This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa
File:                     34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa (raw, json)
Hash identifier:          PrgC4LOzfAlaSB1zocGyKmcbdkVwofQrrGw2XfZmg0A=
Subject key identifier:   52:56:50:49:FC:DC:21:BC:92:B8:A7:B9:31:57:49:39:79:92:C8:55
Certificate issuer:       /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Certificate serial:       01BB03556B6312AD43972D56FED374C66DD7AECF
Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa
Signing time:             Sat 08 Nov 2025 16:26:13 +0000
ROA not before:           Sat 08 Nov 2025 16:21:13 +0000
ROA not after:            Sat 07 Nov 2026 16:26:13 +0000
asID:                     269495
IP address blocks:        45.187.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl
                          rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bb:03:55:6b:63:12:ad:43:97:2d:56:fe:d3:74:c6:6d:d7:ae:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
        Validity
            Not Before: Nov  8 16:21:13 2025 GMT
            Not After : Nov  7 16:26:13 2026 GMT
        Subject: CN=52565049FCDC21BC92B8A7B9315749397992C855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:5d:5b:2b:c0:02:a4:8c:23:86:25:dc:18:
                    da:4e:98:0f:a8:6d:3f:2c:66:c4:d8:98:e0:3d:17:
                    ff:ec:59:36:fc:8a:17:b5:eb:7d:93:cc:7e:33:ef:
                    af:ea:35:79:18:71:cb:a1:c1:11:f0:81:f2:8e:96:
                    11:e2:9f:2e:50:62:37:4e:26:bb:91:43:08:93:cd:
                    58:22:9e:ce:39:2f:c8:c8:35:6d:04:72:64:e4:b0:
                    f0:e4:9b:ea:21:02:b7:51:54:d8:99:a6:be:aa:64:
                    19:8b:04:e4:27:df:90:86:e3:1a:a2:92:3e:91:36:
                    fe:11:ef:d1:fc:69:bc:8a:92:d9:e6:4d:19:f5:6b:
                    79:20:63:ca:69:10:ea:00:42:f6:94:d7:f9:17:1c:
                    53:b4:ce:5f:c3:90:f9:fa:2a:e0:ce:08:c9:82:9b:
                    bf:f6:62:34:c8:1c:76:9c:19:32:17:9a:a3:1d:3d:
                    52:a3:f5:87:9b:e8:b4:22:ce:1f:25:ff:fc:64:a0:
                    6c:e6:07:c1:33:76:dc:d9:99:f8:ef:b0:01:75:ed:
                    a6:d9:11:12:31:67:36:0d:a6:02:72:ac:b8:9a:3f:
                    28:fc:88:f8:70:17:bb:db:c3:aa:4d:d8:6a:f1:d3:
                    61:ad:67:e4:49:c9:4b:d7:07:cd:cf:a4:09:dd:c6:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:56:50:49:FC:DC:21:BC:92:B8:A7:B9:31:57:49:39:79:92:C8:55
            X509v3 Authority Key Identifier:
                keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:d3:b8:76:69:9f:50:27:9f:1c:98:6e:a2:23:38:ab:a3:9a:
         6f:eb:8c:4e:81:65:fb:56:8e:00:6a:2c:73:de:c2:be:6c:b9:
         92:84:1d:1f:d3:7e:5d:e4:2e:fb:d2:14:ca:17:22:46:6e:b1:
         d6:bd:12:d0:9d:db:c3:4d:20:c2:e4:af:1e:d1:a6:95:85:fb:
         f1:59:51:75:c2:1b:6b:6d:d6:a3:b3:61:61:dd:a0:3e:d7:32:
         2a:9e:a0:5e:ea:f2:49:4b:27:88:37:ff:e6:cb:65:66:d1:86:
         87:84:e5:f7:f3:3f:8b:76:8b:e4:05:f2:80:12:44:aa:e5:cd:
         ac:42:23:2b:45:1a:82:8d:91:ea:89:53:e0:60:5e:a2:e6:c4:
         e7:92:1a:d8:f3:11:7c:4f:36:fa:e5:82:d6:d5:27:07:55:f1:
         c9:8e:37:f5:20:3c:91:fa:41:43:df:d6:7c:e7:ab:93:5f:f6:
         50:7a:11:c3:80:4e:eb:db:90:a7:80:3c:95:5b:bd:98:f7:07:
         d4:e5:c1:05:eb:b9:08:33:31:17:b0:43:e1:eb:ad:25:e1:02:
         a6:f4:4a:03:f9:98:c3:a9:f2:30:bc:d9:42:24:3e:31:68:eb:
         5a:d5:13:71:3c:ec:15:a2:4f:1b:fa:c9:60:1c:96:b8:c8:15:
         07:80:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:29:55 2025 by rpki-client