This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39322e302f32322d3332203d3e20323638313439.roa
File:                     34352e3137302e39322e302f32322d3332203d3e20323638313439.roa (raw, json)
Hash identifier:          ABcV00bsmj4p/EAXwK9p2+WcufB6flOhojnHHzFZ/Ic=
Subject key identifier:   9E:05:5E:49:43:52:EA:5C:9F:C3:43:BF:D4:BE:A0:8D:F7:34:37:84
Certificate issuer:       /CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
Certificate serial:       4ED96AB5FFDB3B9B1449BD2861823E29B233796E
Authority key identifier: 5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39322e302f32322d3332203d3e20323638313439.roa
Signing time:             Sat 08 Nov 2025 19:11:40 +0000
ROA not before:           Sat 08 Nov 2025 19:06:40 +0000
ROA not after:            Sat 07 Nov 2026 19:11:40 +0000
asID:                     268149
IP address blocks:        45.170.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d9:6a:b5:ff:db:3b:9b:14:49:bd:28:61:82:3e:29:b2:33:79:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
        Validity
            Not Before: Nov  8 19:06:40 2025 GMT
            Not After : Nov  7 19:11:40 2026 GMT
        Subject: CN=9E055E494352EA5C9FC343BFD4BEA08DF7343784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:de:d3:59:6f:8b:a7:37:a5:5a:f2:8b:2c:
                    d9:87:7d:2d:89:4b:47:05:f2:32:27:19:62:ca:6b:
                    06:6b:61:c3:6d:56:bd:af:fb:80:6f:ab:94:bc:63:
                    e5:90:11:6b:23:51:f6:9d:a0:00:30:ac:ba:03:8f:
                    df:bb:87:f1:19:2c:bc:c5:77:ff:ac:a1:c1:13:03:
                    cd:d0:c5:56:d7:a4:6f:34:c6:ec:e9:ab:22:64:27:
                    05:12:13:04:2e:73:46:5d:43:98:c8:fb:cd:1a:7e:
                    37:4e:96:8d:3d:eb:09:da:99:33:d8:55:5b:c6:2e:
                    db:63:64:3e:3d:ec:41:56:4e:63:ba:a1:db:9c:a3:
                    7c:bf:d0:eb:7a:28:b5:3a:3b:bc:99:08:0a:e2:06:
                    c1:fc:90:09:f9:68:5f:f9:61:c6:d7:14:8e:00:e4:
                    7f:ba:ad:95:2f:ce:69:ff:a4:e1:5c:ab:8d:08:c8:
                    2f:49:78:a0:fa:35:48:ce:54:67:ab:14:ca:a3:86:
                    19:e2:fb:4b:b8:17:5b:4a:e6:d8:e0:db:5f:91:be:
                    b7:61:aa:76:9a:ce:1c:46:35:58:05:6b:08:f6:54:
                    05:3b:f2:e2:af:2f:ef:6e:f9:d7:7b:f2:0d:1d:29:
                    a0:c8:6d:05:bc:0d:4f:90:a8:76:d5:08:9e:de:d5:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:5E:49:43:52:EA:5C:9F:C3:43:BF:D4:BE:A0:8D:F7:34:37:84
            X509v3 Authority Key Identifier:
                keyid:5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39322e302f32322d3332203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:68:6b:a8:d0:5d:f8:66:df:b6:15:f1:62:92:be:46:65:60:
         05:e9:d7:42:19:8e:87:33:85:82:ad:3a:61:df:7e:d1:40:53:
         0c:fc:3e:e6:71:1d:7c:cc:4e:f1:67:a3:64:55:fb:71:47:79:
         2c:19:63:a5:4f:cf:70:8d:31:35:69:ea:f7:ff:24:10:d8:e8:
         0f:b6:7c:05:7f:29:83:40:f3:90:74:4d:e0:1a:71:47:29:86:
         31:ec:a6:1c:cd:5b:58:db:b9:2d:b6:25:b9:a2:e3:df:cd:38:
         7c:b8:8a:0d:4c:05:bd:94:60:52:2b:6b:e7:61:ce:ec:63:4f:
         2f:a1:97:b3:e7:f3:f7:c0:0c:cb:70:fb:c6:55:c8:e2:f1:95:
         c5:26:6c:1e:7d:2f:65:48:bc:83:09:e6:8b:05:17:f1:07:c0:
         b3:f0:fa:ec:68:d2:c0:8c:28:a4:1d:a8:cd:6d:e7:dc:bb:20:
         68:55:49:b9:a9:4c:ed:ba:d7:a0:21:70:59:fb:5a:75:e0:67:
         ff:bb:62:a1:1e:9e:e6:bc:32:95:04:ce:ef:78:2c:52:26:8f:
         31:59:bf:fe:37:18:d3:36:ba:d7:2c:43:8c:8c:18:e3:2c:e1:
         58:7e:07:37:43:69:da:ed:84:03:66:c8:11:95:3b:6d:80:84:
         e0:9e:71:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:54 2025 by rpki-client