382e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier:          h+6I5XCg9wtLkyzfcPHf7Zn5Ubgbg3GJtc+qNVqrAHM=
Subject key identifier:   66:58:FC:82:EB:FA:6B:40:77:87:A0:7B:4C:3C:31:8D:64:67:AE:36
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       68F4BB86DFD81F5ECFA1A0723402CE2CDF11DA5B
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32342d3234203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:33:51 +0000
ROA not before:           Wed 03 Dec 2025 00:28:51 +0000
ROA not after:            Wed 02 Dec 2026 00:33:51 +0000
asID:                     52838
IP address blocks:        138.0.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f4:bb:86:df:d8:1f:5e:cf:a1:a0:72:34:02:ce:2c:df:11:da:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:28:51 2025 GMT
            Not After : Dec  2 00:33:51 2026 GMT
        Subject: CN=6658FC82EBFA6B407787A07B4C3C318D6467AE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:b0:06:b2:86:72:4d:fc:07:4a:05:81:fc:
                    4e:cc:4a:10:e9:80:5a:42:58:0b:92:6d:5c:d6:b0:
                    77:3d:65:bd:af:92:4c:19:bf:bd:33:95:98:66:be:
                    75:54:f8:b9:d6:43:18:c1:ec:f1:4d:69:e8:eb:2e:
                    f6:4e:c6:d2:23:f5:ca:1c:c3:d9:4c:5f:79:f9:f1:
                    30:6c:93:89:01:91:e0:21:a6:ba:b6:b9:79:10:76:
                    49:32:ab:d5:70:7d:d0:83:d5:eb:79:b9:06:df:77:
                    51:6e:24:aa:05:04:6b:fd:f5:d4:85:ae:04:e4:bd:
                    c9:94:7c:83:c0:f1:59:38:29:51:88:55:bc:95:30:
                    88:3e:62:fd:fb:49:8b:d7:18:51:d3:84:f3:4b:ee:
                    99:0d:13:58:fd:ee:3f:75:67:d4:35:52:09:b2:f4:
                    e1:e5:38:2f:9f:d0:47:1c:e6:4c:18:29:cf:4b:28:
                    a0:0c:c3:0e:f2:7a:a2:7f:40:1e:fb:fb:aa:2d:c0:
                    a7:cf:d6:27:82:40:20:85:53:a8:74:70:e9:ed:23:
                    2b:31:0a:c9:15:1d:2f:b8:21:d5:da:d4:19:54:d8:
                    f4:96:6a:45:2a:4d:3b:81:02:21:fb:2b:af:e7:e1:
                    68:e4:07:bc:24:ac:42:2f:2c:0a:60:0d:d6:97:26:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:58:FC:82:EB:FA:6B:40:77:87:A0:7B:4C:3C:31:8D:64:67:AE:36
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32342d3234203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:4e:d9:d9:01:8a:e9:d2:8d:d9:9a:f7:d5:59:92:4c:52:
         9e:9f:18:d2:00:29:1b:21:2b:6d:2a:1f:21:96:59:97:07:0a:
         4c:bf:62:b4:d6:78:fb:9e:ec:71:d4:93:73:d2:04:43:ae:bc:
         70:45:48:0e:cb:28:15:a9:ed:dc:e6:0b:42:4c:8f:53:dc:a5:
         66:30:10:83:40:59:0e:f7:2e:b6:c6:6b:48:25:3d:41:f3:0b:
         bc:60:c1:ac:37:29:84:9a:35:ea:e5:88:23:1c:94:62:63:11:
         12:68:0e:a2:14:5c:d3:3d:7c:f5:1d:92:09:d2:c8:bf:57:f7:
         57:90:8c:2d:a4:d2:b8:57:68:bf:db:99:bf:d8:a1:ae:2a:2e:
         5e:75:24:fc:a9:b7:72:96:1f:3a:f8:dd:fb:ab:f9:31:ec:4a:
         9d:63:67:84:d2:fb:76:dd:c7:8b:bf:40:b1:df:3b:2a:97:04:
         f2:04:65:e3:b7:37:2f:71:0b:a8:31:0a:b2:7c:5a:1b:e4:36:
         fa:c4:76:5d:d7:f5:e3:52:cc:04:00:26:3c:86:00:ca:38:4a:
         da:f2:01:43:8e:b7:0a:fb:72:f0:b1:b1:a8:c5:e8:16:7c:c2:
         2f:ac:4e:ee:17:d3:ef:bd:c5:87:11:2a:ec:70:bd:14:28:d2:
         9d:04:87:61
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUaPS7ht/YH17PoaByNALOLN8R2lswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC
MzIwNDgyOTAeFw0yNTEyMDMwMDI4NTFaFw0yNjEyMDIwMDMzNTFaMDMxMTAvBgNV
BAMTKDY2NThGQzgyRUJGQTZCNDA3Nzg3QTA3QjRDM0MzMThENjQ2N0FFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsi7AGsoZyTfwHSgWB/E7MShDp
gFpCWAuSbVzWsHc9Zb2vkkwZv70zlZhmvnVU+LnWQxjB7PFNaejrLvZOxtIj9coc
w9lMX3n58TBsk4kBkeAhprq2uXkQdkkyq9VwfdCD1et5uQbfd1FuJKoFBGv99dSF
rgTkvcmUfIPA8Vk4KVGIVbyVMIg+Yv37SYvXGFHThPNL7pkNE1j97j91Z9Q1Ugmy
9OHlOC+f0Ecc5kwYKc9LKKAMww7yeqJ/QB77+6otwKfP1ieCQCCFU6h0cOntIysx
CskVHS+4IdXa1BlU2PSWakUqTTuBAiH7K6/n4WjkB7wkrEIvLApgDdaXJoRvAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUZlj8guv6a0B3h6B7TDwxjWRnrjYwHwYDVR0j
BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz
RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzEz
MzM4MmUzMDJlMzEzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM4MzMz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIoAvDANBgkqhkiG9w0BAQsFAAOCAQEAR/xO2dkBiunSjdma
99VZkkxSnp8Y0gApGyErbSofIZZZlwcKTL9itNZ4+57scdSTc9IEQ668cEVIDsso
Fant3OYLQkyPU9ylZjAQg0BZDvcutsZrSCU9QfMLvGDBrDcphJo16uWIIxyUYmMR
EmgOohRc0z189R2SCdLIv1f3V5CMLaTSuFdov9uZv9ihriouXnUk/Km3cpYfOvjd
+6v5MexKnWNnhNL7dt3Hi79Asd87KpcE8gRl47c3L3ELqDEKsnxaG+Q2+sR2Xdf1
41LMBAAmPIYAyjhK2vIBQ463Cvty8LGxqMXoFnzCL6xO7hfT773FhxEq7HC9FCjS
nQSHYQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:12 2025 by rpki-client