This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139312e302f32342d3234203d3e203532383338.roa
File:                     3133382e302e3139312e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier:          Ihr2yDYemtGmE43gixxw02wgLipOwhIku0vt3DZGdXk=
Subject key identifier:   E4:0B:E5:9D:93:D5:78:F7:21:11:C2:1C:28:09:D8:EF:B0:DC:96:D6
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       5D2D5E0851802596572F1BF66B638469838E0284
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139312e302f32342d3234203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:35:05 +0000
ROA not before:           Wed 03 Dec 2025 00:30:05 +0000
ROA not after:            Wed 02 Dec 2026 00:35:05 +0000
asID:                     52838
IP address blocks:        138.0.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2d:5e:08:51:80:25:96:57:2f:1b:f6:6b:63:84:69:83:8e:02:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:30:05 2025 GMT
            Not After : Dec  2 00:35:05 2026 GMT
        Subject: CN=E40BE59D93D578F72111C21C2809D8EFB0DC96D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:ea:9a:c0:6f:51:df:5f:37:fd:c6:29:93:
                    00:12:57:dc:f6:73:0a:f3:38:b3:0e:55:78:f8:ef:
                    f0:42:85:e0:d0:72:33:b9:8b:f2:5a:41:0d:35:b5:
                    5e:0f:2b:ee:61:bc:45:73:13:60:83:5c:78:20:42:
                    0a:c7:27:d0:c4:f9:4d:4b:e0:78:06:b5:b6:a4:56:
                    bb:8f:1a:25:f2:04:a2:5e:41:b9:24:53:6b:b8:f8:
                    ee:55:ed:61:51:ab:c9:f4:b1:7a:81:81:5f:9d:d3:
                    4c:ec:31:e6:5f:45:79:bf:30:0e:68:5c:03:5f:f5:
                    bd:ac:25:28:4b:6c:af:67:88:ea:e9:79:e1:7f:ed:
                    b1:03:d2:98:52:80:e8:f4:27:68:b2:b5:57:7b:d6:
                    f6:c4:3e:1f:44:4b:19:f2:de:a2:59:63:9b:b1:1e:
                    6c:03:ca:62:21:e4:9e:e4:6c:04:ec:cc:e8:66:f5:
                    5f:10:16:f0:d0:b0:e2:c6:5e:77:99:73:1a:4d:15:
                    e5:b4:49:76:7f:fa:6e:8a:59:58:f3:01:bb:01:33:
                    e2:45:b9:7d:fd:ec:ab:5f:c3:e3:5e:e1:79:e1:5a:
                    cc:1e:d5:a5:db:46:13:a5:75:68:55:07:3e:ec:54:
                    9b:44:89:a6:5f:1b:73:ec:00:bf:68:48:3e:77:94:
                    69:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0B:E5:9D:93:D5:78:F7:21:11:C2:1C:28:09:D8:EF:B0:DC:96:D6
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139312e302f32342d3234203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:81:3a:5c:8c:f0:60:2b:3c:47:57:48:99:ad:87:10:ae:78:
         6f:e2:aa:6a:2e:70:5c:0a:97:cc:bb:e9:1e:c1:db:32:81:7c:
         de:c7:7f:21:19:b8:ce:27:28:45:bb:2b:cd:16:45:fd:36:f5:
         5a:43:3f:95:ea:b2:67:29:cf:26:c4:b3:c2:dc:c2:9a:b7:d5:
         a1:91:25:dc:c2:71:e4:a7:fa:fc:2d:ed:ad:17:92:5f:7a:84:
         4c:25:9c:1d:d0:04:f0:9a:c5:a8:a7:05:a4:4f:9d:92:a7:75:
         c7:f0:2e:86:0a:c3:2c:63:7c:5e:b7:1b:22:5c:41:f2:c2:5e:
         6d:55:e9:a0:48:6f:4a:86:a8:13:c8:fe:64:f5:c9:fb:9f:8d:
         b8:0d:2f:10:ff:58:70:5b:0d:86:92:1c:95:7b:1b:28:cb:4e:
         5b:ec:d2:79:53:0b:a3:2b:83:c7:87:a4:07:d3:ae:a0:91:9c:
         27:b2:dc:56:17:9d:b9:8e:c7:4d:44:b0:70:25:37:01:01:06:
         c3:dd:73:7a:23:81:dc:98:2d:fe:39:9d:93:30:05:54:0c:e1:
         10:67:e6:d1:09:70:52:7f:82:3e:66:0e:b8:6e:b9:3c:0d:6a:
         db:13:60:5f:58:ce:a3:36:8b:dc:d7:68:3f:4f:ac:5f:27:76:
         c5:d7:d3:c0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUXS1eCFGAJZZXLxv2a2OEaYOOAoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC
MzIwNDgyOTAeFw0yNTEyMDMwMDMwMDVaFw0yNjEyMDIwMDM1MDVaMDMxMTAvBgNV
BAMTKEU0MEJFNTlEOTNENTc4RjcyMTExQzIxQzI4MDlEOEVGQjBEQzk2RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQ+qawG9R3183/cYpkwASV9z2
cwrzOLMOVXj47/BCheDQcjO5i/JaQQ01tV4PK+5hvEVzE2CDXHggQgrHJ9DE+U1L
4HgGtbakVruPGiXyBKJeQbkkU2u4+O5V7WFRq8n0sXqBgV+d00zsMeZfRXm/MA5o
XANf9b2sJShLbK9niOrpeeF/7bED0phSgOj0J2iytVd71vbEPh9ESxny3qJZY5ux
HmwDymIh5J7kbATszOhm9V8QFvDQsOLGXneZcxpNFeW0SXZ/+m6KWVjzAbsBM+JF
uX397Ktfw+Ne4XnhWswe1aXbRhOldWhVBz7sVJtEiaZfG3PsAL9oSD53lGlZAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU5AvlnZPVePchEcIcKAnY77DcltYwHwYDVR0j
BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz
RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzEz
MzM4MmUzMDJlMzEzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM4MzMz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIoAvzANBgkqhkiG9w0BAQsFAAOCAQEANIE6XIzwYCs8R1dI
ma2HEK54b+Kqai5wXAqXzLvpHsHbMoF83sd/IRm4zicoRbsrzRZF/Tb1WkM/leqy
ZynPJsSzwtzCmrfVoZEl3MJx5Kf6/C3trReSX3qETCWcHdAE8JrFqKcFpE+dkqd1
x/AuhgrDLGN8XrcbIlxB8sJebVXpoEhvSoaoE8j+ZPXJ+5+NuA0vEP9YcFsNhpIc
lXsbKMtOW+zSeVMLoyuDx4ekB9OuoJGcJ7LcVheduY7HTUSwcCU3AQEGw91zeiOB
3Jgt/jmdkzAFVAzhEGfm0QlwUn+CPmYOuG65PA1q2xNgX1jOozaL3NdoP0+sXyd2
xdfTwA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:14 2025 by rpki-client