This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3138392e33362e3230382e302f32312d3332203d3e20323635333639.roa
File:                     3138392e33362e3230382e302f32312d3332203d3e20323635333639.roa (raw, json)
Hash identifier:          KiX+rPzw9gnC13WnRjcoWb+sanHFBV7DqdWP83h8CUI=
Subject key identifier:   B2:D1:D9:4E:8F:E3:D6:13:58:AB:2B:1C:A0:D0:52:A4:C3:12:03:DC
Certificate issuer:       /CN=D88B454BC594C5A1800134E375B465D91C070DFD
Certificate serial:       7D5BEB80E7077503B460BD9DD8B6D9F4C618CB0E
Authority key identifier: D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3138392e33362e3230382e302f32312d3332203d3e20323635333639.roa
Signing time:             Wed 17 Dec 2025 13:12:25 +0000
ROA not before:           Wed 17 Dec 2025 13:07:25 +0000
ROA not after:            Wed 16 Dec 2026 13:12:25 +0000
asID:                     265369
IP address blocks:        189.36.208.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 01:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5b:eb:80:e7:07:75:03:b4:60:bd:9d:d8:b6:d9:f4:c6:18:cb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88B454BC594C5A1800134E375B465D91C070DFD
        Validity
            Not Before: Dec 17 13:07:25 2025 GMT
            Not After : Dec 16 13:12:25 2026 GMT
        Subject: CN=B2D1D94E8FE3D61358AB2B1CA0D052A4C31203DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:69:e1:24:6b:3e:1e:29:2e:50:8f:9d:20:
                    96:6c:1c:b1:02:c3:50:b5:a4:38:82:5c:e9:7c:d4:
                    82:b8:34:1e:f8:a2:ba:7d:37:f3:79:9f:b1:e2:ac:
                    c6:b6:87:e6:61:a4:69:99:a6:bc:06:0d:b0:df:76:
                    c8:39:6f:54:af:68:68:f8:9a:80:68:8c:c7:a7:b7:
                    de:58:37:03:10:f3:80:cc:9f:f2:26:2d:2f:e3:65:
                    77:4d:9f:8a:67:cc:62:f2:8f:f5:b8:4d:db:a6:4c:
                    f8:b0:ac:16:36:79:52:ed:66:e9:66:e6:19:6d:ae:
                    ab:c6:98:17:a6:3f:22:8c:ae:11:b2:ff:8b:67:48:
                    83:dc:7b:03:5b:99:0b:1f:50:63:bd:cf:f6:4d:08:
                    86:ad:85:e0:43:85:e9:f5:5d:05:6f:c9:be:21:da:
                    ac:de:8e:04:ea:86:24:e9:82:9b:77:1d:f4:b5:a7:
                    80:01:a4:55:a0:fa:2a:32:81:83:a4:21:65:92:ff:
                    31:5f:dc:08:be:6e:4c:65:83:3f:d8:30:06:a5:a1:
                    1f:20:1b:ad:32:82:d4:34:c6:b0:75:8b:57:b6:1c:
                    3a:99:c4:e4:be:cb:ce:c4:98:40:f0:ef:90:ca:40:
                    87:28:78:e3:90:e2:ca:ee:9e:50:ad:0c:c9:7c:20:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D1:D9:4E:8F:E3:D6:13:58:AB:2B:1C:A0:D0:52:A4:C3:12:03:DC
            X509v3 Authority Key Identifier:
                keyid:D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3138392e33362e3230382e302f32312d3332203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:33:b8:58:68:de:7d:3b:4a:44:d7:32:cd:8e:e6:ca:10:5c:
         e4:4e:53:bd:d5:f4:9c:d2:dd:14:00:5c:ac:de:a2:57:38:3a:
         94:dd:83:60:f2:e1:c0:87:a1:8f:63:53:bf:26:31:f3:c5:7f:
         b7:4c:c6:9e:1b:fa:39:c5:c1:bd:c0:ab:ff:97:8f:c2:67:57:
         5d:18:cf:56:18:a2:72:cf:92:a7:3f:ef:3d:4b:6b:a6:eb:74:
         67:a6:a4:2c:b6:37:23:db:7b:49:77:fc:04:3e:83:6a:e5:a6:
         41:2f:a4:86:65:86:47:27:25:d6:6e:58:fa:3a:a4:d9:7a:21:
         11:ee:0c:64:10:a1:48:5c:84:92:ef:60:b2:a5:d6:65:f3:41:
         88:d2:dd:3b:a2:f1:b5:b5:67:eb:5f:af:cc:71:2c:77:39:ed:
         10:f6:8e:7a:fc:45:0a:ee:b9:3d:3e:1e:f9:79:94:7b:27:65:
         12:b1:a7:79:bd:ca:cc:df:43:8b:0b:53:29:91:cc:69:4d:05:
         d1:ae:1e:6b:47:f8:6a:db:3a:bb:b6:0e:10:74:b5:fc:c5:7a:
         cf:ea:df:0d:e6:8e:bd:95:b5:17:96:87:8b:88:70:60:44:55:
         83:e2:c7:16:5c:5b:d3:a1:2f:61:ab:8e:1d:ae:47:9e:4e:0c:
         37:31:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 10:50:51 2026 by rpki-client