This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139392e302f32342d3234203d3e20323636353633.roa
File:                     34352e362e3139392e302f32342d3234203d3e20323636353633.roa (raw, json)
Hash identifier:          XLRxV1b5hSKYc+hsM86C0staQxyB1CmTZS7sbhV+XIk=
Subject key identifier:   41:CA:F5:3E:32:2B:52:D5:05:94:0C:AC:34:8D:ED:CB:1B:15:09:8D
Certificate issuer:       /CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
Certificate serial:       187B8D72BFE0E6BC7C3AEB406C67B32150E019E0
Authority key identifier: 13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139392e302f32342d3234203d3e20323636353633.roa
Signing time:             Sat 29 Nov 2025 18:08:12 +0000
ROA not before:           Sat 29 Nov 2025 18:03:12 +0000
ROA not after:            Sat 28 Nov 2026 18:08:12 +0000
asID:                     266563
IP address blocks:        45.6.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl
                          rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7b:8d:72:bf:e0:e6:bc:7c:3a:eb:40:6c:67:b3:21:50:e0:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
        Validity
            Not Before: Nov 29 18:03:12 2025 GMT
            Not After : Nov 28 18:08:12 2026 GMT
        Subject: CN=41CAF53E322B52D505940CAC348DEDCB1B15098D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a6:f5:0e:df:71:ea:de:5d:c4:92:46:e6:b1:
                    e9:2e:34:ff:64:b9:f4:85:9e:64:f7:07:26:c3:ca:
                    99:3c:9f:07:3e:3e:2c:94:16:5a:5d:3c:2f:dc:04:
                    f7:1e:25:55:d1:42:45:62:72:45:3f:fc:8e:4c:67:
                    e1:5c:ee:24:b3:1a:58:b2:05:2a:bd:37:00:1e:25:
                    1a:ee:d6:c4:a7:9d:95:e8:35:f4:d1:64:68:ce:c4:
                    f0:f4:ba:d3:f6:eb:4c:5d:ef:55:9f:e8:23:7e:e1:
                    ab:7b:91:c4:13:37:b3:bd:1e:1c:93:a9:d2:52:c6:
                    29:3c:b9:44:59:ee:64:53:2f:0a:65:38:57:c3:81:
                    d9:48:d8:59:df:2f:e0:4b:52:11:69:66:32:5a:b0:
                    5b:fd:79:0e:b8:86:b9:2c:40:4f:d2:4b:16:05:ce:
                    ef:e7:41:12:26:43:88:08:1b:7a:a3:54:91:19:c2:
                    ed:d8:d0:b3:4a:8d:a1:6c:93:cb:45:1a:67:17:5b:
                    13:c1:73:c3:0a:e6:6d:b4:ec:93:81:3f:e6:03:59:
                    3b:10:1c:f2:ff:4a:6d:52:c3:a3:42:aa:d9:fb:8d:
                    6a:55:7f:fa:13:ff:3c:59:12:be:98:84:67:6d:1b:
                    c6:b7:54:cc:50:41:d6:ea:13:6e:ee:1b:bd:7f:17:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CA:F5:3E:32:2B:52:D5:05:94:0C:AC:34:8D:ED:CB:1B:15:09:8D
            X509v3 Authority Key Identifier:
                keyid:13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139392e302f32342d3234203d3e20323636353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:cb:af:27:47:45:19:8c:25:41:90:f7:9d:f1:4a:1f:60:91:
         f9:79:67:8b:3e:d9:28:53:55:dc:5d:ed:23:27:a3:9f:41:cc:
         0a:3f:b2:82:ae:22:64:78:2e:41:2d:d5:11:ef:a0:61:19:1b:
         17:29:70:ea:ab:c3:a7:ea:bf:c0:64:0c:a1:5e:07:9f:9d:f1:
         02:da:0a:59:fc:d3:b3:b6:6b:94:a8:18:3a:de:b6:92:f7:ad:
         0a:ea:95:65:60:67:4c:31:09:e0:4e:af:33:d6:d9:e8:53:d9:
         cc:7c:21:78:9d:c6:17:60:24:81:fa:cf:d8:4f:6b:86:6c:c8:
         2f:b1:ac:c1:df:76:f1:ca:14:00:fb:1c:0f:8a:26:cb:9f:94:
         01:14:be:96:29:dc:03:b6:3b:5d:6b:7b:07:53:b9:43:67:b4:
         9f:53:1b:96:a3:7a:19:a7:dd:77:4b:80:8b:66:e3:97:ec:b8:
         0d:24:0f:2d:70:da:66:a9:b4:11:a2:87:ad:fe:73:b9:3f:07:
         9d:86:c0:d9:a8:a1:51:73:1a:0b:91:be:7d:4c:18:4e:5c:a7:
         39:58:5d:25:fa:41:90:92:ec:c2:d4:b7:47:4d:65:26:4a:f6:
         71:97:2b:02:b7:e8:88:a6:7d:f7:4a:f5:ce:9c:67:e7:27:e9:
         dd:ef:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:58:04 2025 by rpki-client