This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa
File:                     34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa (raw, json)
Hash identifier:          c07EaBTiBajORSnMeIfBPQ2dM9OJejO0o1YWz3THyQY=
Subject key identifier:   F5:20:BC:42:CF:EB:53:F6:53:F1:D6:42:5E:25:7B:B5:1A:AB:CB:94
Certificate issuer:       /CN=C5423CDD002348905AC2D36D7816B81D97846978
Certificate serial:       81041E43031A23CDC528B4E4D1341B3A71A39F
Authority key identifier: C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa
Signing time:             Wed 19 Nov 2025 12:16:15 +0000
ROA not before:           Wed 19 Nov 2025 12:11:15 +0000
ROA not after:            Wed 18 Nov 2026 12:16:15 +0000
asID:                     269288
IP address blocks:        45.183.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl
                          rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            81:04:1e:43:03:1a:23:cd:c5:28:b4:e4:d1:34:1b:3a:71:a3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5423CDD002348905AC2D36D7816B81D97846978
        Validity
            Not Before: Nov 19 12:11:15 2025 GMT
            Not After : Nov 18 12:16:15 2026 GMT
        Subject: CN=F520BC42CFEB53F653F1D6425E257BB51AABCB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:33:80:1c:89:eb:7f:41:a0:09:07:85:cf:a2:
                    04:e8:17:cd:32:06:58:2b:f0:b4:ce:e2:bc:77:17:
                    b9:45:cc:fa:15:0d:c9:6c:2c:c7:8b:fc:ed:98:ef:
                    2e:87:9c:cc:15:ab:ea:0d:11:b2:dc:c7:8a:72:63:
                    4e:9d:e4:9e:5d:31:c6:67:e4:e1:08:36:37:87:f2:
                    65:16:c3:bb:76:d1:30:74:87:ed:aa:e0:58:5c:5f:
                    61:f7:d9:9c:07:5d:a7:ba:0d:ae:bd:42:69:59:8a:
                    a4:4d:5b:e8:80:c9:04:f5:89:12:39:f8:53:88:fd:
                    f0:80:5f:37:15:fe:f9:1c:52:25:96:19:dc:43:00:
                    94:f8:b3:80:08:42:3f:1a:12:b4:1d:ee:4e:e8:0c:
                    1c:90:39:84:84:eb:6e:f3:e5:d5:9a:43:33:9d:c3:
                    73:bb:24:19:3a:1c:2f:aa:cc:de:33:03:67:a9:88:
                    dd:6c:38:d4:c6:11:14:7a:bd:fc:62:84:61:c0:1f:
                    0c:68:26:a0:6c:21:5f:53:04:01:b5:6b:6c:0f:4f:
                    cd:e2:d5:58:58:1e:08:53:e5:8e:77:68:49:2f:ea:
                    d0:62:59:bd:b3:33:51:3c:a1:3b:92:d6:36:16:ba:
                    87:5f:ed:3a:4c:1c:9b:90:ed:30:ae:0e:b9:5f:44:
                    21:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:20:BC:42:CF:EB:53:F6:53:F1:D6:42:5E:25:7B:B5:1A:AB:CB:94
            X509v3 Authority Key Identifier:
                keyid:C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:20:7c:a5:09:ce:95:72:4e:48:6d:2a:67:ee:2a:7f:89:17:
         ad:31:12:cd:b1:e1:86:fc:f4:f5:eb:00:52:79:7d:93:74:02:
         b9:35:43:9a:7d:cc:a7:19:8f:af:d6:ca:0a:ae:85:e5:27:81:
         a9:63:f7:71:53:98:0a:e6:9f:d3:eb:00:89:48:0e:2b:d3:40:
         bf:7b:91:f7:42:0d:0f:1c:87:8c:6d:a9:32:1a:f7:0f:b7:01:
         d7:0f:5f:b6:a8:2e:b9:23:cc:2f:a9:e8:4e:93:d4:0f:30:99:
         8d:34:65:cd:81:19:c3:58:1f:04:5c:a4:55:39:80:00:8f:2a:
         f1:a9:0f:b8:81:83:36:e2:60:b7:4a:aa:cc:3d:4b:43:22:7b:
         35:cc:8e:38:e5:43:64:34:b4:1e:13:2a:90:0d:e6:0c:f1:45:
         dd:67:89:e8:2b:1e:ce:6c:cb:f1:7a:a8:b2:ea:06:bc:ca:e7:
         a9:42:d6:12:03:10:2b:81:df:c3:be:4d:58:c9:3f:6d:22:8f:
         ad:37:b3:b0:85:24:9b:24:8e:70:33:67:27:01:c1:76:d0:c8:
         d4:c4:30:e0:64:b7:49:48:ef:d0:a2:d0:40:27:18:e5:2a:50:
         29:55:d1:dd:31:81:0e:8b:41:e1:51:83:d0:d2:d9:44:67:27:
         7b:89:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:05:20 2025 by rpki-client