This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa
File:                     34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa (raw, json)
Hash identifier:          EiwJNveZNS0e13E3HAEA0b8+eY/Qp9ZrhpxcUeYWOEE=
Subject key identifier:   63:8A:66:DE:7D:09:19:59:E0:0D:3E:BB:13:91:2D:74:D8:29:A6:49
Certificate issuer:       /CN=829E33D34ECFB0EC2FFAD4D642341C5C304B4038
Certificate serial:       1C02FE7E253B5B731E2961C671326E0167E549B1
Authority key identifier: 82:9E:33:D3:4E:CF:B0:EC:2F:FA:D4:D6:42:34:1C:5C:30:4B:40:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E33D34ECFB0EC2FFAD4D642341C5C304B4038.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa
Signing time:             Fri 23 Jan 2026 15:31:35 +0000
ROA not before:           Fri 23 Jan 2026 15:26:35 +0000
ROA not after:            Fri 22 Jan 2027 15:31:35 +0000
asID:                     269495
IP address blocks:        45.187.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/829E33D34ECFB0EC2FFAD4D642341C5C304B4038.crl
                          rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/829E33D34ECFB0EC2FFAD4D642341C5C304B4038.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E33D34ECFB0EC2FFAD4D642341C5C304B4038.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 01:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:02:fe:7e:25:3b:5b:73:1e:29:61:c6:71:32:6e:01:67:e5:49:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829E33D34ECFB0EC2FFAD4D642341C5C304B4038
        Validity
            Not Before: Jan 23 15:26:35 2026 GMT
            Not After : Jan 22 15:31:35 2027 GMT
        Subject: CN=638A66DE7D091959E00D3EBB13912D74D829A649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d4:55:5d:9f:54:45:e8:1f:13:08:44:05:4a:
                    0c:0e:d9:ed:27:cb:b2:d0:a4:fa:22:90:51:2b:e1:
                    67:ec:41:83:90:90:0d:49:93:db:78:5b:c0:07:2b:
                    bf:55:79:3e:e8:b8:36:7c:a0:0d:7e:80:2a:de:c5:
                    f8:5e:ed:b6:e5:28:c8:03:9a:67:aa:90:0d:4d:88:
                    0b:71:1b:5e:fe:ab:44:31:f2:f4:75:14:28:03:51:
                    d4:ff:8c:b9:a5:a2:23:a7:f2:75:d0:fd:f4:29:c9:
                    94:ff:c8:ed:10:bb:aa:af:d8:52:18:db:a5:c0:5b:
                    3d:04:63:0b:aa:ed:76:70:62:c6:c2:52:ac:f7:ce:
                    2b:4b:e3:21:64:88:0f:b6:85:cd:50:a6:d8:9e:94:
                    92:56:e9:9f:89:dd:f3:26:5a:9c:b5:79:7a:4c:4a:
                    82:78:71:92:5d:65:f6:29:48:9f:59:ae:5e:b6:ea:
                    09:22:9d:89:eb:fb:42:19:64:05:ea:f1:b3:c9:cb:
                    b9:81:1b:c2:72:a8:ef:87:90:1e:b4:63:07:58:fb:
                    4d:2d:56:74:93:a9:37:57:a7:f3:c1:2d:37:94:01:
                    60:66:2a:b5:ea:c9:f3:d5:8b:4b:78:3f:5a:cf:70:
                    3f:9f:71:2e:bc:15:22:0a:ae:2d:f1:4e:cc:4b:3f:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8A:66:DE:7D:09:19:59:E0:0D:3E:BB:13:91:2D:74:D8:29:A6:49
            X509v3 Authority Key Identifier:
                keyid:82:9E:33:D3:4E:CF:B0:EC:2F:FA:D4:D6:42:34:1C:5C:30:4B:40:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/829E33D34ECFB0EC2FFAD4D642341C5C304B4038.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E33D34ECFB0EC2FFAD4D642341C5C304B4038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:aa:60:a2:23:d8:76:4f:19:1f:e0:07:a5:33:b8:21:f6:
         e9:c9:c9:58:5e:92:3e:a5:41:81:a6:66:8b:13:ea:5a:c7:a6:
         25:49:36:e1:71:18:0a:aa:03:f4:ed:93:5f:14:7c:76:6c:1f:
         bc:cc:46:a5:39:c3:3a:53:cd:64:bf:88:be:f3:3e:1d:38:f2:
         d6:89:6c:53:05:5d:b9:7b:e3:9b:40:6c:6c:2e:b4:e6:21:36:
         47:a1:3a:bf:1a:05:78:74:97:2b:c7:cd:c2:b8:51:da:28:d0:
         3a:5b:ca:64:9f:b8:70:cf:08:23:ea:79:f7:94:71:61:44:51:
         db:32:bf:f9:b2:27:48:22:5d:96:c5:30:83:7e:83:f7:25:28:
         12:5b:89:58:f2:a8:f6:c8:f7:03:b6:1b:38:b4:0b:25:99:da:
         b0:41:08:e9:95:eb:9b:f3:5c:8a:bf:81:76:ab:26:b5:65:fb:
         8c:bc:8f:8b:38:29:46:61:55:e7:9c:fa:e3:01:cc:b0:a4:43:
         fb:94:a3:59:ca:98:b8:5f:1d:77:74:c7:05:98:49:03:7c:8d:
         ab:21:11:89:9b:7b:d8:e3:2d:b9:d6:c2:30:30:d8:ab:69:fc:
         ab:16:a5:86:d4:9f:fe:eb:ef:57:5b:82:ee:e2:36:94:4f:3e:
         28:7d:60:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:36 2026 by rpki-client