This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
File:                     34352e3233302e3130382e302f32342d3234203d3e203631353839.roa (raw, json)
Hash identifier:          ghLtlbYRMlXa3ijAcA9aSEg3pUSMmLyZbmKweq/OHJo=
Subject key identifier:   5E:86:74:E1:95:0F:5D:57:FA:76:DE:E9:F9:59:9C:9D:78:FF:5A:D9
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       526FD79FFAC0E55AD0958A8AB2F8FE5BDE0AC5D9
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
Signing time:             Tue 02 Dec 2025 19:03:46 +0000
ROA not before:           Tue 02 Dec 2025 18:58:46 +0000
ROA not after:            Tue 01 Dec 2026 19:03:46 +0000
asID:                     61589
IP address blocks:        45.230.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6f:d7:9f:fa:c0:e5:5a:d0:95:8a:8a:b2:f8:fe:5b:de:0a:c5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec  2 18:58:46 2025 GMT
            Not After : Dec  1 19:03:46 2026 GMT
        Subject: CN=5E8674E1950F5D57FA76DEE9F9599C9D78FF5AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:96:d9:38:cb:dd:2b:d0:8c:2b:d7:9e:ff:
                    16:28:b3:73:6d:22:d6:48:e6:5c:8c:cf:40:87:73:
                    b1:63:b2:81:3a:4e:7e:c4:97:53:a8:19:26:63:11:
                    0b:2f:26:a7:2c:6a:d8:23:d0:48:90:6f:bb:00:3f:
                    87:8a:3b:1c:b0:8f:c4:91:ba:c5:36:07:36:c0:77:
                    2d:75:09:5e:2e:5e:14:c2:80:73:cf:92:50:46:03:
                    b8:c0:66:7f:31:0c:ae:aa:4e:ee:3e:19:5d:83:f8:
                    10:8a:c3:71:07:78:c8:15:19:45:52:59:9e:da:d2:
                    48:7f:d2:f5:84:31:2d:bd:7c:6f:a0:7d:91:b4:65:
                    7b:6e:f4:b7:19:98:98:41:6f:35:8c:fe:af:30:bd:
                    94:38:ee:0e:5e:93:68:52:3e:ba:e4:b7:0f:b6:cd:
                    63:79:ab:2a:15:c3:7c:83:d5:a3:6f:81:ce:e7:bd:
                    a0:b8:24:38:0f:e7:dc:57:36:7f:0e:3b:d4:4f:a6:
                    6c:81:90:f9:3f:dc:b8:c3:08:ef:af:12:d1:3b:15:
                    fd:03:70:ab:62:ae:56:69:0a:40:76:e6:65:27:3a:
                    21:44:16:b6:d8:32:cb:1e:d5:16:61:35:7a:fc:d3:
                    b9:51:4a:cc:a7:5d:d6:3f:05:89:59:30:68:6d:3b:
                    c5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:86:74:E1:95:0F:5D:57:FA:76:DE:E9:F9:59:9C:9D:78:FF:5A:D9
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:be:64:10:cc:75:78:24:f3:d3:94:45:6e:da:f8:5e:d2:f9:
         db:af:d5:21:f1:ec:ff:6c:93:6c:81:aa:fd:2f:5b:f8:2b:ce:
         dc:1f:43:7c:5a:6f:7f:4f:09:10:cf:0e:a4:da:aa:b9:f5:1f:
         a5:97:e2:28:20:20:b1:6d:2d:ec:4d:c0:d6:ca:38:07:00:f7:
         c6:20:e6:85:2a:3e:2a:da:4b:98:9e:bd:07:48:33:da:af:5b:
         95:27:74:44:a9:61:c2:42:ab:04:01:76:2e:3e:37:13:02:28:
         2a:96:c1:0b:74:b2:c1:37:38:48:01:f0:4c:3d:ba:5b:ea:f9:
         64:8e:42:a4:1f:e2:c0:46:94:50:35:a9:6a:4f:c5:d2:1c:6b:
         ff:43:60:f2:e3:2a:9c:9a:f8:79:85:56:16:f0:66:ce:4f:c9:
         e7:40:bf:50:7a:b0:f6:7d:2f:a9:bf:33:b1:3d:d9:9e:50:22:
         be:49:f2:9b:12:8c:71:a9:85:c2:32:0b:44:da:a1:6b:b4:11:
         1c:fb:c4:8b:d1:03:48:48:f0:06:62:93:db:9c:dc:16:86:11:
         00:96:1f:5a:7e:ac:c3:09:5c:c0:29:8d:c7:c5:c5:7a:1b:63:
         3e:d3:67:f2:6a:99:19:82:1d:c1:23:42:a5:c3:61:0f:32:a8:
         b9:0d:2b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:05:18 2025 by rpki-client