This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233342e302f32332d3233203d3e203631363439.roa
File:                     34352e362e3233342e302f32332d3233203d3e203631363439.roa (raw, json)
Hash identifier:          nQxTyKaM4deM76RaYaSkDbW9AZyJbuKAP7S/ayAPBzs=
Subject key identifier:   71:45:BD:EB:6C:5B:EB:27:88:69:D7:D9:5B:B7:FF:0B:48:63:E6:C0
Certificate issuer:       /CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
Certificate serial:       212C73F33A0AC25B02B60F1E18F7798F1FBB621E
Authority key identifier: D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233342e302f32332d3233203d3e203631363439.roa
Signing time:             Wed 31 Dec 2025 04:04:57 +0000
ROA not before:           Wed 31 Dec 2025 03:59:57 +0000
ROA not after:            Wed 30 Dec 2026 04:04:57 +0000
asID:                     61649
IP address blocks:        45.6.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl
                          rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 05:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2c:73:f3:3a:0a:c2:5b:02:b6:0f:1e:18:f7:79:8f:1f:bb:62:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
        Validity
            Not Before: Dec 31 03:59:57 2025 GMT
            Not After : Dec 30 04:04:57 2026 GMT
        Subject: CN=7145BDEB6C5BEB278869D7D95BB7FF0B4863E6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:cc:8d:86:5c:c3:14:d2:b4:44:50:c5:53:
                    1f:5f:96:4c:2d:0e:3a:89:79:76:6b:d7:91:77:d6:
                    f7:eb:37:46:2b:9d:ff:d5:b5:a4:75:0b:10:38:07:
                    1f:c0:fc:f2:f4:02:0c:a3:2a:a8:46:0a:f9:cc:29:
                    14:65:d1:b9:76:97:92:79:91:18:9c:7e:27:b5:6f:
                    32:6e:d1:dc:5e:f3:d5:99:f4:37:40:67:b4:5f:a9:
                    96:00:37:a8:73:aa:22:ab:b6:b3:eb:fb:56:80:5d:
                    a9:11:16:27:e3:fc:a7:fb:b7:bf:fa:f3:0b:83:fb:
                    5c:d8:58:02:c1:2f:9f:91:99:ba:e1:f6:7d:2f:5f:
                    e8:a8:a2:94:e8:82:5b:9d:b1:01:99:bd:8d:a0:1f:
                    14:3a:55:37:2a:be:c5:06:50:c7:75:b8:e8:b3:87:
                    fb:85:cb:4b:c6:91:c5:10:6d:db:e1:d7:a7:d1:46:
                    ae:8e:dc:59:6d:0c:71:2f:a9:58:1e:23:de:c8:5b:
                    85:0e:10:ab:e5:17:98:95:64:c1:14:a0:83:51:e7:
                    97:f0:e0:80:19:26:64:bd:bb:dd:cf:99:39:6c:4b:
                    e2:36:f1:9f:4a:63:b7:c2:c6:5a:42:ff:62:90:18:
                    4d:64:b4:9f:37:00:26:3b:a5:81:bb:77:df:18:11:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:45:BD:EB:6C:5B:EB:27:88:69:D7:D9:5B:B7:FF:0B:48:63:E6:C0
            X509v3 Authority Key Identifier:
                keyid:D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233342e302f32332d3233203d3e203631363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:64:00:62:76:c5:b3:9d:cd:1a:5b:8f:8c:fc:ff:ea:1f:
         db:ac:fe:a3:f3:02:b4:7e:c8:fe:9e:86:73:49:f5:34:03:6a:
         38:b0:f8:e8:48:42:17:ad:62:62:a0:f4:20:48:3f:59:71:7e:
         74:70:a9:24:4c:71:58:f6:85:c8:3d:2e:e9:cd:50:58:7b:b2:
         08:6f:92:06:98:ad:75:1c:5e:c2:3a:01:a2:a6:2b:85:d1:75:
         b5:3e:f6:ca:c0:00:83:f3:fe:70:fd:94:56:35:87:23:07:45:
         55:f0:62:cc:f1:fc:3f:8d:8f:96:b9:e2:5a:8c:d1:7f:07:d5:
         d8:19:cd:3f:c8:8c:00:6c:c8:56:a2:cb:e2:6d:59:8d:4e:9c:
         f0:2d:1e:5d:a6:ac:90:34:0a:12:2c:5e:07:d3:4d:48:02:a6:
         29:8c:b2:66:17:27:c2:3d:d6:93:5d:cf:be:91:87:3a:5c:0f:
         30:4c:b2:87:a6:6e:85:ea:8c:7d:4d:98:22:3a:dc:70:cb:84:
         9c:e6:cd:40:d2:66:b2:35:f6:4f:ec:2f:d9:94:eb:5a:ad:c8:
         9a:d2:49:81:91:98:69:b3:46:a1:7c:f5:2a:bf:db:01:8b:f9:
         41:3f:97:71:4a:86:85:c2:df:cc:c8:63:4e:7f:c6:bb:07:7d:
         3d:3e:0c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:07:58 2026 by rpki-client