This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/34352e3232362e37322e302f32322d3232203d3e20323636393631.roa
File:                     34352e3232362e37322e302f32322d3232203d3e20323636393631.roa (raw, json)
Hash identifier:          9FJFoRLmZ+TcLT9iILVQx9EK62ZcdbhSteyJ97JR1Tg=
Subject key identifier:   BA:5A:CA:25:80:8A:C5:4F:61:36:1F:1C:1C:0E:0A:B6:ED:09:B2:84
Certificate issuer:       /CN=068991FC2FF257F34E828050A9B08B36CB649BE0
Certificate serial:       46D7997E665C5FC55B058CD00A5519C0617188D3
Authority key identifier: 06:89:91:FC:2F:F2:57:F3:4E:82:80:50:A9:B0:8B:36:CB:64:9B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/34352e3232362e37322e302f32322d3232203d3e20323636393631.roa
Signing time:             Fri 23 Jan 2026 19:21:09 +0000
ROA not before:           Fri 23 Jan 2026 19:16:09 +0000
ROA not after:            Fri 22 Jan 2027 19:21:09 +0000
asID:                     266961
IP address blocks:        45.226.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.crl
                          rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d7:99:7e:66:5c:5f:c5:5b:05:8c:d0:0a:55:19:c0:61:71:88:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068991FC2FF257F34E828050A9B08B36CB649BE0
        Validity
            Not Before: Jan 23 19:16:09 2026 GMT
            Not After : Jan 22 19:21:09 2027 GMT
        Subject: CN=BA5ACA25808AC54F61361F1C1C0E0AB6ED09B284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:fe:b4:5c:af:ac:8e:21:fc:b5:36:80:44:
                    b8:34:f5:0d:92:ed:49:e9:21:97:ba:25:f9:a7:00:
                    94:81:8e:17:55:79:d0:fd:6d:95:84:85:fd:f2:79:
                    47:4d:55:9a:fc:fc:99:63:ce:20:57:65:ca:47:17:
                    26:b3:ee:0d:9a:28:00:13:96:6f:17:24:50:58:0b:
                    3e:3c:37:a9:c5:91:96:c3:a2:af:5e:7d:f4:60:82:
                    0f:3e:15:9e:95:d0:42:7a:91:41:3c:1b:f5:1f:2d:
                    16:ca:7f:86:bb:31:d7:89:bc:55:ee:3d:59:6f:20:
                    7b:2f:f8:5e:08:4f:d0:58:46:59:e9:d9:29:32:6e:
                    97:de:45:91:71:b8:da:61:a8:bd:fd:e2:75:1b:02:
                    23:5d:5c:d7:1c:67:4b:bd:2d:bf:56:84:67:4c:0b:
                    93:d3:ff:25:cb:a6:80:08:d9:75:42:7e:8f:b3:f6:
                    c4:55:48:bf:68:07:c9:b3:76:e3:10:15:da:89:dd:
                    77:d1:a8:e0:d9:34:fb:ef:58:0d:16:4d:75:d8:4b:
                    56:5b:b8:49:70:ca:7b:03:f6:97:fc:d6:22:49:72:
                    f5:f1:a5:d1:54:6e:9c:d7:75:3e:31:19:24:2d:71:
                    ea:5c:77:88:97:3b:db:1d:12:a3:77:53:23:29:01:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5A:CA:25:80:8A:C5:4F:61:36:1F:1C:1C:0E:0A:B6:ED:09:B2:84
            X509v3 Authority Key Identifier:
                keyid:06:89:91:FC:2F:F2:57:F3:4E:82:80:50:A9:B0:8B:36:CB:64:9B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/34352e3232362e37322e302f32322d3232203d3e20323636393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:1f:d3:20:85:de:b4:62:22:8f:c6:95:b6:4e:6e:c1:5b:8e:
         d8:7b:de:86:d6:fc:4c:18:3c:66:79:d9:f6:8f:b1:6e:e7:2b:
         06:30:21:b0:92:1d:b9:2d:af:09:05:4a:09:9f:ee:8b:19:48:
         bd:79:a3:bf:3a:74:0b:21:b3:06:01:2e:db:d5:42:88:66:4f:
         b5:14:77:71:55:fc:61:aa:59:3d:fd:eb:7c:bc:4c:77:00:7f:
         9a:2b:16:9c:33:94:47:6b:dc:21:a8:75:18:1b:79:39:fe:cf:
         75:84:b5:1a:d2:97:f8:20:b0:d0:95:ee:e7:86:4c:9f:1e:f4:
         a3:df:1e:7d:9f:e1:a4:07:af:61:66:5d:e5:6d:f7:41:5c:43:
         b0:27:9f:7e:cb:42:27:b3:65:06:0d:0c:92:98:b7:fe:2f:84:
         f3:ab:1c:28:1c:ae:c0:ba:e7:1c:cd:ba:31:eb:cd:7f:a7:b6:
         7f:96:24:9e:86:82:d0:04:31:95:af:fb:85:13:d0:9d:9e:2f:
         37:44:71:e1:67:0c:ed:d4:d1:65:75:87:96:8f:01:7e:a9:3a:
         7a:54:a2:4c:bd:7e:a1:4d:b7:74:cf:88:f9:a2:96:1b:08:50:
         40:04:21:88:60:97:dd:3b:68:78:e6:ff:ea:40:f7:38:3c:fe:
         75:e6:da:32
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURteZfmZcX8VbBYzQClUZwGFxiNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY4OTkxRkMyRkYyNTdGMzRFODI4MDUwQTlCMDhCMzZD
QjY0OUJFMDAeFw0yNjAxMjMxOTE2MDlaFw0yNzAxMjIxOTIxMDlaMDMxMTAvBgNV
BAMTKEJBNUFDQTI1ODA4QUM1NEY2MTM2MUYxQzFDMEUwQUI2RUQwOUIyODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsH/60XK+sjiH8tTaARLg09Q2S
7UnpIZe6JfmnAJSBjhdVedD9bZWEhf3yeUdNVZr8/JljziBXZcpHFyaz7g2aKAAT
lm8XJFBYCz48N6nFkZbDoq9effRggg8+FZ6V0EJ6kUE8G/UfLRbKf4a7MdeJvFXu
PVlvIHsv+F4IT9BYRlnp2SkybpfeRZFxuNphqL394nUbAiNdXNccZ0u9Lb9WhGdM
C5PT/yXLpoAI2XVCfo+z9sRVSL9oB8mzduMQFdqJ3XfRqODZNPvvWA0WTXXYS1Zb
uElwynsD9pf81iJJcvXxpdFUbpzXdT4xGSQtcepcd4iXO9sdEqN3UyMpAbuPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUulrKJYCKxU9hNh8cHA4Ktu0JsoQwHwYDVR0j
BBgwFoAUBomR/C/yV/NOgoBQqbCLNstkm+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVM3cU1VOW5FM01nbnNIcGd2d210dWgzUkhHUHFMVGc4UGNCYTRUUWZH
YnkvMC8wNjg5OTFGQzJGRjI1N0YzNEU4MjgwNTBBOUIwOEIzNkNCNjQ5QkUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODk5MUZDMkZGMjU3RjM0
RTgyODA1MEE5QjA4QjM2Q0I2NDlCRTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTN3FNVTluRTNNZ25zSHBndndtdHVoM1JIR1BxTFRnOFBjQmE0VFFmR2J5LzAv
MzQzNTJlMzIzMjM2MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2
MzkzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeJIMA0GCSqGSIb3DQEBCwUAA4IBAQBsH9Mghd60
YiKPxpW2Tm7BW47Ye96G1vxMGDxmedn2j7Fu5ysGMCGwkh25La8JBUoJn+6LGUi9
eaO/OnQLIbMGAS7b1UKIZk+1FHdxVfxhqlk9/et8vEx3AH+aKxacM5RHa9whqHUY
G3k5/s91hLUa0pf4ILDQle7nhkyfHvSj3x59n+GkB69hZl3lbfdBXEOwJ59+y0In
s2UGDQySmLf+L4TzqxwoHK7Auucczbox681/p7Z/liSehoLQBDGVr/uFE9Cdni83
RHHhZwzt1NFldYeWjwF+qTp6VKJMvX6hTbd0z4j5opYbCFBABCGIYJfdO2h45v/q
QPc4PP515toy
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:25:18 2026 by rpki-client