This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233322e302f32332d3233203d3e203631363439.roa
File:                     34352e362e3233322e302f32332d3233203d3e203631363439.roa (raw, json)
Hash identifier:          blxUfxAS794ma9E4SFusyAtyydq0owJzyjuWhGtmATw=
Subject key identifier:   F1:52:CA:23:D8:4F:0E:00:E2:0F:E5:53:31:3C:24:74:C6:BE:05:13
Certificate issuer:       /CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
Certificate serial:       1F01880895752D7D5F14AD560D393BE0A0481D0A
Authority key identifier: D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233322e302f32332d3233203d3e203631363439.roa
Signing time:             Wed 31 Dec 2025 04:04:51 +0000
ROA not before:           Wed 31 Dec 2025 03:59:51 +0000
ROA not after:            Wed 30 Dec 2026 04:04:51 +0000
asID:                     61649
IP address blocks:        45.6.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl
                          rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 05:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:01:88:08:95:75:2d:7d:5f:14:ad:56:0d:39:3b:e0:a0:48:1d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
        Validity
            Not Before: Dec 31 03:59:51 2025 GMT
            Not After : Dec 30 04:04:51 2026 GMT
        Subject: CN=F152CA23D84F0E00E20FE553313C2474C6BE0513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:52:5e:90:ed:4a:40:55:9e:15:d5:03:b0:
                    e2:d9:1b:0d:6a:d7:7f:7c:86:25:c5:57:22:f8:fe:
                    f0:e5:04:24:69:13:21:eb:22:73:29:35:e5:a9:c9:
                    f3:8d:7d:28:d4:2a:cd:43:04:e8:fd:f0:3a:0d:7a:
                    5c:9c:a9:7f:8a:2d:d4:f6:2a:8e:e4:82:21:66:24:
                    2d:d9:87:0a:7b:dd:21:3c:a3:3c:92:30:2e:07:93:
                    63:2f:5f:95:3c:bd:1c:e8:48:a8:27:de:71:bf:1b:
                    f9:d9:4d:35:b0:1d:f7:e6:a9:23:59:08:16:33:dc:
                    f0:4f:30:51:13:ee:4d:b1:a6:2c:02:db:cf:96:ab:
                    a3:25:2f:fb:43:e5:6b:79:37:d8:06:34:2b:fb:68:
                    29:14:22:37:f3:95:9d:ce:94:d7:f5:df:71:b2:15:
                    fd:82:d0:0a:c0:1b:0b:c7:a7:cc:a0:5c:52:19:a9:
                    c1:0c:70:4d:90:b5:aa:14:ae:95:2a:4c:12:a7:b4:
                    35:58:83:c6:49:62:3c:7a:cd:1a:53:7b:1b:a0:0c:
                    f0:e1:c0:0a:88:cb:f4:0c:3f:4d:e1:3c:ae:4c:2a:
                    e4:6c:11:5c:69:40:d9:05:a8:1b:5a:83:e1:0c:b9:
                    39:65:5d:27:3b:08:8c:82:9d:76:c5:6f:ce:1a:1f:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:52:CA:23:D8:4F:0E:00:E2:0F:E5:53:31:3C:24:74:C6:BE:05:13
            X509v3 Authority Key Identifier:
                keyid:D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233322e302f32332d3233203d3e203631363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:18:09:49:87:e4:b9:47:f9:ea:70:23:83:da:4e:1c:6f:
         39:f1:61:98:e6:6b:31:fd:8b:1a:c7:34:40:47:3f:d1:54:cd:
         f2:26:5b:5e:2a:1f:ac:8a:4f:86:a6:52:07:c6:23:f9:18:2b:
         08:e5:dd:55:e4:0b:16:fc:ce:63:0a:32:c2:97:a5:26:56:ae:
         ac:03:e3:dd:df:2d:a9:c0:3b:a9:c2:65:a8:50:9b:d4:93:05:
         a6:a0:35:71:cd:02:6d:b7:a5:35:47:8d:42:0f:46:18:03:23:
         88:99:9d:11:b6:de:91:58:60:6e:73:31:f0:c1:54:bd:d5:d3:
         1c:63:5f:76:93:bb:38:ae:45:0b:41:dd:bc:6c:14:bc:74:53:
         2d:98:16:9e:f6:8f:3a:37:ce:5d:0c:37:88:5a:bc:17:ba:6f:
         7f:97:d6:c8:d9:62:04:12:c0:7b:bc:32:5a:e5:3b:65:58:b7:
         cb:e8:cd:62:09:c2:be:af:be:9f:a4:35:36:58:18:20:ac:3a:
         aa:d0:e4:fa:bb:9a:e4:87:ac:51:95:00:5a:e3:e3:dd:c1:83:
         0f:52:f8:27:aa:be:d4:91:36:ec:ad:0b:29:8c:72:ad:10:24:
         2f:63:18:47:2a:83:4f:52:b2:80:de:0a:e2:d0:cb:68:64:96:
         25:b3:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:07:56 2026 by rpki-client