This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/34352e3233312e3138382e302f32322d3234203d3e20323637323331.roa
File:                     34352e3233312e3138382e302f32322d3234203d3e20323637323331.roa (raw, json)
Hash identifier:          Equo2viqkO8hEhLnQ62NPwdbk8Jxt7V38bcwq/MhRbE=
Subject key identifier:   50:ED:82:50:0D:5D:E3:A7:10:E6:4A:FE:9D:4C:DD:C6:6F:47:C7:ED
Certificate issuer:       /CN=E246B17C2B9BE5A0051959FCF6752346B46E0EAA
Certificate serial:       136EB2F987F9BA697AF131FA99CF5DA0D7D95CBA
Authority key identifier: E2:46:B1:7C:2B:9B:E5:A0:05:19:59:FC:F6:75:23:46:B4:6E:0E:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/34352e3233312e3138382e302f32322d3234203d3e20323637323331.roa
Signing time:             Wed 19 Nov 2025 14:00:32 +0000
ROA not before:           Wed 19 Nov 2025 13:55:32 +0000
ROA not after:            Wed 18 Nov 2026 14:00:32 +0000
asID:                     267231
IP address blocks:        45.231.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.crl
                          rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 08:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6e:b2:f9:87:f9:ba:69:7a:f1:31:fa:99:cf:5d:a0:d7:d9:5c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E246B17C2B9BE5A0051959FCF6752346B46E0EAA
        Validity
            Not Before: Nov 19 13:55:32 2025 GMT
            Not After : Nov 18 14:00:32 2026 GMT
        Subject: CN=50ED82500D5DE3A710E64AFE9D4CDDC66F47C7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d7:56:bc:17:7c:7b:a7:fd:50:ab:f3:5e:99:
                    78:ca:55:c8:ff:2f:3d:9b:ab:fc:5e:df:95:5e:ef:
                    bf:1f:b1:38:cb:4e:ce:61:65:b8:bf:c2:6b:d7:e2:
                    de:ee:10:e8:d9:8d:f8:3c:bd:3a:81:3e:bd:47:41:
                    72:94:c8:0e:13:e5:2e:00:54:e0:d5:63:18:e1:49:
                    f0:a0:3b:aa:2c:03:5e:cc:c3:ec:35:28:31:cc:a1:
                    85:cb:2c:70:e3:4c:dc:0a:09:0e:69:07:e9:6e:80:
                    eb:67:33:9a:8e:20:3a:4e:53:45:3e:1d:2f:b6:8c:
                    71:58:2c:4f:ab:b7:af:a1:8c:7d:19:82:88:5b:86:
                    21:2f:8f:d5:95:5e:05:bb:0a:64:e1:e4:4c:39:a5:
                    17:e1:bd:28:06:2b:03:6b:2f:5c:0a:03:f9:58:f4:
                    87:eb:da:1b:c0:71:ac:eb:ba:4f:27:e0:64:84:51:
                    ac:e8:63:cf:7f:d1:a0:66:c2:80:33:a2:c3:df:e6:
                    e2:04:63:8a:ee:be:82:e3:20:47:cb:55:aa:55:96:
                    3b:0c:04:65:da:6b:1b:c8:62:4b:1e:da:4d:08:5a:
                    02:52:de:6a:6f:3d:8e:eb:8e:26:a1:88:8c:e1:1b:
                    20:36:cb:a6:ef:37:31:3b:1b:e4:83:6f:b3:5f:bc:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:ED:82:50:0D:5D:E3:A7:10:E6:4A:FE:9D:4C:DD:C6:6F:47:C7:ED
            X509v3 Authority Key Identifier:
                keyid:E2:46:B1:7C:2B:9B:E5:A0:05:19:59:FC:F6:75:23:46:B4:6E:0E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/34352e3233312e3138382e302f32322d3234203d3e20323637323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ae:15:d9:e0:97:56:dc:af:17:09:6b:5c:0e:20:be:dc:4c:
         95:42:5f:52:04:2e:0b:fa:24:8f:c9:f3:6a:8b:b8:7f:47:d1:
         14:9a:23:35:70:dd:f0:26:ae:64:65:ad:71:ef:11:88:0d:55:
         59:1d:7b:b2:b1:2c:46:bf:ae:a9:20:aa:01:ee:07:45:2d:a0:
         73:31:66:e8:c0:87:f3:74:ba:f2:8b:4c:3e:99:52:cd:b1:11:
         10:c0:7d:72:5a:75:37:2b:e3:8f:a3:1d:b3:8e:fd:62:bc:51:
         a8:37:33:fd:c1:b9:69:f8:8d:f1:50:85:67:5d:fd:39:8c:6a:
         f6:16:5b:4f:e1:28:e1:ae:4b:27:4d:61:c3:42:ee:2d:ba:f8:
         3d:75:c2:2d:86:6f:0c:6c:86:7a:91:a1:21:9b:fa:ee:8d:d2:
         f7:26:78:a5:47:c8:0d:2d:9e:b1:59:0e:c8:9f:23:01:cc:8e:
         d4:4f:b0:ae:ed:7e:78:33:4a:f0:4e:8f:34:ee:9f:cd:02:28:
         ba:a0:98:41:03:a8:76:20:81:e0:c6:bf:51:5b:11:c2:d3:91:
         ba:d9:76:a9:8c:fd:b1:d3:43:87:ae:7a:e9:ee:53:1a:e7:36:
         57:d4:9a:a0:4f:18:b6:93:da:a9:e7:79:90:8b:35:75:45:f6:
         f1:8a:79:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:09:29 2025 by rpki-client