This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa
File:                     34352e36352e3136302e302f32322d3332203d3e20323731353031.roa (raw, json)
Hash identifier:          H3NuqNk3vNNBirGpcjdspYwdcMeRwfBDCSSVvmF9bXs=
Subject key identifier:   66:45:FE:46:86:33:A3:2E:93:7E:47:9A:F0:99:D4:4A:D9:E7:35:D4
Certificate issuer:       /CN=5B19D2A4A69325A57956304D95BBD0D4EDA22145
Certificate serial:       143FB59C178E6392C77E912714DDC72B8E474DC4
Authority key identifier: 5B:19:D2:A4:A6:93:25:A5:79:56:30:4D:95:BB:D0:D4:ED:A2:21:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B19D2A4A69325A57956304D95BBD0D4EDA22145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa
Signing time:             Tue 13 Jan 2026 20:42:06 +0000
ROA not before:           Tue 13 Jan 2026 20:37:06 +0000
ROA not after:            Tue 12 Jan 2027 20:42:06 +0000
asID:                     271501
IP address blocks:        45.65.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/5B19D2A4A69325A57956304D95BBD0D4EDA22145.crl
                          rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/5B19D2A4A69325A57956304D95BBD0D4EDA22145.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B19D2A4A69325A57956304D95BBD0D4EDA22145.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3f:b5:9c:17:8e:63:92:c7:7e:91:27:14:dd:c7:2b:8e:47:4d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B19D2A4A69325A57956304D95BBD0D4EDA22145
        Validity
            Not Before: Jan 13 20:37:06 2026 GMT
            Not After : Jan 12 20:42:06 2027 GMT
        Subject: CN=6645FE468633A32E937E479AF099D44AD9E735D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:dd:73:38:9d:f2:27:f1:97:5c:20:70:d6:
                    c5:7d:98:df:4b:97:00:ee:21:7c:3d:7c:64:22:0a:
                    22:cd:37:35:18:86:94:43:7f:ae:89:a3:07:a6:d5:
                    1b:64:3b:d8:89:b0:65:82:25:e9:c3:17:09:9d:84:
                    54:9d:e0:fc:51:1f:f3:45:64:01:6a:0d:64:c2:1a:
                    9a:d3:26:87:65:eb:61:13:4c:3a:60:9c:91:98:ba:
                    83:48:a4:91:73:94:95:a1:b3:7a:47:d7:c3:bc:33:
                    65:49:44:30:33:e0:88:20:23:8a:39:c0:dd:43:b9:
                    be:32:3d:25:11:66:70:dd:93:72:2f:89:7b:b7:0b:
                    cb:30:25:17:f6:2a:d0:5a:80:6f:84:c1:36:c2:32:
                    ce:79:4a:a0:2f:eb:65:f6:c6:b4:f3:c9:e4:50:ad:
                    7f:fa:ca:63:86:6b:4d:4e:bf:ac:3e:47:4e:fc:6d:
                    00:46:ae:0e:e0:bc:6c:09:bc:38:5a:01:ff:a6:50:
                    c5:46:3c:e9:30:ea:b1:21:03:e0:4d:ec:51:ac:56:
                    de:f4:12:5d:c7:1f:9b:7d:eb:2f:8f:7b:a1:1e:24:
                    2d:41:a0:22:c9:5d:d5:97:b0:6c:2d:79:9d:ea:23:
                    b7:d6:22:85:20:ef:99:1f:a4:d7:3e:b6:f6:07:e6:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:45:FE:46:86:33:A3:2E:93:7E:47:9A:F0:99:D4:4A:D9:E7:35:D4
            X509v3 Authority Key Identifier:
                keyid:5B:19:D2:A4:A6:93:25:A5:79:56:30:4D:95:BB:D0:D4:ED:A2:21:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/5B19D2A4A69325A57956304D95BBD0D4EDA22145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B19D2A4A69325A57956304D95BBD0D4EDA22145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:f4:71:af:13:4c:d8:d3:d8:2b:fb:30:46:62:ac:3e:9c:
         0a:19:8c:c4:32:ac:f0:8a:54:ad:96:6a:d5:14:87:7e:77:6c:
         4c:0a:a4:72:7c:7a:d7:9f:73:d4:30:4d:80:70:ba:ba:c3:81:
         4d:e2:5b:07:8b:fd:ab:11:6f:62:4e:37:cc:b7:d9:23:f7:63:
         00:f9:42:76:36:5e:70:21:2a:6e:14:9d:fd:8c:fe:28:8a:81:
         9c:1f:a3:c2:48:fb:e5:9b:1f:ab:cd:84:dd:ae:94:eb:a0:ae:
         d8:80:5f:0c:5f:3a:6c:ca:a9:05:d8:d6:e5:4d:01:f8:69:f7:
         4c:41:f0:33:49:40:de:b5:ac:5b:6e:b4:b0:f1:67:73:d8:05:
         1a:ce:52:b3:61:aa:d2:2c:a0:c0:06:28:83:95:64:c4:27:5c:
         3f:ca:14:3a:05:ef:4f:7d:f3:a0:5d:4b:02:fb:21:79:43:1c:
         a2:cb:79:0f:57:71:c6:8d:eb:3b:99:91:32:af:77:e4:ff:28:
         00:72:02:24:1d:16:da:87:26:b2:a5:17:d4:22:84:47:9b:0f:
         ff:9d:ba:3c:0d:0c:c5:33:5c:5c:70:67:d6:48:3a:9f:d9:60:
         0a:09:d3:7a:a2:41:e9:6b:c1:f4:56:07:b4:a0:ec:b3:d7:c0:
         8d:97:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:21 2026 by rpki-client