This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3332203d3e20323731363232.roa
File:                     34352e3136332e34382e302f32322d3332203d3e20323731363232.roa (raw, json)
Hash identifier:          yOlTy7MNZuSAVSGzm/6oRzz44E2ad7LgWhEqfWyODr0=
Subject key identifier:   F7:B9:06:45:16:77:D3:A9:26:B7:52:17:EB:E5:30:29:04:33:F4:7D
Certificate issuer:       /CN=A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3
Certificate serial:       5ECDA33689C135533893AAD31216BBBB6AA07586
Authority key identifier: A0:A8:9B:7E:46:B5:F2:C1:2B:A2:BC:C0:25:4B:1C:02:61:09:A4:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3332203d3e20323731363232.roa
Signing time:             Fri 16 Jan 2026 00:10:12 +0000
ROA not before:           Fri 16 Jan 2026 00:05:12 +0000
ROA not after:            Fri 15 Jan 2027 00:10:12 +0000
asID:                     271622
IP address blocks:        45.163.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.crl
                          rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cd:a3:36:89:c1:35:53:38:93:aa:d3:12:16:bb:bb:6a:a0:75:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3
        Validity
            Not Before: Jan 16 00:05:12 2026 GMT
            Not After : Jan 15 00:10:12 2027 GMT
        Subject: CN=F7B906451677D3A926B75217EBE530290433F47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:25:a1:cd:63:f4:76:5a:63:e1:c9:09:4f:
                    72:80:8b:f7:05:e9:c5:71:b5:2c:62:7b:5f:29:40:
                    0b:4b:c3:b5:e6:01:57:b5:8e:06:f5:69:dc:c8:8f:
                    d1:4a:70:b9:ad:6a:4e:53:b9:e2:41:38:bb:22:a3:
                    aa:59:7d:37:47:04:83:76:0c:ea:76:76:ec:d6:89:
                    ab:2e:cb:e6:b7:f1:82:82:d3:07:cc:3e:68:47:19:
                    de:25:c4:3b:03:d1:91:04:95:87:6c:a6:c6:cf:46:
                    76:6c:ae:88:77:cb:b5:12:2d:fb:d2:29:af:38:3d:
                    be:4d:a6:6b:96:bc:45:76:a6:06:f1:c4:56:be:31:
                    39:9f:d9:96:31:a1:15:33:3f:21:57:a2:5f:f8:b3:
                    7c:91:0e:20:0b:2d:f4:ca:4c:92:1b:fe:9f:4b:3d:
                    ee:5e:6c:b4:6d:35:f9:c0:94:b8:26:76:0c:47:88:
                    49:7b:5d:ea:df:7e:b9:ab:e8:3f:89:e5:d1:9c:59:
                    47:e6:10:1d:c3:8d:84:94:a8:9b:47:ea:37:6f:02:
                    52:cf:0e:1f:e1:1e:53:25:2e:64:a1:87:85:e3:b1:
                    c4:10:1a:03:69:3e:7e:0d:d0:4d:3d:e9:7e:c7:25:
                    97:0d:2b:e6:08:da:ea:88:b0:02:5a:5e:58:9e:c0:
                    0c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B9:06:45:16:77:D3:A9:26:B7:52:17:EB:E5:30:29:04:33:F4:7D
            X509v3 Authority Key Identifier:
                keyid:A0:A8:9B:7E:46:B5:F2:C1:2B:A2:BC:C0:25:4B:1C:02:61:09:A4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3332203d3e20323731363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:58:95:07:17:b9:ee:48:4a:47:f4:8d:e7:ba:f3:16:90:35:
         7c:43:f2:39:67:f1:c5:14:ef:01:ab:55:ad:81:0e:95:6f:10:
         67:e0:c5:87:85:fa:6d:80:f7:2f:96:9e:51:74:28:5c:4e:84:
         49:de:d5:cd:ce:69:a2:5f:55:02:33:fc:e2:e2:ee:10:90:3a:
         83:aa:e7:bb:46:f2:4d:e1:27:75:75:cf:40:1d:df:66:cb:67:
         8f:bc:54:3c:36:e1:6f:83:8c:de:8e:98:63:45:85:0d:a9:c1:
         62:36:6b:9a:60:e4:b5:2b:c8:88:e1:77:ae:fc:76:9a:2c:68:
         0a:a5:27:48:3e:f3:37:10:54:aa:1d:f1:99:20:8d:75:92:53:
         5f:d8:aa:bc:52:0a:d0:00:da:d7:83:11:c7:93:f1:29:45:80:
         84:26:1c:e8:87:3a:33:ca:b6:6d:7e:23:29:5e:69:69:07:52:
         96:d6:3e:9e:a3:f3:d4:1e:17:19:b9:0b:fb:2c:68:2d:7c:36:
         cf:c4:f1:84:af:2f:0f:18:d1:69:cc:e8:e3:d4:44:36:f7:74:
         1b:ec:db:4a:10:07:f2:ef:5d:2f:eb:4b:61:08:65:40:9c:b1:
         77:6c:9d:00:d1:cd:cd:67:f1:e5:f7:c0:42:0d:50:19:6d:a3:
         c0:59:3b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:00:36 2026 by rpki-client