This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa
File:                     34352e3136342e36302e302f32322d3332203d3e20323638363035.roa (raw, json)
Hash identifier:          DXOMiZSRQSGpBwVlR2AixZ7KU7nsPDUYOIUFxNKQ344=
Subject key identifier:   B5:A3:AA:41:39:F5:E6:25:28:3C:71:AF:50:73:81:F3:FF:CB:8B:21
Certificate issuer:       /CN=15E47D2B55B5564102941418DF88EB4DA920C990
Certificate serial:       35723786B17E0B2E033074F35C880F160FA216A3
Authority key identifier: 15:E4:7D:2B:55:B5:56:41:02:94:14:18:DF:88:EB:4D:A9:20:C9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15E47D2B55B5564102941418DF88EB4DA920C990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa
Signing time:             Wed 07 Jan 2026 13:47:10 +0000
ROA not before:           Wed 07 Jan 2026 13:42:10 +0000
ROA not after:            Wed 06 Jan 2027 13:47:10 +0000
asID:                     268605
IP address blocks:        45.164.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/15E47D2B55B5564102941418DF88EB4DA920C990.crl
                          rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/15E47D2B55B5564102941418DF88EB4DA920C990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15E47D2B55B5564102941418DF88EB4DA920C990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:72:37:86:b1:7e:0b:2e:03:30:74:f3:5c:88:0f:16:0f:a2:16:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15E47D2B55B5564102941418DF88EB4DA920C990
        Validity
            Not Before: Jan  7 13:42:10 2026 GMT
            Not After : Jan  6 13:47:10 2027 GMT
        Subject: CN=B5A3AA4139F5E625283C71AF507381F3FFCB8B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c2:77:29:32:6d:42:21:22:0e:c0:0f:62:9f:
                    96:7e:37:da:47:a5:ca:a2:d5:1b:c0:03:b2:08:58:
                    69:d6:f1:a6:fe:0b:f7:98:7a:c4:7b:4e:1b:b9:83:
                    ce:62:e8:a6:ec:d5:cd:b0:1c:8f:35:80:0a:ac:ff:
                    ee:bd:57:7d:86:c5:57:15:c4:ab:f1:39:80:c3:df:
                    20:b4:2c:ae:7b:01:f2:57:78:64:64:21:bf:f1:14:
                    c8:16:7d:12:07:0d:44:db:3d:7f:66:df:8d:a5:74:
                    b8:19:c8:b5:fa:c2:f4:8d:84:5d:c5:48:5f:68:18:
                    d7:04:28:8f:24:0c:ec:2b:88:ce:5d:ae:7a:68:70:
                    82:d3:40:f6:02:47:e3:a6:3d:84:25:e6:b9:db:47:
                    43:be:93:ce:a9:54:77:73:c6:10:af:2f:21:ed:20:
                    24:3b:d0:a7:d6:28:a0:e8:d5:f1:8f:26:f6:14:0d:
                    b0:ec:d4:be:85:07:95:c3:ff:d4:56:f8:57:84:58:
                    63:c3:d0:af:af:36:39:bc:fe:fe:11:ed:39:65:e7:
                    a8:4c:83:bb:d0:07:41:9b:aa:f6:69:f4:6b:4f:27:
                    b7:0c:5d:08:fd:83:05:46:62:dc:b1:50:e7:48:af:
                    8f:e4:48:e1:f4:2c:8e:48:c9:b9:de:ad:89:36:5c:
                    53:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A3:AA:41:39:F5:E6:25:28:3C:71:AF:50:73:81:F3:FF:CB:8B:21
            X509v3 Authority Key Identifier:
                keyid:15:E4:7D:2B:55:B5:56:41:02:94:14:18:DF:88:EB:4D:A9:20:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/15E47D2B55B5564102941418DF88EB4DA920C990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15E47D2B55B5564102941418DF88EB4DA920C990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136342e36302e302f32322d3332203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:d4:66:b7:1b:1c:d4:6c:76:05:91:62:51:59:10:3d:64:
         bf:2d:30:64:d7:bf:8a:16:3e:00:2b:df:7a:6c:19:83:c4:ae:
         56:22:db:35:97:de:02:15:27:99:64:ee:12:33:4d:25:47:d2:
         13:d6:fb:eb:ba:5c:b5:1d:6f:a4:43:cd:0a:cf:f9:ca:6d:a6:
         46:4d:43:01:b3:74:3a:d5:42:2d:d0:23:7a:b5:0e:dc:16:da:
         86:bd:73:ca:c0:96:d1:47:44:ab:c6:12:d1:24:3c:4f:96:79:
         7b:47:4d:72:d7:92:43:02:fa:3a:d0:1e:59:87:5e:2e:89:38:
         3f:f4:fd:7a:d7:1f:64:77:8d:c0:93:cd:5c:a8:60:0f:f2:3c:
         8a:ab:06:66:c0:91:e0:2d:60:75:d2:12:e9:86:3c:57:b4:d2:
         d7:1b:ae:c9:46:fa:35:48:6d:22:35:b9:70:9e:9b:02:2d:fc:
         f5:fe:f5:3f:90:45:13:89:0f:71:54:c4:4e:3a:f1:6d:48:e4:
         d6:b3:56:24:c8:f7:25:d4:6c:14:7a:6d:67:df:88:d4:6a:87:
         e7:69:e4:36:70:25:fe:b7:2e:e1:0e:81:4c:47:75:97:5b:cd:
         88:81:6a:21:64:36:df:5e:c3:df:d7:c6:61:4c:c3:9f:bf:22:
         b7:dd:0e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:26:59 2026 by rpki-client