This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier:          GiD7kTDibJ/BshzFUPm52ifDs5ZHFbawfgZ5SJrFUH8=
Subject key identifier:   4E:0D:6F:31:00:8A:F2:B8:3F:4B:6A:0D:7D:5B:68:96:C2:3E:F0:2C
Certificate issuer:       /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
Certificate serial:       7CD4D386348946A4044609B249DBA641A4C8FD78
Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa
Signing time:             Tue 16 Dec 2025 21:00:41 +0000
ROA not before:           Tue 16 Dec 2025 20:55:41 +0000
ROA not after:            Tue 15 Dec 2026 21:00:41 +0000
asID:                     268678
IP address blocks:        45.165.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 21:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d4:d3:86:34:89:46:a4:04:46:09:b2:49:db:a6:41:a4:c8:fd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
        Validity
            Not Before: Dec 16 20:55:41 2025 GMT
            Not After : Dec 15 21:00:41 2026 GMT
        Subject: CN=4E0D6F31008AF2B83F4B6A0D7D5B6896C23EF02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:7a:22:a2:b6:31:3b:ca:87:36:47:c1:77:
                    98:12:a3:74:a4:cb:ae:19:83:ad:61:a7:e2:35:3f:
                    0e:da:bd:0f:41:43:6e:bc:a1:94:c5:01:95:ec:0c:
                    11:0e:5e:f7:6b:7f:b2:2e:f0:12:b8:f6:4d:69:58:
                    11:dc:7b:98:c2:a4:b6:75:87:af:9b:21:15:63:2f:
                    b4:a0:58:00:34:85:5b:75:bc:99:26:4c:e4:c1:21:
                    ba:7d:a5:05:f5:4b:16:ac:53:71:16:21:79:90:7f:
                    92:b2:e5:dd:3f:7a:f4:64:dd:5a:e4:df:f4:30:02:
                    26:49:41:21:d8:4a:d2:7d:eb:95:11:e1:d7:32:3b:
                    e7:9e:b1:cd:3e:2b:4d:3f:36:6d:1d:02:25:e3:f8:
                    e0:48:dd:ed:ef:59:58:e8:b8:75:83:b9:9e:64:56:
                    c7:73:f6:14:eb:98:e9:25:bf:67:c3:01:a5:c3:d7:
                    73:0d:42:57:0f:f2:3f:78:cf:b5:4f:84:cb:93:db:
                    80:06:ec:af:2c:01:cc:f2:94:9a:e2:71:51:ea:ce:
                    cf:d4:da:14:69:31:f4:fc:a9:d6:d9:ed:82:35:92:
                    2d:31:fe:90:a8:35:b5:79:cd:8a:36:2e:bb:41:a9:
                    50:6e:62:e2:e7:a8:8d:2d:08:ce:8e:fe:24:62:e3:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:6F:31:00:8A:F2:B8:3F:4B:6A:0D:7D:5B:68:96:C2:3E:F0:2C
            X509v3 Authority Key Identifier:
                keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:87:64:be:b7:7d:a2:6c:20:b0:69:b1:31:b7:46:65:b2:19:
         90:43:b3:27:91:56:10:02:67:8c:24:2a:21:04:39:07:a6:12:
         48:ba:89:f5:38:4a:bd:d5:60:28:0b:5b:3a:b3:b9:c4:a2:dc:
         a7:ba:ba:7b:87:17:c3:7a:b6:b5:ce:ea:16:06:09:e9:e2:64:
         c2:6e:fa:79:15:b5:2e:78:57:9f:fd:59:a5:cd:04:d5:ec:50:
         e5:ad:81:63:5e:22:f1:b7:ab:bd:18:36:f3:90:8e:0a:d8:8f:
         a0:86:19:93:e9:65:5c:ba:62:f2:0a:28:dd:42:a5:da:a9:34:
         5b:c1:28:51:f5:09:ae:28:02:82:10:ea:eb:1a:b8:99:9f:a9:
         09:ed:8b:81:17:b4:00:95:74:de:ef:dd:ef:ca:cf:eb:88:0f:
         ce:91:9f:85:34:89:20:8c:d5:e4:4f:dc:a9:a6:00:85:f1:5f:
         cd:8d:47:85:e0:42:59:c7:19:3a:44:91:ce:d5:45:0f:aa:8e:
         e1:2b:54:96:4f:2a:06:df:58:bd:28:4a:73:e1:4d:7c:15:85:
         c0:68:09:53:4e:b7:d5:b0:16:13:8b:a4:7c:dc:81:4e:b4:c8:
         f8:f6:5e:84:4b:51:ef:8b:c2:26:45:e4:09:ee:45:bb:39:e2:
         a7:39:2b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:42:28 2025 by rpki-client