This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          OYuNe6ovkS85ruNObypvtGTlTxuckOVcFVnMYbqCwkI=
Subject key identifier:   35:99:1E:A0:A6:FF:38:AA:1F:28:69:DB:06:91:A1:E9:B0:E8:D7:1F
Certificate issuer:       /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial:       59E54AF7899A5D51EC05D43333ACC36167628646
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa
Signing time:             Sun 16 Nov 2025 12:41:14 +0000
ROA not before:           Sun 16 Nov 2025 12:36:14 +0000
ROA not after:            Sun 15 Nov 2026 12:41:14 +0000
asID:                     262503
IP address blocks:        45.181.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e5:4a:f7:89:9a:5d:51:ec:05:d4:33:33:ac:c3:61:67:62:86:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
        Validity
            Not Before: Nov 16 12:36:14 2025 GMT
            Not After : Nov 15 12:41:14 2026 GMT
        Subject: CN=35991EA0A6FF38AA1F2869DB0691A1E9B0E8D71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:33:1f:6e:83:c3:e0:27:fa:63:89:91:b8:
                    17:23:9c:59:48:44:b5:a5:25:65:de:31:4f:c5:f2:
                    b3:2a:ed:83:4c:8d:84:57:a5:a1:5a:2e:03:3e:45:
                    fa:e9:81:ee:96:29:67:14:ed:24:cf:e0:17:c2:63:
                    be:07:5e:2a:75:c3:94:ba:12:c3:bb:9d:c9:0c:e7:
                    6a:ce:3a:d1:fe:28:34:a4:67:e7:7c:f5:00:4a:4f:
                    1c:0d:81:b3:04:9a:0c:f1:58:a4:bc:68:4c:a6:69:
                    d2:e8:94:80:99:5c:c6:ec:b6:2a:31:bf:9d:95:03:
                    93:09:df:38:a0:8a:89:be:0f:ed:94:30:24:96:f7:
                    e0:94:3c:b5:82:ba:e9:a6:ff:fb:92:b5:8e:74:6b:
                    03:54:bf:a0:c2:1e:2f:e9:35:27:be:50:44:53:e9:
                    52:32:a2:4d:fa:e4:22:8c:d4:2a:00:b5:60:18:0a:
                    81:06:78:0c:e5:12:95:c0:c3:ea:43:55:86:4b:a2:
                    85:f9:7f:05:ed:49:f7:3d:80:c2:79:26:c5:89:17:
                    ea:e8:94:c2:fa:a6:bf:14:bb:2a:60:d9:78:e6:f2:
                    f6:0f:45:1e:27:ff:84:07:ea:ee:59:71:61:72:6d:
                    e6:bd:a4:db:f6:80:0d:96:fa:e7:27:59:9a:df:4e:
                    4d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:99:1E:A0:A6:FF:38:AA:1F:28:69:DB:06:91:A1:E9:B0:E8:D7:1F
            X509v3 Authority Key Identifier:
                keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:64:23:64:41:92:ed:0d:e8:ca:da:8b:00:fd:7f:b0:c9:69:
         7f:11:d8:f9:a6:1d:3f:52:03:06:85:fc:7f:02:52:79:22:df:
         16:a2:3b:63:c9:03:ff:8d:a1:65:d6:7c:c0:8c:f6:75:e3:90:
         9f:26:ef:0f:7c:e8:24:91:18:2a:08:5d:9c:eb:32:35:4e:45:
         1d:2c:39:9d:9c:57:4f:83:ae:f8:70:0f:28:61:91:82:a2:75:
         16:63:eb:d8:b1:6d:e6:b8:03:8c:aa:c8:5c:ae:59:99:4c:e6:
         1a:46:86:5c:b9:ec:ca:14:64:8c:cd:cd:9a:18:c4:00:f5:76:
         09:89:9c:4a:6c:51:31:e2:79:e1:39:ef:83:97:9b:65:f6:27:
         72:68:7c:30:b5:60:e8:81:7e:d3:da:54:57:b6:75:2b:9a:22:
         20:bd:2d:9a:a0:8d:b5:7b:b5:40:08:90:f0:5c:f6:d6:e5:16:
         63:7f:b6:0e:eb:8b:3f:ca:21:ee:b8:73:30:b1:28:f3:18:24:
         7a:cb:87:e6:6e:c5:eb:fb:db:54:bf:81:68:fc:0e:c1:3a:04:
         d7:05:2f:a4:57:90:cc:ca:0e:ae:99:b0:36:98:e2:8a:12:de:
         84:54:84:c2:2a:35:1b:5c:f4:56:44:3f:c9:9a:1d:87:e3:30:
         51:79:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:07 2025 by rpki-client