This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139382e302f32342d3234203d3e20323636353633.roa
File:                     34352e362e3139382e302f32342d3234203d3e20323636353633.roa (raw, json)
Hash identifier:          s0XvGz6QeWFrpQ1Z/0fw5KNpi1xfUqTzsaVPgHB+Sjs=
Subject key identifier:   3D:EE:65:63:F3:30:58:F7:33:77:95:86:0D:A2:CC:6F:6B:93:9C:FE
Certificate issuer:       /CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
Certificate serial:       294927ECD5C16B60541DE7F00CFDC171E3F12541
Authority key identifier: 13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139382e302f32342d3234203d3e20323636353633.roa
Signing time:             Sat 29 Nov 2025 18:08:09 +0000
ROA not before:           Sat 29 Nov 2025 18:03:09 +0000
ROA not after:            Sat 28 Nov 2026 18:08:09 +0000
asID:                     266563
IP address blocks:        45.6.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl
                          rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:49:27:ec:d5:c1:6b:60:54:1d:e7:f0:0c:fd:c1:71:e3:f1:25:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
        Validity
            Not Before: Nov 29 18:03:09 2025 GMT
            Not After : Nov 28 18:08:09 2026 GMT
        Subject: CN=3DEE6563F33058F7337795860DA2CC6F6B939CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1f:49:a5:d5:ee:7f:26:6e:6a:13:ce:23:37:
                    3a:01:2d:e2:23:42:01:78:73:84:6b:c0:a2:b6:3c:
                    06:68:69:27:ad:1a:ec:3c:f2:6e:a8:02:6d:be:f6:
                    df:00:79:c9:70:96:6b:d3:e1:91:e0:40:53:70:0d:
                    29:4b:56:17:cb:37:b8:e4:ce:36:a4:01:0e:9a:e6:
                    c7:80:1b:05:d6:d3:e0:79:8e:7b:1d:10:25:12:e6:
                    c6:b1:18:b3:7a:26:ae:3e:b0:63:e3:8b:f0:c9:2b:
                    1b:67:df:8d:20:3f:04:fb:db:5f:0a:21:72:77:e8:
                    84:14:80:97:a3:54:90:8e:10:82:f8:05:dd:22:5d:
                    7a:dc:e6:e7:41:07:24:dc:0b:4a:f5:45:5b:2b:cd:
                    d3:f2:28:fa:8f:43:70:22:61:0d:93:82:f1:81:9a:
                    1a:ea:2e:dc:16:06:92:e9:f9:9b:cb:8a:15:e2:4f:
                    ea:16:a9:08:b9:04:bc:d2:76:56:f1:f2:1d:9c:e7:
                    2a:08:af:46:85:68:5d:42:8e:1f:7d:23:ca:25:87:
                    81:ad:df:4c:5e:b9:c8:6b:76:f3:83:d7:7f:17:86:
                    2a:b5:8d:20:9b:29:43:5a:a2:3b:f9:92:a8:9d:11:
                    c9:85:ce:92:32:04:24:f9:03:79:e3:7e:1f:b0:9f:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EE:65:63:F3:30:58:F7:33:77:95:86:0D:A2:CC:6F:6B:93:9C:FE
            X509v3 Authority Key Identifier:
                keyid:13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139382e302f32342d3234203d3e20323636353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:52:59:4b:fb:03:94:30:15:86:56:31:ac:2d:55:eb:fe:
         f4:df:fd:1c:92:c9:1f:1c:5a:37:55:ad:3d:e5:ee:48:4a:d0:
         d2:dd:0d:96:90:71:28:ce:bb:4f:5a:e2:7d:91:a5:fe:1d:2b:
         a5:f3:a9:40:fc:b4:7c:e0:94:94:d5:8b:4b:50:e4:d1:c2:a8:
         35:64:54:39:b5:07:6f:ba:5f:8e:47:70:3b:35:14:2d:93:d8:
         38:d1:e4:c5:fc:8a:85:c4:9e:a3:90:54:1b:bc:70:24:17:90:
         f7:53:8b:5f:6a:6b:b9:86:e1:a2:cd:68:86:49:93:ca:22:f6:
         6c:93:5f:b6:1e:76:71:ca:3e:06:b2:3c:82:cb:f5:0c:e8:2a:
         3a:c3:34:9e:21:73:0f:16:c2:31:bb:c5:c0:b6:35:87:d5:83:
         7e:30:5a:91:f3:27:f4:73:c8:e7:93:d0:fc:0b:1a:ac:67:99:
         d0:a6:7f:3c:29:47:90:66:dd:18:88:cf:7a:1c:ad:7c:e4:f9:
         b0:94:15:68:3d:fa:ca:f6:24:bf:a1:5e:00:2f:b0:43:25:ee:
         ae:f8:ad:5d:c7:9c:2a:92:85:b5:c3:25:10:98:fb:74:cd:d4:
         0f:f6:4f:88:ca:1f:a9:47:8e:84:ee:9f:4c:a5:6f:93:62:03:
         3b:8f:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:58:03 2025 by rpki-client