This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/34352e342e31362e302f32322d3332203d3e20323636303533.roa
File:                     34352e342e31362e302f32322d3332203d3e20323636303533.roa (raw, json)
Hash identifier:          I5/4GgR0fGr4FRtjppRHtKeYIRBZA3O7PI1F3POUwds=
Subject key identifier:   59:4E:4B:6A:84:51:E8:D9:E9:A0:33:2D:34:09:BC:32:03:65:CA:4C
Certificate issuer:       /CN=E27513DF0F80F1E934FC7A0C421F868E94751182
Certificate serial:       4BFDE2218485A75C762F5E79AB914A8510041E5B
Authority key identifier: E2:75:13:DF:0F:80:F1:E9:34:FC:7A:0C:42:1F:86:8E:94:75:11:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/34352e342e31362e302f32322d3332203d3e20323636303533.roa
Signing time:             Wed 31 Dec 2025 11:58:09 +0000
ROA not before:           Wed 31 Dec 2025 11:53:09 +0000
ROA not after:            Wed 30 Dec 2026 11:58:09 +0000
asID:                     266053
IP address blocks:        45.4.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/E27513DF0F80F1E934FC7A0C421F868E94751182.crl
                          rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/E27513DF0F80F1E934FC7A0C421F868E94751182.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fd:e2:21:84:85:a7:5c:76:2f:5e:79:ab:91:4a:85:10:04:1e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E27513DF0F80F1E934FC7A0C421F868E94751182
        Validity
            Not Before: Dec 31 11:53:09 2025 GMT
            Not After : Dec 30 11:58:09 2026 GMT
        Subject: CN=594E4B6A8451E8D9E9A0332D3409BC320365CA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:27:ab:d8:e4:28:e4:86:d4:65:05:f2:75:
                    27:52:e7:2b:7f:c9:a8:fa:68:64:31:b2:87:f1:e6:
                    06:0d:a8:57:cd:98:05:bb:69:ad:37:0f:90:19:e4:
                    b2:cd:fa:56:87:0b:cd:52:28:20:73:db:d3:35:e5:
                    e2:dc:e2:a1:80:91:db:1e:4b:bb:aa:32:55:9e:62:
                    93:87:18:41:6f:d5:89:b2:eb:1b:3f:ae:08:24:d8:
                    92:23:6f:1b:b7:ff:15:c6:25:4f:f3:23:8d:1f:c2:
                    42:a5:1e:28:32:07:76:d3:fc:e8:7b:fb:18:1e:50:
                    54:8a:29:c8:0a:92:8b:a3:32:b7:53:cc:b9:73:a2:
                    ff:88:fb:89:cd:80:5d:2f:40:05:f6:d3:9b:d5:18:
                    ea:6b:9a:32:8e:e9:3b:c8:85:25:f8:d1:ad:7a:d3:
                    5f:ca:f8:d2:84:8a:af:33:52:65:86:9b:80:67:ac:
                    9f:1e:d0:38:c1:3a:e4:24:01:2f:94:db:97:97:98:
                    70:39:55:6c:0c:17:98:b1:5f:2d:36:24:c9:74:2b:
                    5a:59:e9:48:7f:a8:b9:e1:ad:65:fc:e6:47:a5:d2:
                    8f:e1:b2:e9:a0:7e:3b:ae:23:bc:b2:88:8f:4e:50:
                    67:d3:ed:d4:a2:2a:92:29:b4:4e:39:7a:9e:6f:49:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4E:4B:6A:84:51:E8:D9:E9:A0:33:2D:34:09:BC:32:03:65:CA:4C
            X509v3 Authority Key Identifier:
                keyid:E2:75:13:DF:0F:80:F1:E9:34:FC:7A:0C:42:1F:86:8E:94:75:11:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/E27513DF0F80F1E934FC7A0C421F868E94751182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/34352e342e31362e302f32322d3332203d3e20323636303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:22:7c:db:8b:26:db:f0:0d:b6:ff:67:0c:88:4b:95:e1:5c:
         34:95:6f:0d:90:bb:02:00:c4:f7:b0:19:44:33:11:37:d9:f2:
         dc:d8:48:97:8d:ff:2e:4e:e4:90:e8:d2:8c:b0:18:b2:84:58:
         5c:4d:5a:00:0e:b0:21:57:4e:5e:98:3a:6e:2d:a2:b9:99:cf:
         85:fa:8c:06:4a:03:8f:f6:d9:36:19:7f:d0:8a:f8:a7:cd:dd:
         3f:2d:27:9d:27:6b:ff:12:b2:06:33:40:c0:69:99:1a:03:6b:
         bd:76:ac:8e:2c:13:37:c5:d4:e3:0e:a2:7d:91:7a:ef:0e:16:
         06:51:46:ce:34:a0:32:56:d0:38:62:89:c0:4b:5b:53:13:e9:
         39:5a:98:21:b6:a7:d8:97:3a:1d:51:f4:a6:09:56:fd:7e:41:
         a2:26:56:97:b1:9c:12:e0:c2:01:2f:46:f7:7d:69:bd:84:a6:
         6a:e6:a2:bd:36:3e:41:fa:82:9f:ed:64:0b:ad:a0:d9:64:55:
         60:38:0d:d9:8e:41:5c:90:ab:b8:b1:19:11:04:59:48:9e:93:
         35:73:59:19:3d:d5:63:61:59:35:90:a5:37:55:48:7c:89:95:
         3a:6e:2e:94:2a:6f:4b:34:04:54:10:82:7d:e1:7d:54:72:19:
         7b:a9:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:32:23 2026 by rpki-client