This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa
File:                     34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa (raw, json)
Hash identifier:          dC5dY1X9uMepaH6V9ATw7CR2EzBQvvL8Zl63jgx/Ujo=
Subject key identifier:   75:47:95:B0:B2:67:61:AA:45:56:9F:9E:EC:48:70:DC:38:A4:CE:50
Certificate issuer:       /CN=C48A7C4E64B4D62C3EEE7B621AF0A31B38755240
Certificate serial:       5272B8049BE0E4C2CF22FF7AB6F6F54734BD0AD8
Authority key identifier: C4:8A:7C:4E:64:B4:D6:2C:3E:EE:7B:62:1A:F0:A3:1B:38:75:52:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa
Signing time:             Mon 12 Jan 2026 18:01:17 +0000
ROA not before:           Mon 12 Jan 2026 17:56:17 +0000
ROA not after:            Mon 11 Jan 2027 18:01:17 +0000
asID:                     264169
IP address blocks:        45.189.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.crl
                          rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:72:b8:04:9b:e0:e4:c2:cf:22:ff:7a:b6:f6:f5:47:34:bd:0a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48A7C4E64B4D62C3EEE7B621AF0A31B38755240
        Validity
            Not Before: Jan 12 17:56:17 2026 GMT
            Not After : Jan 11 18:01:17 2027 GMT
        Subject: CN=754795B0B26761AA45569F9EEC4870DC38A4CE50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:f3:69:f4:df:d6:56:fe:28:09:06:40:f3:
                    a5:41:5a:d6:86:8e:5a:6d:98:b4:08:44:a9:ee:91:
                    71:bf:a6:f2:4e:8d:a7:25:8d:7c:2b:06:8a:4d:3a:
                    2d:87:7f:14:e5:fc:87:bb:a3:f0:a2:04:90:63:26:
                    72:6d:d5:73:aa:50:2c:5a:da:d6:94:51:43:f3:ff:
                    12:c6:7f:be:ff:57:5e:e0:0b:d2:0d:5b:f2:9c:c4:
                    30:a6:96:26:47:4f:d4:62:55:19:fb:61:43:a5:5a:
                    11:fd:54:b6:48:c6:1a:2d:27:f4:5c:47:87:7f:ca:
                    b6:70:10:3a:39:21:d2:83:24:74:a7:83:54:43:06:
                    fd:17:9a:b0:28:8d:bb:dd:4d:d6:59:6c:d0:33:7c:
                    b8:5c:22:ac:8b:1f:a5:e3:5b:c8:b5:3f:6f:bd:14:
                    d8:25:72:1b:67:7a:67:15:44:c2:2f:9a:26:98:7c:
                    a5:08:ca:60:cc:07:d5:4b:ba:80:4b:27:7f:76:a1:
                    79:11:3a:41:06:7c:36:7a:e8:d4:98:5f:21:44:f5:
                    9c:f0:29:b5:c7:b1:99:b9:33:54:05:c8:ae:83:1a:
                    85:34:52:5f:0e:6e:a2:d6:f4:e5:a5:26:c6:ed:66:
                    db:f0:66:a0:41:48:aa:41:86:46:4c:df:d2:a6:8c:
                    da:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:95:B0:B2:67:61:AA:45:56:9F:9E:EC:48:70:DC:38:A4:CE:50
            X509v3 Authority Key Identifier:
                keyid:C4:8A:7C:4E:64:B4:D6:2C:3E:EE:7B:62:1A:F0:A3:1B:38:75:52:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:8a:f8:2b:f1:ff:0a:6d:00:d0:2a:aa:27:e8:4d:ba:a2:
         b1:50:b6:96:e7:39:7d:70:8d:7e:8c:a8:96:b3:58:ae:ec:67:
         3a:ed:52:69:25:8d:cc:53:91:ed:82:9d:d7:0f:94:7e:53:65:
         09:57:2f:de:fd:16:16:7d:81:31:c2:27:f0:b0:3f:8c:32:7c:
         26:b4:6e:31:d3:1c:07:f8:cb:98:ac:e1:16:59:80:a0:84:c0:
         43:1d:b8:e6:12:a9:99:5e:9e:25:2b:ab:af:ee:b5:06:20:9c:
         b4:86:b6:81:0d:c3:91:28:e2:2a:09:b3:30:73:df:25:dd:9c:
         4d:16:2b:87:54:93:e4:15:c7:61:66:d2:9e:56:41:c8:24:c7:
         64:ed:e6:f0:08:89:e6:af:c7:76:28:5e:47:58:47:90:0c:b3:
         eb:99:7d:e9:cd:39:5c:3f:ec:82:fa:66:b0:1a:e3:14:61:78:
         76:e1:99:37:9d:7e:2e:4e:78:d1:a8:a6:d4:51:63:9f:8a:88:
         29:58:fa:96:55:77:4f:a1:9e:b1:e7:19:93:29:9e:35:95:8c:
         e6:df:de:1f:6b:6a:81:30:64:15:88:70:69:a7:bf:12:e0:41:
         28:46:b7:5b:7e:bd:18:07:3f:c7:18:00:34:ab:bb:92:c0:60:
         59:79:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:47:25 2026 by rpki-client