This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/34352e3138352e31392e302f32342d3234203d3e20323731373537.roa
File:                     34352e3138352e31392e302f32342d3234203d3e20323731373537.roa (raw, json)
Hash identifier:          CwWeQbRw0bQcn20ekqQ1IsdvVN/I//EKVSqZJEaTboE=
Subject key identifier:   F2:51:7E:32:20:CA:73:10:2F:57:F7:30:60:35:62:8B:DC:BB:2E:F7
Certificate issuer:       /CN=FCBD8AF206226EBBA059E03684C489BDB6885CE5
Certificate serial:       4C519C4223F0D9D4EC17737A0E85886C3D0FD7F7
Authority key identifier: FC:BD:8A:F2:06:22:6E:BB:A0:59:E0:36:84:C4:89:BD:B6:88:5C:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD8AF206226EBBA059E03684C489BDB6885CE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/34352e3138352e31392e302f32342d3234203d3e20323731373537.roa
Signing time:             Tue 20 Jan 2026 20:17:11 +0000
ROA not before:           Tue 20 Jan 2026 20:12:11 +0000
ROA not after:            Tue 19 Jan 2027 20:17:11 +0000
asID:                     271757
IP address blocks:        45.185.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/FCBD8AF206226EBBA059E03684C489BDB6885CE5.crl
                          rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/FCBD8AF206226EBBA059E03684C489BDB6885CE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD8AF206226EBBA059E03684C489BDB6885CE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:51:9c:42:23:f0:d9:d4:ec:17:73:7a:0e:85:88:6c:3d:0f:d7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCBD8AF206226EBBA059E03684C489BDB6885CE5
        Validity
            Not Before: Jan 20 20:12:11 2026 GMT
            Not After : Jan 19 20:17:11 2027 GMT
        Subject: CN=F2517E3220CA73102F57F7306035628BDCBB2EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:83:18:eb:2f:31:82:95:9f:0f:f2:5b:10:
                    e9:9f:9a:67:e9:fa:ec:40:22:0a:73:56:95:0a:53:
                    fe:81:69:46:48:c0:98:6a:04:b8:b1:f9:33:5d:81:
                    35:28:36:6e:bb:a7:82:0d:cd:93:1b:26:37:a1:64:
                    45:06:57:0d:cb:ab:db:12:5e:93:0f:6a:3b:6c:77:
                    85:c6:12:1c:5d:63:b5:09:ca:87:28:f4:a2:3d:d7:
                    e0:ea:84:be:9d:c9:6f:6a:f4:d2:92:e5:98:18:6c:
                    ed:0c:28:73:0d:af:eb:76:23:e3:03:4c:39:df:04:
                    40:8a:56:05:f9:eb:9c:5b:fa:67:59:75:9d:eb:54:
                    e7:d9:6a:8d:63:e6:81:43:14:b8:23:7c:11:15:c6:
                    1d:a4:43:64:80:ca:43:82:b0:3f:1c:7c:eb:3b:36:
                    93:70:fd:98:a2:12:94:aa:03:5a:17:2d:6f:b0:c9:
                    40:07:a7:f1:0f:31:9a:35:ca:50:ae:18:b4:43:e4:
                    a5:e9:22:db:77:1c:0f:33:bb:78:11:97:39:ad:e9:
                    33:d9:d5:82:8e:cc:96:ab:aa:d2:f3:5c:75:29:01:
                    15:f8:b6:59:e6:04:5a:9f:5f:6a:1e:30:7b:84:fc:
                    9b:ae:d3:97:10:e2:c3:b2:4b:59:0c:5c:d8:bc:9e:
                    a2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:51:7E:32:20:CA:73:10:2F:57:F7:30:60:35:62:8B:DC:BB:2E:F7
            X509v3 Authority Key Identifier:
                keyid:FC:BD:8A:F2:06:22:6E:BB:A0:59:E0:36:84:C4:89:BD:B6:88:5C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/FCBD8AF206226EBBA059E03684C489BDB6885CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD8AF206226EBBA059E03684C489BDB6885CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/34352e3138352e31392e302f32342d3234203d3e20323731373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:56:25:95:a2:8e:05:96:1b:47:52:43:bf:72:fd:4b:52:81:
         6b:ca:59:5f:82:6e:19:2a:2c:07:a8:fd:c8:ee:b9:24:dd:92:
         cf:c6:03:df:90:e7:74:75:b2:eb:b8:ed:18:17:8d:50:09:2e:
         bf:ea:21:b8:03:ae:96:2d:19:03:3a:c7:29:b1:5e:7e:47:c4:
         77:9b:cd:2e:eb:b9:c1:9d:73:b5:37:e9:a4:db:1a:0c:b5:fe:
         7b:31:3a:49:95:50:81:16:48:80:ff:01:cf:21:48:e9:23:f4:
         de:d8:fc:2e:53:06:a7:64:78:61:f5:2d:91:98:43:0d:24:64:
         6f:46:73:93:8d:7e:0f:91:c8:83:0c:7a:d1:98:0a:f4:95:3b:
         6f:4a:55:b7:a9:7d:d1:2a:cd:65:54:6f:4d:ad:49:40:2f:a5:
         d1:cd:79:a6:f6:ac:49:6c:34:22:da:30:b1:7c:0f:a0:66:ce:
         b6:e9:a3:ed:c6:94:e1:0c:28:7e:f3:e7:25:ce:cc:38:57:e0:
         08:4c:1a:02:43:3d:c6:5e:65:2c:48:ee:61:6a:7f:bb:7f:f5:
         10:c9:ca:3d:1c:e6:ad:7f:81:0f:7d:89:53:9d:59:46:1c:64:
         ee:64:b8:c7:7a:cf:a8:2b:30:55:c3:ec:96:ad:03:6e:ad:a2:
         67:b5:f2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:18 2026 by rpki-client