This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa (raw, json)
Hash identifier:          8mwHgXK3uG3eviHzEqSVQk7ausNSlSB8hiEyReZk1Uk=
Subject key identifier:   BB:5B:EE:1B:87:E0:36:87:94:BE:A1:17:F8:4A:C2:65:6C:EE:86:1A
Certificate issuer:       /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
Certificate serial:       1613EFC154245383337FDCD578F6239BE3F87766
Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
Signing time:             Tue 16 Dec 2025 21:00:42 +0000
ROA not before:           Tue 16 Dec 2025 20:55:42 +0000
ROA not after:            Tue 15 Dec 2026 21:00:42 +0000
asID:                     268678
IP address blocks:        45.165.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 21:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:13:ef:c1:54:24:53:83:33:7f:dc:d5:78:f6:23:9b:e3:f8:77:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
        Validity
            Not Before: Dec 16 20:55:42 2025 GMT
            Not After : Dec 15 21:00:42 2026 GMT
        Subject: CN=BB5BEE1B87E0368794BEA117F84AC2656CEE861A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:6a:b1:80:37:8e:32:1e:cf:7a:47:a6:51:
                    18:c1:23:70:f1:eb:74:1f:f1:8a:cb:f3:90:4b:ad:
                    3c:0b:52:42:15:c0:8d:f3:d2:dc:b3:9b:b4:b2:89:
                    a8:e7:29:06:e7:c0:f1:cf:e0:99:01:32:b5:cd:72:
                    75:6a:bc:1e:d7:4e:6b:72:56:d2:d8:13:25:1a:a3:
                    80:6a:ae:3a:c5:b7:fc:b3:40:d2:df:69:e5:ee:bd:
                    f8:e7:81:85:3f:03:41:81:28:cf:99:36:e7:90:da:
                    6b:76:1b:e1:57:61:cf:99:ae:dd:8a:75:46:ee:e6:
                    99:b4:66:d4:5e:b2:4a:df:71:30:6f:10:0f:27:62:
                    bb:b4:cf:30:aa:e7:89:67:d4:a4:24:e4:bc:d0:53:
                    54:e8:db:5d:53:c5:0c:99:fd:51:59:b4:4d:26:c9:
                    01:c5:49:8b:b3:43:b7:3d:67:58:ea:73:16:a1:b3:
                    ea:15:8e:71:43:2e:7f:74:20:20:57:d5:24:57:bb:
                    72:de:b2:8d:c2:8c:b9:3a:c6:43:69:c2:46:6e:0d:
                    ee:92:fe:7d:20:74:0c:44:8e:40:93:8a:c0:26:ec:
                    4a:73:dc:7b:38:91:a4:35:4f:43:42:bf:a8:17:8a:
                    e8:ba:a9:f4:b4:d0:2a:14:e3:84:b2:3d:95:30:fe:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5B:EE:1B:87:E0:36:87:94:BE:A1:17:F8:4A:C2:65:6C:EE:86:1A
            X509v3 Authority Key Identifier:
                keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:75:4d:44:43:38:da:8f:8a:73:eb:28:ff:47:dc:49:d1:
         b0:3c:16:11:68:bb:c9:1c:06:33:db:d0:3f:0c:57:13:8e:ef:
         64:b8:df:43:f0:b2:2e:e1:db:c5:39:6a:ae:38:38:95:6a:76:
         6a:cb:9b:e4:e9:73:61:dd:bf:01:6b:7c:65:18:29:f5:e2:c0:
         ae:36:d2:51:08:bc:0a:bd:09:0c:57:88:fc:f1:c1:5e:14:31:
         e3:ad:3e:da:fd:30:1f:a5:fd:8b:a1:5f:4b:3a:ac:e1:31:b5:
         7f:0a:c2:95:e0:d8:79:aa:47:7c:85:99:1e:51:cc:33:6d:bc:
         14:12:87:db:a7:dd:d3:f6:21:8b:0d:6c:b6:df:7b:5d:a5:bb:
         3e:c9:1c:04:cf:cb:f8:ec:5a:c0:62:15:b4:43:f1:11:6d:62:
         43:d8:a4:8c:69:a4:b3:ca:85:a0:86:b1:88:9d:ab:c1:2c:42:
         a3:65:74:93:fa:0c:ef:69:ff:00:87:cd:29:b1:63:b5:dc:4b:
         91:7f:a8:46:1c:51:2b:e2:2f:eb:b7:91:f7:29:f8:67:01:2b:
         c7:37:79:5f:c4:48:22:d5:30:b6:b0:74:00:5d:2f:29:ac:2e:
         7a:54:44:e7:aa:f4:49:8c:67:d4:e7:12:80:5a:f7:c2:9d:a4:
         34:f5:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:40:27 2025 by rpki-client