This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/34352e37302e33362e302f32322d3234203d3e20323637353435.roa
File:                     34352e37302e33362e302f32322d3234203d3e20323637353435.roa (raw, json)
Hash identifier:          fXfiT18PsoJGezx2EcZdIFFicP2icbdi6s6lSOPrUZ8=
Subject key identifier:   18:85:79:21:A7:D0:00:41:D0:71:DE:1B:23:BE:AF:99:2F:55:B1:01
Certificate issuer:       /CN=939548073F543A96CBE8D1DFAAA6AC3DEAE05A18
Certificate serial:       2B5BF41CA1F36744859134FC9151789DEA2E192F
Authority key identifier: 93:95:48:07:3F:54:3A:96:CB:E8:D1:DF:AA:A6:AC:3D:EA:E0:5A:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/34352e37302e33362e302f32322d3234203d3e20323637353435.roa
Signing time:             Mon 01 Dec 2025 19:18:28 +0000
ROA not before:           Mon 01 Dec 2025 19:13:28 +0000
ROA not after:            Mon 30 Nov 2026 19:18:28 +0000
asID:                     267545
IP address blocks:        45.70.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.crl
                          rsync://rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 01:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5b:f4:1c:a1:f3:67:44:85:91:34:fc:91:51:78:9d:ea:2e:19:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=939548073F543A96CBE8D1DFAAA6AC3DEAE05A18
        Validity
            Not Before: Dec  1 19:13:28 2025 GMT
            Not After : Nov 30 19:18:28 2026 GMT
        Subject: CN=18857921A7D00041D071DE1B23BEAF992F55B101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:c9:e7:41:48:45:92:ca:6e:d3:ff:d9:a8:
                    d5:04:7a:83:8f:47:89:d2:c8:53:23:c8:52:a8:38:
                    9c:6a:e0:b8:c8:71:c2:a5:30:a0:1d:9a:6a:f2:4b:
                    eb:31:31:97:d4:d7:58:c7:de:4d:a0:d5:ca:cd:e3:
                    92:0e:7e:5e:93:21:38:26:48:86:a9:6e:29:8a:d2:
                    00:f5:23:11:59:0d:26:c6:6b:69:07:85:6d:e9:08:
                    cb:1a:22:c6:59:4c:83:f6:e3:ae:71:cd:1c:03:61:
                    44:3e:a3:c1:65:0c:5e:d1:45:1b:13:fa:09:1d:15:
                    de:e0:83:0a:99:5a:32:4b:3d:e8:64:78:11:85:6e:
                    5a:c8:1c:95:84:4a:c7:9e:57:52:0a:7f:58:6b:d8:
                    39:12:ec:4a:0f:ec:f9:e1:42:51:3c:02:ea:cb:0f:
                    b8:b4:86:9b:2d:1b:f9:c1:0d:a9:f6:2f:b5:12:28:
                    83:13:87:67:71:bf:c0:f0:2a:7c:f3:8d:c2:6e:9d:
                    79:48:c5:9a:0e:d3:11:53:ea:ad:9f:a4:6a:53:4a:
                    f1:26:d0:93:b0:86:b8:c7:30:77:97:c4:7d:4b:6f:
                    8f:0c:4c:03:2a:5b:3c:55:15:62:ee:4a:14:91:e0:
                    e9:71:c4:a6:d4:41:ba:7f:cc:8c:5b:3d:56:a7:46:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:85:79:21:A7:D0:00:41:D0:71:DE:1B:23:BE:AF:99:2F:55:B1:01
            X509v3 Authority Key Identifier:
                keyid:93:95:48:07:3F:54:3A:96:CB:E8:D1:DF:AA:A6:AC:3D:EA:E0:5A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/34352e37302e33362e302f32322d3234203d3e20323637353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:cf:2f:92:df:69:e4:eb:60:b4:93:b8:21:8a:8f:cb:bc:
         f0:1d:8e:11:74:7a:34:86:4f:19:18:c6:3a:b9:32:cf:6d:f5:
         b4:43:22:0b:7d:f5:53:70:5a:e3:94:1e:fb:e4:96:1e:cf:96:
         9c:d7:9e:57:75:97:10:87:97:a6:5b:e5:35:21:19:8f:bc:5b:
         c6:61:ab:b7:b0:47:86:a1:3c:89:80:0a:04:87:c7:78:e8:04:
         09:6b:9f:10:f3:75:9a:3c:97:b0:36:c4:80:2e:23:9f:64:da:
         11:1e:9b:4b:a5:bb:d8:5f:fd:c1:86:e8:e5:32:27:1b:c3:45:
         9a:dd:05:33:39:f3:5b:bd:4d:e1:3f:28:24:4a:be:e4:1e:b1:
         60:2f:cd:2e:9c:44:5a:72:9c:3f:92:33:cc:46:4c:2d:a8:15:
         8d:09:2b:48:c5:6c:b5:88:47:80:bd:14:70:6f:e5:e9:bf:8c:
         ca:8c:f8:f6:8e:e7:2c:0c:79:a4:06:95:70:78:0a:7f:57:f5:
         ae:a7:bc:dc:07:e7:bd:1c:e5:e3:36:00:bf:b9:a5:d4:2b:9d:
         62:ec:7d:2e:c1:94:c1:50:33:72:77:58:19:2d:2a:02:1c:0e:
         32:ae:9a:e7:ce:c7:bb:23:49:ce:20:0b:9e:f9:aa:7c:9c:c0:
         59:b9:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:42:42 2025 by rpki-client