This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32362e302f32342d3234203d3e20323637303936.roa
File:                     34352e3232392e32362e302f32342d3234203d3e20323637303936.roa (raw, json)
Hash identifier:          HW0erR5B25Imsb6BJ710BE3rE5INQBUjeGFvq2XlZuA=
Subject key identifier:   D4:A2:D2:50:4A:AC:7B:27:24:C4:83:75:1B:E6:39:B8:0F:FD:B5:2C
Certificate issuer:       /CN=5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4
Certificate serial:       241420E187E82B282834C94996CDB19C537D7CC1
Authority key identifier: 5D:54:21:7B:57:CD:08:CD:AF:F2:8E:26:85:5F:9E:D5:7C:4E:C9:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32362e302f32342d3234203d3e20323637303936.roa
Signing time:             Thu 18 Dec 2025 12:39:20 +0000
ROA not before:           Thu 18 Dec 2025 12:34:20 +0000
ROA not after:            Thu 17 Dec 2026 12:39:20 +0000
asID:                     267096
IP address blocks:        45.229.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4.crl
                          rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 10:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:14:20:e1:87:e8:2b:28:28:34:c9:49:96:cd:b1:9c:53:7d:7c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4
        Validity
            Not Before: Dec 18 12:34:20 2025 GMT
            Not After : Dec 17 12:39:20 2026 GMT
        Subject: CN=D4A2D2504AAC7B2724C483751BE639B80FFDB52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:17:01:1e:9f:17:ad:86:af:2e:2f:e1:df:2e:
                    73:72:19:db:81:9f:ad:2a:fe:f7:96:e0:67:49:aa:
                    d4:f1:72:1e:55:7e:e0:e8:47:1b:54:fe:25:f4:00:
                    59:07:3d:d1:0e:a8:21:2b:75:14:0d:07:b9:fd:b5:
                    6e:c2:de:b7:9b:a7:57:36:97:cc:4b:b8:bf:89:8f:
                    11:8e:14:d9:fb:f8:6c:64:3c:27:0a:91:d1:98:4a:
                    b8:ca:bd:fb:bb:c0:ed:fd:a5:e2:9d:6d:9a:1c:e8:
                    9a:8b:3a:83:5e:b9:26:b3:e6:35:f8:89:2b:bb:9f:
                    eb:e1:33:03:67:2f:3f:44:b0:23:f7:fb:3b:0f:4f:
                    86:ba:13:44:a9:85:53:2a:5e:93:57:bc:7d:6a:7f:
                    84:25:c2:4b:58:23:ba:a9:25:e3:99:2e:0e:10:b9:
                    11:8c:9e:79:97:ca:53:48:2f:6f:0e:4b:38:7b:31:
                    ab:bf:ba:7f:f0:d2:87:a7:43:52:9b:2a:52:ca:b2:
                    17:51:46:92:30:95:3c:39:48:eb:7b:45:46:41:c7:
                    eb:61:f7:3d:5a:ec:d7:30:1e:c5:38:7b:be:75:a8:
                    78:11:30:09:b3:b4:6e:03:27:24:51:8a:c0:d8:f4:
                    dd:a9:38:48:7b:53:24:aa:c6:0b:1a:39:41:e2:63:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A2:D2:50:4A:AC:7B:27:24:C4:83:75:1B:E6:39:B8:0F:FD:B5:2C
            X509v3 Authority Key Identifier:
                keyid:5D:54:21:7B:57:CD:08:CD:AF:F2:8E:26:85:5F:9E:D5:7C:4E:C9:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32362e302f32342d3234203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:6e:fc:3a:60:13:2d:3d:e0:67:e3:a8:78:da:18:f3:16:83:
         cc:41:1b:8c:bf:e1:44:17:8d:f3:be:0e:d8:6b:3e:ed:67:23:
         0f:5c:3b:7c:aa:e8:55:26:20:f3:8f:80:76:f5:0f:57:dd:d2:
         05:7b:3f:53:b6:f3:3f:c4:90:92:51:7f:86:73:28:a8:60:c1:
         3a:94:db:bd:e8:d4:63:53:d9:df:a3:b0:0f:0b:ba:c7:7e:ab:
         0a:ed:d5:ad:2d:bd:d2:80:91:ae:90:46:d2:03:be:9c:b1:bf:
         37:11:2a:51:18:cb:82:f6:3d:d2:06:2e:f1:e8:a1:02:2f:eb:
         26:10:e0:15:7b:e6:2d:fd:de:ae:6e:ff:0b:bf:a2:df:09:b3:
         08:d4:d5:90:30:27:08:37:cb:c6:0e:c4:71:5d:a5:12:65:46:
         9b:8a:2d:6d:91:ac:93:ae:34:38:82:1c:a7:3b:ad:70:cb:f4:
         41:cf:ca:56:9c:65:bf:91:5d:b2:19:06:a7:1d:f6:6c:a3:20:
         ba:4b:25:b7:72:65:f0:f3:58:bb:85:97:34:22:43:1a:d5:db:
         0b:cd:a7:2a:06:26:58:43:d8:92:ef:2f:15:aa:09:62:39:d8:
         03:25:ea:41:95:c3:a8:8c:81:f2:2c:5c:bb:0a:81:0d:da:a8:
         58:c6:3b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:05:34 2025 by rpki-client