This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/34352e3138352e31372e302f32342d3234203d3e20323731373537.roa
File:                     34352e3138352e31372e302f32342d3234203d3e20323731373537.roa (raw, json)
Hash identifier:          uVF6yRizxWf5bLVPnhWlcWzs3IEhbgeDdw02iI07H0A=
Subject key identifier:   3A:81:4C:BA:65:C5:54:09:94:C0:47:17:AC:F8:10:47:90:D3:4C:4D
Certificate issuer:       /CN=FCBD8AF206226EBBA059E03684C489BDB6885CE5
Certificate serial:       6B88747676EE9D64D77DCC6258D83A26D88C5BEF
Authority key identifier: FC:BD:8A:F2:06:22:6E:BB:A0:59:E0:36:84:C4:89:BD:B6:88:5C:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD8AF206226EBBA059E03684C489BDB6885CE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/34352e3138352e31372e302f32342d3234203d3e20323731373537.roa
Signing time:             Tue 20 Jan 2026 20:16:38 +0000
ROA not before:           Tue 20 Jan 2026 20:11:38 +0000
ROA not after:            Tue 19 Jan 2027 20:16:38 +0000
asID:                     271757
IP address blocks:        45.185.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/FCBD8AF206226EBBA059E03684C489BDB6885CE5.crl
                          rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/FCBD8AF206226EBBA059E03684C489BDB6885CE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD8AF206226EBBA059E03684C489BDB6885CE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:88:74:76:76:ee:9d:64:d7:7d:cc:62:58:d8:3a:26:d8:8c:5b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCBD8AF206226EBBA059E03684C489BDB6885CE5
        Validity
            Not Before: Jan 20 20:11:38 2026 GMT
            Not After : Jan 19 20:16:38 2027 GMT
        Subject: CN=3A814CBA65C5540994C04717ACF8104790D34C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:38:1c:6f:9c:75:4e:f9:e1:16:88:ee:83:
                    2b:8f:27:84:c7:48:d8:1c:53:97:06:d7:51:bc:07:
                    aa:38:ba:f8:79:45:1f:8f:8a:82:ab:86:e9:1e:57:
                    8b:77:37:d1:43:b5:a5:0c:16:b9:cc:13:4e:c8:01:
                    f8:4e:09:9b:42:33:38:a9:55:f5:d0:d0:c8:ab:85:
                    7f:06:8d:02:28:a4:d2:19:06:bc:43:d3:6e:bb:f7:
                    0b:0e:33:69:4f:bb:29:0f:07:9b:49:37:45:ab:2e:
                    1e:90:73:6f:48:a3:8c:6d:ee:a8:6d:d1:f9:35:cc:
                    48:f4:49:6a:4e:0b:b2:3a:8e:a0:84:8a:86:d6:bf:
                    9a:ba:74:4f:6a:03:ed:f1:4f:15:96:e3:b2:12:41:
                    63:67:19:1f:37:7f:cb:17:bb:da:90:0b:4f:33:08:
                    4e:d4:a3:c8:a0:a6:bf:10:cb:b8:79:54:77:e5:10:
                    4e:b3:88:e1:f9:39:bd:e7:98:f7:d2:65:67:3a:f2:
                    90:d6:7f:6c:f6:3f:50:fc:f4:d2:4f:f9:b3:9e:30:
                    64:fa:14:8d:2a:23:b7:b1:b6:51:67:fd:85:5a:0f:
                    af:80:2a:3a:5b:6c:cb:6c:91:cd:10:1b:14:c6:19:
                    d0:8b:c6:21:df:79:2d:44:c6:a8:56:fe:19:08:75:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:81:4C:BA:65:C5:54:09:94:C0:47:17:AC:F8:10:47:90:D3:4C:4D
            X509v3 Authority Key Identifier:
                keyid:FC:BD:8A:F2:06:22:6E:BB:A0:59:E0:36:84:C4:89:BD:B6:88:5C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/FCBD8AF206226EBBA059E03684C489BDB6885CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD8AF206226EBBA059E03684C489BDB6885CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/34352e3138352e31372e302f32342d3234203d3e20323731373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:13:b9:41:bf:0a:8d:45:da:42:29:aa:41:e1:0a:1f:83:1c:
         c3:58:b9:ed:5b:33:3b:a5:62:78:1a:c8:fc:97:55:3c:15:c5:
         a8:97:b8:57:90:07:2c:19:c8:4b:3c:2f:c4:e7:7c:44:9c:f5:
         1c:00:cf:83:0d:67:48:58:3e:63:75:df:a8:ce:e2:76:6b:60:
         32:82:3e:60:c9:2e:ca:a9:e4:e1:0f:78:5f:29:58:e7:04:d9:
         0b:dc:d0:97:d0:be:87:31:d3:47:1f:80:15:7a:c1:9d:c4:06:
         df:31:83:80:2b:ec:38:ba:8f:0c:c3:64:7c:30:32:5f:dc:da:
         8f:ab:aa:7c:f7:31:99:28:f3:48:85:e1:a3:75:6b:a5:08:5b:
         71:f0:09:64:29:c0:04:3a:3c:36:fd:28:97:fd:a0:8f:f9:5e:
         83:d3:2f:82:74:5e:b1:3b:4d:c0:be:20:4a:47:3e:01:f8:0d:
         5a:34:7b:15:87:ff:ec:e2:dc:74:b3:dc:7f:ea:b5:04:3f:6b:
         70:17:23:e1:3d:0a:40:d0:40:65:6e:16:9b:04:96:f8:2b:86:
         57:87:da:5a:e2:5b:96:a7:35:14:80:fe:8e:50:1b:e1:cb:c6:
         30:d4:0b:5c:97:97:e7:19:d2:5b:0e:55:38:ba:ad:05:6d:70:
         30:8e:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:18 2026 by rpki-client