This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          70AWJXDWMcz+Y/WY96wZDuqlCO3pojs4EEXL9IT8Tbw=
Subject key identifier:   D4:C6:BD:F4:83:58:CF:0D:0D:93:E1:4F:C6:FE:96:11:E6:EA:E5:04
Certificate issuer:       /CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
Certificate serial:       201DE37264A3E236608A51141469008FD95CA62A
Authority key identifier: 5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa
Signing time:             Tue 06 Jan 2026 03:16:10 +0000
ROA not before:           Tue 06 Jan 2026 03:11:10 +0000
ROA not after:            Tue 05 Jan 2027 03:16:10 +0000
asID:                     271599
IP address blocks:        45.174.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1d:e3:72:64:a3:e2:36:60:8a:51:14:14:69:00:8f:d9:5c:a6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
        Validity
            Not Before: Jan  6 03:11:10 2026 GMT
            Not After : Jan  5 03:16:10 2027 GMT
        Subject: CN=D4C6BDF48358CF0D0D93E14FC6FE9611E6EAE504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:62:43:31:f8:d2:cc:e7:1c:a4:61:ca:70:
                    34:70:e9:41:c1:ae:61:29:b4:d0:e2:a5:96:e2:bc:
                    b7:5c:50:0d:ea:52:49:18:ea:51:9b:ed:a1:40:3d:
                    8b:ef:53:26:3f:ec:2b:d7:b9:2d:44:a9:f2:42:3c:
                    dc:c6:cd:6e:7f:d4:37:07:8f:da:ee:f7:db:67:84:
                    82:64:5f:4e:ee:c1:fc:0f:61:7b:55:78:58:71:f6:
                    b9:36:2a:26:cd:3f:72:8d:b6:91:69:da:07:bd:9e:
                    f0:67:5c:63:81:31:0f:47:c5:2f:74:12:4d:54:08:
                    65:49:85:01:57:77:93:a2:e7:90:db:88:17:28:2c:
                    42:ee:13:74:6f:5f:c5:f1:d2:5f:e0:02:b8:db:7a:
                    12:46:b2:88:16:d1:8b:38:cd:2c:cc:68:71:21:ac:
                    06:22:2b:83:ee:26:9e:35:17:3a:1b:4a:78:16:cf:
                    07:1f:4a:22:b7:61:2b:f3:a2:c4:59:95:f3:23:d4:
                    90:96:8a:76:47:0d:e7:0b:a1:38:23:80:e2:7a:39:
                    ea:71:79:93:1f:db:f9:fd:e1:48:d1:b0:17:40:16:
                    1f:c3:40:88:51:29:78:3b:6d:fe:1f:29:67:cc:e5:
                    25:d8:ad:4d:ae:a6:5d:9b:31:a6:17:24:93:27:23:
                    75:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C6:BD:F4:83:58:CF:0D:0D:93:E1:4F:C6:FE:96:11:E6:EA:E5:04
            X509v3 Authority Key Identifier:
                keyid:5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:82:29:6c:14:b6:68:09:a9:7b:63:a4:69:73:57:f6:93:7a:
         c0:37:3b:92:dd:d6:2e:69:48:54:7a:76:c1:ec:96:c9:b4:52:
         6e:18:f0:84:f7:52:ad:cd:29:f2:17:21:23:68:ad:43:c6:2d:
         f9:2b:54:58:7c:8f:9a:a0:b9:1a:2f:1f:a7:a9:33:cf:9c:21:
         be:0d:07:d4:98:a6:8a:21:d1:d2:f6:db:e5:54:79:1c:ce:bb:
         09:32:b9:8c:55:5e:f9:1b:2b:8f:1b:af:35:25:d9:74:e3:e7:
         d0:b9:9e:4e:f1:2e:98:ef:13:a3:b5:df:8a:cb:6f:22:46:04:
         48:96:78:10:c8:49:41:e0:63:24:60:3f:68:4d:fa:cb:e9:07:
         a5:95:5a:c6:77:92:6a:08:08:c3:3d:3e:4e:e0:da:f2:86:9d:
         c1:40:fd:8d:2a:3a:83:6a:0f:58:11:c6:ef:e6:ed:42:46:34:
         12:22:4d:de:30:fa:67:8c:61:52:0b:69:16:54:4b:c3:2d:48:
         69:18:71:50:85:38:ef:ab:0e:fd:ba:cb:71:a2:0d:5f:e2:9a:
         78:7b:08:fa:0f:ae:de:96:c0:c9:ac:1b:15:48:80:e3:4b:8c:
         a3:2b:37:5d:85:40:39:92:52:d9:6a:44:0e:38:b9:2f:d1:84:
         9c:ee:77:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:15:05 2026 by rpki-client