This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/34352e3233342e36332e302f32342d3332203d3e20323632353339.roa
File:                     34352e3233342e36332e302f32342d3332203d3e20323632353339.roa (raw, json)
Hash identifier:          M9xtXvyv5cCZcZz/aQREFzRuqlcZskoBPsxrEJwyfP0=
Subject key identifier:   CC:42:8C:A1:41:30:7B:6E:47:32:B3:FF:A9:13:FC:8F:EA:80:F0:46
Certificate issuer:       /CN=5BBAA26A1B1C199630D76AA2B81403371285F562
Certificate serial:       3488DABFF4CC760A1AFF5490415DF2B854D844B8
Authority key identifier: 5B:BA:A2:6A:1B:1C:19:96:30:D7:6A:A2:B8:14:03:37:12:85:F5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/34352e3233342e36332e302f32342d3332203d3e20323632353339.roa
Signing time:             Wed 21 Jan 2026 10:31:20 +0000
ROA not before:           Wed 21 Jan 2026 10:26:20 +0000
ROA not after:            Wed 20 Jan 2027 10:31:20 +0000
asID:                     262539
IP address blocks:        45.234.63.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.crl
                          rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:88:da:bf:f4:cc:76:0a:1a:ff:54:90:41:5d:f2:b8:54:d8:44:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BBAA26A1B1C199630D76AA2B81403371285F562
        Validity
            Not Before: Jan 21 10:26:20 2026 GMT
            Not After : Jan 20 10:31:20 2027 GMT
        Subject: CN=CC428CA141307B6E4732B3FFA913FC8FEA80F046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:35:10:fc:1d:89:92:b5:e3:93:3b:f1:5a:
                    e0:32:36:35:76:d1:de:df:2a:33:2f:65:04:f2:f8:
                    c2:90:b8:fe:fa:c5:94:f9:dd:35:c1:bc:ab:26:e6:
                    b0:0a:b5:34:29:30:51:39:ac:30:ec:fc:04:0e:c4:
                    7a:ff:c8:44:af:f9:06:8f:18:56:47:2f:3b:25:b0:
                    97:db:e2:b3:dc:d5:c2:af:11:3a:f8:a4:6e:26:d9:
                    51:46:00:26:1d:e6:93:91:f7:3f:92:40:35:e9:9e:
                    73:ed:75:89:43:39:54:8c:65:1d:59:de:04:c3:f4:
                    9d:e0:71:ab:4f:03:fd:a3:a2:a1:15:b7:b5:51:7a:
                    68:09:9a:2a:6d:b3:18:f3:2a:59:a2:ba:84:29:23:
                    51:2e:28:85:eb:1c:58:18:09:7b:db:da:a8:18:9a:
                    a6:47:fd:a8:a1:f2:1c:d3:ed:80:bc:3c:de:71:82:
                    9f:48:93:70:7d:5e:ef:25:de:9b:cc:5d:63:90:55:
                    83:63:ba:1d:00:45:98:10:cd:00:fa:19:14:aa:16:
                    94:94:01:17:cd:e4:53:73:3c:7e:0b:ce:38:aa:ff:
                    87:fc:c1:62:8d:81:fc:95:2f:38:4a:d4:fc:c1:46:
                    b5:85:b8:d0:46:47:f1:a3:84:87:3b:95:70:64:79:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:42:8C:A1:41:30:7B:6E:47:32:B3:FF:A9:13:FC:8F:EA:80:F0:46
            X509v3 Authority Key Identifier:
                keyid:5B:BA:A2:6A:1B:1C:19:96:30:D7:6A:A2:B8:14:03:37:12:85:F5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/34352e3233342e36332e302f32342d3332203d3e20323632353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:2c:0a:6d:51:af:aa:7f:79:fb:2d:6a:8c:7f:4d:5c:25:b2:
         b7:9c:04:14:eb:6d:ea:88:2c:0b:25:82:e0:1d:7d:06:d7:72:
         73:4b:ed:5c:c6:17:24:fa:df:2b:9c:d1:28:b8:3a:ee:f2:1f:
         69:90:2e:32:a9:8a:cc:93:da:cc:96:66:8a:dc:44:15:0e:0b:
         bc:a1:f4:49:f0:f9:e0:47:77:a5:91:f8:06:c8:b8:ef:52:2d:
         34:17:8c:8d:1b:5b:4a:6d:ca:96:b3:a2:df:7f:1f:27:e6:9b:
         d2:86:81:e0:de:cc:ea:0d:20:6a:7e:f5:75:c7:d4:d0:18:a6:
         94:e1:68:db:0c:02:7b:f1:a7:e5:ea:71:9e:55:76:3b:36:1b:
         5e:60:5d:3d:94:b8:8a:68:94:5d:96:9e:5a:61:4e:e7:f8:c1:
         26:b5:63:e2:97:42:fc:c8:0c:6f:fa:b3:42:95:cc:2c:f9:7a:
         a7:d5:b3:79:5d:47:48:b8:d2:0b:2d:ae:16:f0:c2:ca:0f:94:
         25:11:56:a7:f5:c7:4b:52:e6:72:d0:46:2f:b4:63:0e:44:98:
         4a:30:d2:e2:77:6a:e7:87:bb:cd:9b:1a:84:34:84:30:c2:85:
         8d:34:4c:21:c2:e4:0a:0f:d1:d2:79:82:b9:4e:65:e6:d1:73:
         e2:2c:43:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:41:04 2026 by rpki-client