This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233352e302f32342d3234203d3e203631363439.roa
File:                     34352e362e3233352e302f32342d3234203d3e203631363439.roa (raw, json)
Hash identifier:          jwGSc2BBzgJLYBoiMJlfOz9y1vhNzebrgHBVE0QkZzk=
Subject key identifier:   4E:98:4C:57:06:BF:D4:25:CD:F5:C8:05:F9:6D:85:2F:2B:27:DC:7F
Certificate issuer:       /CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
Certificate serial:       66EBC0D66E75522BF5BBF86C228C7AE49DE32A63
Authority key identifier: D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233352e302f32342d3234203d3e203631363439.roa
Signing time:             Wed 03 Dec 2025 17:40:31 +0000
ROA not before:           Wed 03 Dec 2025 17:35:31 +0000
ROA not after:            Wed 02 Dec 2026 17:40:31 +0000
asID:                     61649
IP address blocks:        45.6.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl
                          rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:eb:c0:d6:6e:75:52:2b:f5:bb:f8:6c:22:8c:7a:e4:9d:e3:2a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
        Validity
            Not Before: Dec  3 17:35:31 2025 GMT
            Not After : Dec  2 17:40:31 2026 GMT
        Subject: CN=4E984C5706BFD425CDF5C805F96D852F2B27DC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:af:24:37:79:7b:7d:1a:10:4c:73:35:20:
                    ff:46:4b:80:af:6d:d8:25:22:55:6f:09:e5:5d:63:
                    96:e6:65:7c:94:c1:6b:82:db:65:b0:4e:06:da:1e:
                    1c:f0:9e:71:22:fb:e4:79:04:f6:8c:5c:a7:4b:9b:
                    6c:d3:d0:ac:9b:2a:ef:a0:7f:60:6f:79:32:7c:1f:
                    ba:32:8b:63:83:04:77:b1:bf:73:d7:87:71:b6:50:
                    c0:b9:bf:f3:6b:1c:89:94:6a:f1:01:62:a5:e1:25:
                    56:66:4c:91:9d:73:50:6d:54:12:5e:73:7b:b2:fd:
                    d9:82:a1:c8:66:a8:1a:d8:29:26:45:ad:8c:50:18:
                    b8:44:41:7b:63:3e:b7:1f:e9:b7:35:ba:f2:e1:55:
                    4c:08:48:85:cb:5a:00:43:a3:a4:9a:4e:24:f7:f5:
                    86:80:a6:77:93:8b:07:ee:e6:8d:70:6e:eb:50:d1:
                    bd:4d:90:a7:09:02:27:0d:d6:29:2f:4a:8c:31:54:
                    3d:3c:da:14:7a:5f:05:29:8d:8a:41:cd:6a:50:d6:
                    b1:89:b2:5f:85:82:97:ff:03:6b:7e:4b:e7:dc:92:
                    33:ea:66:33:ae:74:fd:73:ef:0c:92:8b:76:c4:2a:
                    ef:05:91:f8:be:64:7f:6c:85:a9:e3:f2:d9:c6:d8:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:98:4C:57:06:BF:D4:25:CD:F5:C8:05:F9:6D:85:2F:2B:27:DC:7F
            X509v3 Authority Key Identifier:
                keyid:D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233352e302f32342d3234203d3e203631363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:85:0b:60:7b:5f:9a:bc:60:68:74:fb:96:a2:d9:76:76:9f:
         00:da:76:f1:cd:50:31:e3:df:24:a6:30:ea:69:09:ad:8f:83:
         06:d2:a5:59:d9:56:df:df:37:0f:e6:9d:d3:f7:fe:90:5a:9d:
         30:38:17:b6:2d:8c:94:04:47:71:36:a9:72:4a:bb:62:84:58:
         ab:e2:cf:81:2d:6f:8d:5f:0e:03:9b:fd:9d:ab:ab:14:ee:de:
         7e:16:a7:60:c8:94:48:3d:17:47:cf:6b:eb:7d:2c:c1:e2:4f:
         db:7c:5e:83:e2:7f:4a:85:ee:f6:71:04:31:71:55:98:4b:25:
         0a:4b:55:d3:0d:31:eb:c4:fc:e0:91:46:c9:77:de:9a:24:9c:
         0d:89:ba:98:40:3d:62:e9:ee:06:dc:2f:33:a3:80:d7:50:49:
         7d:ec:56:87:60:16:7c:d3:48:cd:ad:0a:fc:c3:6a:15:a7:02:
         2d:9c:49:92:fb:bc:86:2e:a2:71:fb:00:4d:6e:d8:26:fa:e9:
         f3:f9:04:20:98:9f:45:6a:b9:1e:01:18:1c:48:e2:46:5d:17:
         75:48:20:f8:6d:6e:1f:f0:e6:b0:bb:4e:56:2b:ad:67:67:10:
         6e:c7:47:15:b3:98:67:ad:5a:9f:66:5d:3f:92:40:e9:ef:f9:
         ba:7c:65:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:33:36 2025 by rpki-client