This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/34352e3232362e37322e302f32342d3234203d3e20323636393631.roa
File:                     34352e3232362e37322e302f32342d3234203d3e20323636393631.roa (raw, json)
Hash identifier:          X6rT+TsDkD4an/019dcvH197zaHEuUmepHnLZ1ZwbI4=
Subject key identifier:   D6:BF:9F:A7:62:78:18:9D:27:2F:84:F2:F3:9E:CF:6B:18:50:BD:49
Certificate issuer:       /CN=068991FC2FF257F34E828050A9B08B36CB649BE0
Certificate serial:       50EB0CB161A604E65C913E83D2A42E6C9974929C
Authority key identifier: 06:89:91:FC:2F:F2:57:F3:4E:82:80:50:A9:B0:8B:36:CB:64:9B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/34352e3232362e37322e302f32342d3234203d3e20323636393631.roa
Signing time:             Fri 23 Jan 2026 19:21:11 +0000
ROA not before:           Fri 23 Jan 2026 19:16:11 +0000
ROA not after:            Fri 22 Jan 2027 19:21:11 +0000
asID:                     266961
IP address blocks:        45.226.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.crl
                          rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:eb:0c:b1:61:a6:04:e6:5c:91:3e:83:d2:a4:2e:6c:99:74:92:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068991FC2FF257F34E828050A9B08B36CB649BE0
        Validity
            Not Before: Jan 23 19:16:11 2026 GMT
            Not After : Jan 22 19:21:11 2027 GMT
        Subject: CN=D6BF9FA76278189D272F84F2F39ECF6B1850BD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ac:0c:25:4f:87:2c:c3:79:fe:66:de:f1:b1:
                    53:93:35:ab:ef:67:67:06:d0:f7:a0:b3:b3:de:21:
                    f0:fd:73:f9:87:e7:73:28:db:f9:54:15:1c:59:e8:
                    1e:84:2a:16:17:80:40:c4:57:36:c2:0e:9f:ae:05:
                    c3:82:0f:ac:af:f4:a2:1b:ea:cb:5b:ca:fc:ec:90:
                    87:af:1c:f3:4c:a6:62:54:27:d5:1e:34:76:33:7f:
                    8a:38:5e:e8:d6:0b:a3:52:ca:2e:60:00:e1:0f:39:
                    2f:0c:0e:99:78:19:7a:fe:04:40:c1:2b:fd:70:22:
                    37:db:a5:41:90:db:9d:62:21:57:2d:7d:33:98:4f:
                    3a:d5:e1:77:92:77:fb:15:9c:95:db:51:6e:0b:77:
                    7d:02:26:0f:e3:3a:d6:fe:9d:d5:a7:39:73:1e:71:
                    ac:b9:a0:8c:06:9e:e5:dd:e0:1f:0a:6b:15:d1:c2:
                    63:ad:d7:74:81:7e:98:6f:fd:ac:63:b1:91:8c:3e:
                    35:b8:ca:85:2a:4a:19:fc:fd:0b:06:b6:a4:a2:7e:
                    e1:a3:5f:63:c4:bf:c2:93:ef:17:06:3e:5d:8e:d1:
                    b0:2d:9a:9c:a7:62:eb:48:50:6d:ea:86:55:53:a4:
                    1f:f0:f0:d2:a6:38:92:50:98:a4:09:d8:8c:87:c3:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BF:9F:A7:62:78:18:9D:27:2F:84:F2:F3:9E:CF:6B:18:50:BD:49
            X509v3 Authority Key Identifier:
                keyid:06:89:91:FC:2F:F2:57:F3:4E:82:80:50:A9:B0:8B:36:CB:64:9B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/068991FC2FF257F34E828050A9B08B36CB649BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068991FC2FF257F34E828050A9B08B36CB649BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/34352e3232362e37322e302f32342d3234203d3e20323636393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:08:37:86:77:59:94:b7:66:d4:4d:31:21:a9:df:d9:43:28:
         0c:33:7d:f5:78:2b:bd:60:74:1a:d3:6d:21:de:39:69:ac:75:
         58:df:ce:62:12:eb:27:7e:13:1d:e9:ef:bb:42:f4:39:17:a4:
         c6:84:74:02:27:d6:aa:1e:cf:4f:cd:a3:08:89:ce:b5:57:f9:
         6a:79:b1:d1:86:97:d0:43:bc:a4:ea:21:69:e6:e6:a1:3a:d3:
         1e:66:60:07:df:be:32:a9:74:44:dc:f4:b0:cc:4f:b2:3a:fa:
         7f:8b:7f:bd:3f:86:25:ac:b0:16:53:95:64:74:64:be:f0:f2:
         4c:78:47:f6:03:54:25:29:a3:92:22:6b:7b:18:c0:6b:2f:64:
         c3:6a:38:78:13:cf:41:08:50:7e:e4:30:ba:2e:3c:d6:d5:aa:
         22:3a:a3:51:8d:8c:e2:fb:e2:17:76:7c:5a:79:c5:03:f2:a5:
         a0:e6:ec:ec:11:fa:e9:b5:34:d3:07:c1:7d:a8:23:ab:06:52:
         25:b9:32:60:48:5d:39:44:80:43:d3:59:ae:25:7f:63:27:c1:
         56:d1:0e:37:63:87:fa:d2:62:9b:4a:b0:75:20:d6:45:27:50:
         15:d2:2f:13:5f:d4:8b:0b:c3:f6:c3:a4:6a:ee:b0:8d:9a:7f:
         40:f7:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:25:13 2026 by rpki-client