This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137362e302f32322d3234203d3e20323638393430.roa
File:                     3138392e33392e3137362e302f32322d3234203d3e20323638393430.roa (raw, json)
Hash identifier:          Gs5zkGAh6g08gCwRJ4RUxw5L/XUkuQx1OGQWV4kkC+k=
Subject key identifier:   63:9B:99:12:4B:A3:98:F3:B2:DC:EC:77:0B:03:24:2E:81:8A:08:2E
Certificate issuer:       /CN=59196D5F0CEE97CF67AB492DB1CC9ED311CEF5EE
Certificate serial:       969F4EB33470E348C4A3D811F1D7A2EA856EBE
Authority key identifier: 59:19:6D:5F:0C:EE:97:CF:67:AB:49:2D:B1:CC:9E:D3:11:CE:F5:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59196D5F0CEE97CF67AB492DB1CC9ED311CEF5EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137362e302f32322d3234203d3e20323638393430.roa
Signing time:             Sat 13 Dec 2025 13:11:07 +0000
ROA not before:           Sat 13 Dec 2025 13:06:07 +0000
ROA not after:            Sat 12 Dec 2026 13:11:07 +0000
asID:                     268940
IP address blocks:        189.39.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/59196D5F0CEE97CF67AB492DB1CC9ED311CEF5EE.crl
                          rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/59196D5F0CEE97CF67AB492DB1CC9ED311CEF5EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59196D5F0CEE97CF67AB492DB1CC9ED311CEF5EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 18:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            96:9f:4e:b3:34:70:e3:48:c4:a3:d8:11:f1:d7:a2:ea:85:6e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59196D5F0CEE97CF67AB492DB1CC9ED311CEF5EE
        Validity
            Not Before: Dec 13 13:06:07 2025 GMT
            Not After : Dec 12 13:11:07 2026 GMT
        Subject: CN=639B99124BA398F3B2DCEC770B03242E818A082E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:53:f4:99:80:0f:89:8b:a9:72:f0:1d:14:
                    db:cd:71:96:55:bc:d9:60:d6:76:10:3e:8f:b2:2a:
                    9d:2b:9f:e0:80:3e:f6:27:83:17:e9:6d:32:be:9c:
                    bd:e0:11:8f:a4:09:47:fb:e9:53:9b:0f:ca:05:a0:
                    89:d4:eb:47:52:ae:71:8d:17:71:cd:62:36:17:e5:
                    f0:c7:d2:eb:21:63:cb:8b:50:1d:4c:e3:31:72:c1:
                    34:2d:b2:e1:49:c8:09:84:e8:55:6d:f9:17:56:79:
                    4a:c7:c8:ff:01:8b:ae:7c:b6:33:95:b8:94:e3:b8:
                    e5:ca:8a:72:20:7c:f5:8f:26:f0:a5:ce:de:34:ef:
                    85:bd:cd:b8:c0:ab:21:d5:4f:81:d9:5d:50:72:b0:
                    8f:77:a6:a1:11:a0:a6:e9:c4:1d:8f:08:97:1e:f2:
                    d8:49:0e:6e:62:30:18:d4:03:fa:2c:51:dc:87:76:
                    6a:e9:cc:13:2f:72:1c:8b:68:38:32:6b:ef:86:9d:
                    3d:33:c9:13:25:c2:90:61:50:66:74:fa:bb:ff:75:
                    02:54:ea:b3:18:15:64:96:a4:52:7d:7a:01:5f:d3:
                    07:ee:c1:8e:25:2e:d9:31:c1:01:d8:27:db:e5:d6:
                    00:01:f8:68:c0:4c:eb:25:1b:59:8b:80:57:dd:71:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9B:99:12:4B:A3:98:F3:B2:DC:EC:77:0B:03:24:2E:81:8A:08:2E
            X509v3 Authority Key Identifier:
                keyid:59:19:6D:5F:0C:EE:97:CF:67:AB:49:2D:B1:CC:9E:D3:11:CE:F5:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/59196D5F0CEE97CF67AB492DB1CC9ED311CEF5EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59196D5F0CEE97CF67AB492DB1CC9ED311CEF5EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137362e302f32322d3234203d3e20323638393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:ee:2f:30:e4:30:a6:88:17:87:05:42:ef:bd:44:99:31:5c:
         3b:aa:e4:61:3a:e3:0b:3b:08:8a:ee:e6:68:3b:45:ce:f9:e5:
         14:2a:31:4e:f7:71:f3:e0:33:20:1f:83:4b:76:9c:04:97:ae:
         5f:d8:12:58:e3:70:6b:e5:74:1a:55:88:f0:16:01:47:de:59:
         51:c2:bb:6b:11:40:09:c6:9e:15:ac:ac:f9:b9:9c:9b:24:2f:
         c8:65:aa:0f:e6:27:64:9d:6e:d5:b2:4b:b3:a7:2f:74:15:5e:
         c7:cc:e0:46:39:1d:f8:18:fd:aa:a9:17:fd:e1:31:c5:75:d4:
         39:a3:3b:d8:ac:e4:1a:f3:ef:18:ef:95:38:ac:b9:67:e8:a9:
         ba:48:8b:e1:e7:12:45:cc:e7:79:57:5f:87:01:aa:14:61:88:
         35:bb:fa:95:2e:51:54:df:00:49:ca:86:e4:e2:86:ab:66:4a:
         cd:36:84:41:1c:e8:c5:43:6c:1d:41:00:ac:52:ea:a4:17:b7:
         26:d5:c1:b5:77:0c:45:01:ab:91:5e:7a:73:44:02:19:24:5f:
         31:67:b5:4d:17:99:56:9e:58:eb:0f:66:e2:b2:83:25:84:8c:
         fd:b2:4c:51:15:f5:1a:d2:c9:bb:56:ac:f2:52:d3:ba:d3:69:
         a9:e9:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:34:32 2025 by rpki-client