This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139372e302f32342d3234203d3e20323636353633.roa
File:                     34352e362e3139372e302f32342d3234203d3e20323636353633.roa (raw, json)
Hash identifier:          2Pq5RIKdbRUQShsrU7GSikzCoU8agHmSvBpLFjRmuLA=
Subject key identifier:   8F:77:E1:81:F1:E4:7C:30:17:82:2E:56:85:A9:94:84:6B:91:7F:67
Certificate issuer:       /CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
Certificate serial:       74D77DE1118ABDECE1657412F781316EAE0BED3A
Authority key identifier: 13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139372e302f32342d3234203d3e20323636353633.roa
Signing time:             Sat 29 Nov 2025 18:08:06 +0000
ROA not before:           Sat 29 Nov 2025 18:03:06 +0000
ROA not after:            Sat 28 Nov 2026 18:08:06 +0000
asID:                     266563
IP address blocks:        45.6.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl
                          rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d7:7d:e1:11:8a:bd:ec:e1:65:74:12:f7:81:31:6e:ae:0b:ed:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
        Validity
            Not Before: Nov 29 18:03:06 2025 GMT
            Not After : Nov 28 18:08:06 2026 GMT
        Subject: CN=8F77E181F1E47C3017822E5685A994846B917F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:0a:b0:1b:03:49:5f:06:09:3d:bd:54:bc:
                    b0:31:df:1b:65:1b:c3:d2:9c:81:ce:77:9a:13:24:
                    89:d0:89:7d:3d:97:3a:ce:38:bb:fe:26:60:58:46:
                    8a:92:45:1d:5d:7f:47:01:4a:c2:b5:9e:f4:1e:96:
                    24:80:3c:57:12:a2:54:2e:6f:96:51:66:81:32:bf:
                    21:56:9f:f5:9d:40:02:4b:a1:ad:9e:1c:e3:5f:70:
                    66:93:59:88:2c:07:93:98:d0:42:f3:74:a2:ae:a7:
                    2f:2b:b3:f5:47:31:36:99:66:64:7a:15:29:78:b9:
                    91:e0:ab:c3:91:7a:f8:8a:6d:2d:4e:48:49:dc:d8:
                    f5:cc:e5:cf:cf:16:bf:fd:48:59:f2:ef:c2:d5:67:
                    e0:1f:c2:20:c1:b2:bb:0c:ce:a9:8e:c5:3a:97:da:
                    94:b8:51:59:c8:99:d2:58:30:54:69:2d:b4:17:50:
                    b3:f6:7c:9a:ab:7c:e6:43:1f:b7:61:53:4a:f3:39:
                    c1:31:a4:5c:07:d3:68:eb:fc:2f:ea:77:04:45:02:
                    99:a1:e3:f5:8d:98:bc:67:32:36:4a:36:30:86:e6:
                    84:7b:38:3a:8b:f8:d8:e1:40:c6:21:9b:27:05:7c:
                    80:c7:19:bf:64:a2:46:af:23:46:e6:9b:ca:7e:82:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:77:E1:81:F1:E4:7C:30:17:82:2E:56:85:A9:94:84:6B:91:7F:67
            X509v3 Authority Key Identifier:
                keyid:13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139372e302f32342d3234203d3e20323636353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:8f:20:28:75:55:f0:79:98:51:16:f2:78:af:c1:e6:ea:22:
         19:69:18:b7:e3:6c:15:6e:e3:57:eb:ae:0e:69:d5:09:ca:2e:
         15:b0:67:af:ee:99:d4:46:a8:a8:cc:e6:75:83:f1:ec:f2:20:
         1c:c4:90:c2:13:c5:c1:26:6b:e7:92:90:53:da:e6:17:0c:a5:
         59:1b:cc:7b:d8:b2:74:46:dd:e9:c3:58:14:c6:9c:c1:aa:df:
         34:85:ff:6b:08:51:94:8e:59:bb:24:c7:b0:8b:07:8f:ec:67:
         30:30:e0:77:d5:c5:5f:cb:69:e1:21:cb:61:59:f8:21:ea:68:
         b5:69:da:07:69:f5:95:de:7c:4a:4a:ad:b5:66:c7:7d:fd:36:
         60:ed:74:0b:b4:18:ad:43:4b:39:f1:52:0c:ac:fc:b4:59:00:
         61:84:ae:57:91:42:66:17:27:a8:d2:4c:54:93:bc:02:65:c2:
         cf:b9:b7:95:db:00:56:aa:61:4f:c9:4e:c3:4a:ff:cc:a7:8e:
         62:7c:8b:2b:0a:c3:e0:39:d0:f9:62:c2:96:46:81:a7:9c:e1:
         fe:f6:d9:aa:86:92:9c:40:1c:0f:90:3e:68:33:6e:04:f8:1b:
         24:ab:ef:88:54:6b:18:f3:6d:01:dd:4b:28:24:f6:f7:87:18:
         23:c2:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:58:10 2025 by rpki-client