This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3234203d3e20323638333533.roa
File:                     34352e3233392e35322e302f32322d3234203d3e20323638333533.roa (raw, json)
Hash identifier:          uFkPoA1+oO+rshI6iFFed16dlXcwyuJOS1XZFa6vS9I=
Subject key identifier:   C2:ED:FB:FD:45:A1:18:9C:32:87:40:7D:DA:FF:68:0A:DE:2B:11:61
Certificate issuer:       /CN=DBB8F652599017C13A5576AE91B2AD338A9DF1EA
Certificate serial:       34A01733497BC7C84A3E8DE8BE3FB8AB94E4106D
Authority key identifier: DB:B8:F6:52:59:90:17:C1:3A:55:76:AE:91:B2:AD:33:8A:9D:F1:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3234203d3e20323638333533.roa
Signing time:             Wed 19 Nov 2025 20:53:58 +0000
ROA not before:           Wed 19 Nov 2025 20:48:58 +0000
ROA not after:            Wed 18 Nov 2026 20:53:58 +0000
asID:                     268353
IP address blocks:        45.239.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.crl
                          rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a0:17:33:49:7b:c7:c8:4a:3e:8d:e8:be:3f:b8:ab:94:e4:10:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB8F652599017C13A5576AE91B2AD338A9DF1EA
        Validity
            Not Before: Nov 19 20:48:58 2025 GMT
            Not After : Nov 18 20:53:58 2026 GMT
        Subject: CN=C2EDFBFD45A1189C3287407DDAFF680ADE2B1161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:af:04:6d:f7:e5:4c:1d:36:7e:ff:17:15:
                    f2:ce:8b:a0:20:ce:dd:ff:73:ec:85:73:bf:91:84:
                    2e:99:1a:f7:8e:c2:f4:19:77:e8:d1:bf:68:04:d0:
                    58:01:6f:a9:c6:67:07:67:ce:dd:ef:79:a5:bd:60:
                    53:33:e8:a5:41:7d:56:73:0f:e4:3f:7a:27:f8:d2:
                    65:0d:dd:a2:68:41:69:23:5f:9f:3a:d2:0d:cd:38:
                    a6:ad:10:25:6f:ca:4f:89:68:80:c5:2d:e1:d9:0a:
                    9d:31:25:42:99:eb:a2:90:b8:ee:55:4a:d8:17:a5:
                    24:dd:3a:ea:a9:b5:8c:3b:4e:53:7d:cf:58:ca:a3:
                    cf:9d:e2:2f:d2:e4:b4:a0:a3:33:9f:00:f1:95:af:
                    ed:59:b3:14:61:8a:cf:c0:94:27:74:3b:f7:98:c4:
                    1a:f8:b7:50:18:31:b2:68:44:30:47:e3:99:72:43:
                    c1:b9:a9:e0:38:df:1e:66:43:f5:ac:2b:54:68:32:
                    65:7d:5c:53:55:11:45:fe:2e:77:6a:38:49:67:4d:
                    ca:7a:25:07:51:98:2c:65:96:5b:74:11:37:a1:87:
                    34:ae:b4:cc:6d:33:0e:16:8d:74:57:2b:3d:be:24:
                    c1:ed:41:4a:80:7c:28:cf:19:8a:b1:d4:4a:f8:62:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:ED:FB:FD:45:A1:18:9C:32:87:40:7D:DA:FF:68:0A:DE:2B:11:61
            X509v3 Authority Key Identifier:
                keyid:DB:B8:F6:52:59:90:17:C1:3A:55:76:AE:91:B2:AD:33:8A:9D:F1:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3234203d3e20323638333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:93:e2:45:3c:b8:06:01:0c:74:d4:d4:94:03:b1:63:bf:c0:
         5e:89:64:63:7d:ac:93:39:9e:bd:7b:71:42:03:e8:0e:0b:d3:
         57:29:9a:b2:92:44:d2:8e:9b:bd:74:89:08:69:30:ac:46:1a:
         3c:c0:97:01:55:08:2b:ef:33:85:94:1a:25:09:4d:88:5d:19:
         02:33:e5:28:f8:54:a8:c0:f7:d3:9f:a8:d3:51:37:18:54:2f:
         27:bb:fb:ce:4d:dc:8a:78:9c:e0:8d:06:ed:8b:03:72:c6:96:
         54:53:ce:73:17:b6:2f:af:f6:32:23:04:25:88:89:38:70:cc:
         ff:59:fd:c3:a1:f8:b2:cc:08:b0:84:12:64:3d:09:b5:b4:1c:
         4f:2d:0f:9f:a2:9c:48:f1:e1:b6:52:f3:1b:3f:d9:f2:ff:b4:
         f2:a5:95:c1:41:bb:f3:e0:fd:1e:e3:1a:7c:64:3b:1b:c6:97:
         78:76:f9:3f:fd:bc:33:ba:1a:51:2f:e9:0a:a2:63:75:c6:0d:
         c2:e6:18:90:bd:87:67:cd:0c:1b:79:28:cd:e3:95:23:38:e3:
         8f:10:0c:2f:30:bf:d4:96:e9:f7:38:07:1d:3f:cb:bd:a8:c0:
         b5:57:0c:c6:26:ff:c8:76:af:5e:cd:2e:ef:ad:ba:f3:df:8f:
         b8:b4:6a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:30:07 2025 by rpki-client