This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/34352e3138302e35322e302f32322d3234203d3e20323639313137.roa
File:                     34352e3138302e35322e302f32322d3234203d3e20323639313137.roa (raw, json)
Hash identifier:          uNYvfGxFhxHsiiAqxV03Xn39GmnHK1hktnWafIbTqHc=
Subject key identifier:   61:CD:3A:AF:59:6C:0D:88:8D:21:97:75:E6:B7:B0:C6:00:C5:09:43
Certificate issuer:       /CN=B628A0713D01BFBE9161DCB673FD9C286CE52020
Certificate serial:       1E675088C384F6447AEFDF12B14DDA6132EFFD46
Authority key identifier: B6:28:A0:71:3D:01:BF:BE:91:61:DC:B6:73:FD:9C:28:6C:E5:20:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B628A0713D01BFBE9161DCB673FD9C286CE52020.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/34352e3138302e35322e302f32322d3234203d3e20323639313137.roa
Signing time:             Tue 20 Jan 2026 01:35:15 +0000
ROA not before:           Tue 20 Jan 2026 01:30:15 +0000
ROA not after:            Tue 19 Jan 2027 01:35:15 +0000
asID:                     269117
IP address blocks:        45.180.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/B628A0713D01BFBE9161DCB673FD9C286CE52020.crl
                          rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/B628A0713D01BFBE9161DCB673FD9C286CE52020.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B628A0713D01BFBE9161DCB673FD9C286CE52020.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:67:50:88:c3:84:f6:44:7a:ef:df:12:b1:4d:da:61:32:ef:fd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B628A0713D01BFBE9161DCB673FD9C286CE52020
        Validity
            Not Before: Jan 20 01:30:15 2026 GMT
            Not After : Jan 19 01:35:15 2027 GMT
        Subject: CN=61CD3AAF596C0D888D219775E6B7B0C600C50943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:26:7e:f5:0b:41:03:17:e8:dc:90:95:ee:1b:
                    e6:bb:d5:b2:14:6b:96:32:a1:ac:89:55:30:9e:5d:
                    1b:fe:fa:45:ac:aa:ad:1b:f0:19:d2:2e:12:ec:e6:
                    ef:05:2c:64:f1:15:a7:71:c2:b5:1d:b4:bf:e0:d3:
                    41:64:f9:ae:b3:e8:8e:dd:63:72:58:25:11:b5:c1:
                    c1:2a:a0:a5:fd:72:60:c5:1d:24:69:42:d5:66:ec:
                    ce:6a:81:4f:b0:c1:15:1f:61:eb:55:92:36:4e:fc:
                    b8:95:59:0e:21:9b:d5:f4:05:c2:5a:1a:39:6c:f8:
                    5d:be:1e:f0:b2:2f:d9:cd:70:d2:84:d4:ce:6b:6b:
                    03:a8:ef:29:bf:dd:a2:3e:57:14:44:6d:2a:2c:3a:
                    50:95:fa:e7:2f:a6:aa:b5:0c:fc:61:38:48:21:ed:
                    1f:aa:8c:c6:1d:6b:4c:8c:76:47:37:0e:5c:cf:b0:
                    b9:d5:e4:64:dc:62:21:c3:4a:da:82:96:07:cb:07:
                    ad:58:d1:4f:c6:be:5b:f7:a7:a0:f0:5b:b7:78:5e:
                    39:72:f9:48:3c:18:aa:45:60:0a:ec:3d:8a:06:43:
                    83:13:1c:93:b1:b2:2a:e4:3f:6f:e5:be:ed:ae:82:
                    4a:84:94:92:85:2a:61:c8:77:09:db:22:26:9f:87:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CD:3A:AF:59:6C:0D:88:8D:21:97:75:E6:B7:B0:C6:00:C5:09:43
            X509v3 Authority Key Identifier:
                keyid:B6:28:A0:71:3D:01:BF:BE:91:61:DC:B6:73:FD:9C:28:6C:E5:20:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/B628A0713D01BFBE9161DCB673FD9C286CE52020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B628A0713D01BFBE9161DCB673FD9C286CE52020.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/34352e3138302e35322e302f32322d3234203d3e20323639313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:fe:07:c3:7a:0f:fd:24:a8:77:8e:c0:5c:1c:33:90:aa:8f:
         e1:9f:d1:5d:01:d3:4d:6e:e1:77:74:33:fe:22:a6:69:bd:c6:
         36:cc:4c:cb:bf:d2:6f:b4:0c:50:72:0c:3c:5c:40:b1:a1:54:
         80:7f:4f:c7:e7:6a:00:ab:14:24:6a:b3:6b:b7:d2:80:06:0f:
         93:3c:40:9f:28:95:dd:42:b0:b6:79:3d:db:69:a3:37:0b:e8:
         eb:37:75:d5:e1:e8:46:27:4c:8e:9c:ea:fc:db:bb:ae:5b:0e:
         bb:23:2a:20:1c:f0:90:f7:77:16:45:58:08:82:a1:6e:2f:90:
         cb:2b:d2:9c:a0:78:4e:d8:f3:15:0b:a4:3b:41:49:52:e2:16:
         93:58:9f:18:98:3a:56:d5:65:aa:35:fa:99:b9:9f:c6:9d:a1:
         c3:9e:57:37:8e:bc:75:00:b4:6a:0d:de:59:93:99:00:b3:09:
         cd:26:16:0c:4e:d1:e2:8c:55:28:b6:6f:16:3a:c8:7c:d2:d6:
         10:6e:75:60:81:7b:4d:0c:5e:21:9e:20:db:15:9c:9a:33:92:
         2f:90:61:65:0c:22:00:40:77:bc:d4:7e:8b:81:43:b3:9c:d7:
         ea:7c:e4:95:eb:49:16:28:10:82:d7:92:86:50:5a:86:57:fe:
         68:29:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:36 2026 by rpki-client