This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135312e302f32342d3234203d3e20323638363738.roa
File:                     34352e3136352e3135312e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier:          n7MoVOblgjqN+U9PF9Dyp725p+0rWj7F3VZWPLIXR+s=
Subject key identifier:   A9:8E:EC:B4:BB:F6:62:5F:5E:F7:46:FC:28:62:8A:EB:92:80:2A:62
Certificate issuer:       /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
Certificate serial:       39E4FD9BC2D7D6232C5D09C500234DB57E777E9B
Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135312e302f32342d3234203d3e20323638363738.roa
Signing time:             Tue 16 Dec 2025 21:00:42 +0000
ROA not before:           Tue 16 Dec 2025 20:55:42 +0000
ROA not after:            Tue 15 Dec 2026 21:00:42 +0000
asID:                     268678
IP address blocks:        45.165.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 21:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e4:fd:9b:c2:d7:d6:23:2c:5d:09:c5:00:23:4d:b5:7e:77:7e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
        Validity
            Not Before: Dec 16 20:55:42 2025 GMT
            Not After : Dec 15 21:00:42 2026 GMT
        Subject: CN=A98EECB4BBF6625F5EF746FC28628AEB92802A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:b3:54:fa:66:cb:e1:cc:de:1e:98:d6:b6:
                    d7:e7:16:db:81:ad:92:da:ec:28:8f:0f:43:68:ec:
                    10:02:a8:a0:c0:91:34:b3:c5:ce:cc:54:06:2b:a1:
                    70:d6:52:98:b8:82:c0:9e:f0:f4:43:f3:d7:72:42:
                    62:a7:3c:58:0b:98:75:f3:3c:f5:27:5f:89:59:2e:
                    b2:60:5d:8e:87:a7:7b:ad:6a:cd:58:fc:89:da:cf:
                    63:93:e3:30:9c:38:6f:f4:59:65:71:b6:93:dc:48:
                    00:20:79:e0:5e:57:60:f9:6b:8a:8c:39:dd:45:8b:
                    ee:3e:4c:81:c3:a6:51:1b:c3:42:a2:a0:fc:87:1c:
                    32:4e:b7:5e:ef:76:a9:3b:07:75:3f:40:be:78:fc:
                    c3:9f:e0:71:9e:e3:32:bf:3d:94:c5:08:af:93:e0:
                    9c:f8:9d:f2:4f:fd:00:66:58:83:ba:ed:6b:58:cd:
                    ca:63:9e:60:a1:bf:56:24:55:99:99:74:50:7b:4d:
                    d1:af:ef:34:7f:1b:c4:73:57:c7:5f:78:99:bf:4f:
                    53:87:7a:5b:91:45:09:5d:7f:8e:7c:04:23:97:2c:
                    87:c4:dd:7f:0e:79:11:9c:38:1f:35:cd:8c:01:6c:
                    8c:06:74:f7:2b:11:b3:e4:20:64:9b:74:0c:c7:b1:
                    bc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:EC:B4:BB:F6:62:5F:5E:F7:46:FC:28:62:8A:EB:92:80:2A:62
            X509v3 Authority Key Identifier:
                keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135312e302f32342d3234203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:5f:1e:40:47:31:e4:8a:df:ee:29:77:e8:9e:e3:25:ca:e7:
         d3:9a:05:2a:fb:c2:ab:bc:af:08:0a:d0:05:54:73:f9:87:c9:
         82:c6:67:f9:a3:ec:db:a2:b6:68:85:ae:a0:e2:ab:e9:af:94:
         13:bf:c6:9c:da:68:86:34:b0:80:6e:1f:a5:20:8e:0e:26:e7:
         fd:b1:d6:ef:f7:ec:f4:a5:23:28:2f:b4:de:bb:da:9b:21:51:
         5d:e1:54:29:80:c9:e1:da:96:70:6f:b0:b8:68:82:03:de:ef:
         ca:b5:7d:01:6b:da:ff:36:99:8e:24:90:78:3c:60:10:3b:5b:
         77:73:2c:b5:47:18:7c:f1:4d:34:3a:69:5d:2e:40:9d:67:2f:
         76:7c:ac:cb:68:29:b0:c4:f1:9e:7c:1d:e7:24:69:4f:5b:61:
         ae:f0:b8:2f:ff:ed:a9:00:85:37:3f:31:74:4a:74:83:fd:86:
         ef:e0:86:aa:f9:0a:77:ca:29:fc:94:00:7d:05:4d:2f:5e:a2:
         f0:0e:de:93:94:c7:94:26:76:f6:e9:fe:64:64:8f:cd:cb:a5:
         7d:11:dc:57:7d:ea:be:02:1b:37:81:cd:ff:b5:f4:e6:f6:b3:
         6c:17:48:82:18:6f:c9:ae:e9:14:93:88:a7:18:5a:1a:47:da:
         6a:36:f3:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOeT9m8LX1iMsXQnFACNNtX53fpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIyMUNGNDBGM0M1RkVBMzVFQUMyRjRDQ0VCRDI3QUU0
REFDMjQ3ODAeFw0yNTEyMTYyMDU1NDJaFw0yNjEyMTUyMTAwNDJaMDMxMTAvBgNV
BAMTKEE5OEVFQ0I0QkJGNjYyNUY1RUY3NDZGQzI4NjI4QUVCOTI4MDJBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEbNU+mbL4czeHpjWttfnFtuB
rZLa7CiPD0No7BACqKDAkTSzxc7MVAYroXDWUpi4gsCe8PRD89dyQmKnPFgLmHXz
PPUnX4lZLrJgXY6Hp3utas1Y/Inaz2OT4zCcOG/0WWVxtpPcSAAgeeBeV2D5a4qM
Od1Fi+4+TIHDplEbw0KioPyHHDJOt17vdqk7B3U/QL54/MOf4HGe4zK/PZTFCK+T
4Jz4nfJP/QBmWIO67WtYzcpjnmChv1YkVZmZdFB7TdGv7zR/G8RzV8dfeJm/T1OH
eluRRQldf458BCOXLIfE3X8OeRGcOB81zYwBbIwGdPcrEbPkIGSbdAzHsbxnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqY7stLv2Yl9e90b8KGKK65KAKmIwHwYDVR0j
BBgwFoAU+yHPQPPF/qNerC9Mzr0nrk2sJHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMC9GQjIxQ0Y0MEYzQzVGRUEzNUVBQzJGNENDRUJEMjdBRTREQUMyNDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMjFDRjQwRjNDNUZFQTM1
RUFDMkY0Q0NFQkQyN0FFNERBQzI0NzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv
MzQzNTJlMzEzNjM1MmUzMTM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpZcwDQYJKoZIhvcNAQELBQADggEBAElfHkBH
MeSK3+4pd+ie4yXK59OaBSr7wqu8rwgK0AVUc/mHyYLGZ/mj7NuitmiFrqDiq+mv
lBO/xpzaaIY0sIBuH6Ugjg4m5/2x1u/37PSlIygvtN672pshUV3hVCmAyeHalnBv
sLhoggPe78q1fQFr2v82mY4kkHg8YBA7W3dzLLVHGHzxTTQ6aV0uQJ1nL3Z8rMto
KbDE8Z58HeckaU9bYa7wuC//7akAhTc/MXRKdIP9hu/ghqr5CnfKKfyUAH0FTS9e
ovAO3pOUx5Qmdvbp/mRkj83LpX0R3Fd96r4CGzeBzf+19Ob2s2wXSIIYb8mu6RST
iKcYWhpH2mo289o=
-----END CERTIFICATE-----
Generated at Tue Dec 16 23:40:27 2025 by rpki-client