This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa
File:                     34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa (raw, json)
Hash identifier:          xEujc1pL8KfvBpQfp73J6DViWGaFGO+f9UaeDJMwuZI=
Subject key identifier:   9E:09:92:01:B4:89:D0:E8:C3:D6:16:3B:1B:64:EE:B6:A4:43:57:F9
Certificate issuer:       /CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
Certificate serial:       23578BE63A74EB1163AEDF8D7BC3E4EB3A97868B
Authority key identifier: 4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa
Signing time:             Fri 28 Nov 2025 19:33:52 +0000
ROA not before:           Fri 28 Nov 2025 19:28:52 +0000
ROA not after:            Fri 27 Nov 2026 19:33:52 +0000
asID:                     267321
IP address blocks:        45.232.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl
                          rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:57:8b:e6:3a:74:eb:11:63:ae:df:8d:7b:c3:e4:eb:3a:97:86:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
        Validity
            Not Before: Nov 28 19:28:52 2025 GMT
            Not After : Nov 27 19:33:52 2026 GMT
        Subject: CN=9E099201B489D0E8C3D6163B1B64EEB6A44357F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:d0:ac:db:9a:55:32:92:d1:aa:de:3e:03:
                    d2:18:5a:ad:af:b8:01:96:1b:05:08:ab:4d:c0:0f:
                    c4:26:53:95:d9:99:52:bb:42:f5:2f:98:c1:ad:fc:
                    69:db:c2:b4:a1:56:5f:3c:aa:10:e1:87:51:eb:7c:
                    07:3d:d6:b3:b2:38:d2:c0:70:bd:bd:34:9f:93:1d:
                    94:76:a4:6d:85:09:86:bb:dd:11:85:56:01:1c:d7:
                    16:c9:44:70:4a:33:44:84:23:3a:3b:29:b9:77:6e:
                    14:3f:3e:7e:9f:c3:5e:6c:73:ad:ba:0c:05:89:51:
                    a9:d8:1c:68:9d:08:dc:47:41:67:92:1c:75:c0:ef:
                    57:c7:63:bf:da:91:b6:1f:ac:9f:58:8c:9d:2b:4e:
                    c5:84:dd:39:8d:3d:db:92:c3:20:5d:f7:98:d0:cd:
                    da:7d:24:95:59:2f:ba:ee:d8:f3:47:10:a1:37:bb:
                    da:1e:7b:65:91:9d:30:3a:f8:bf:ee:1e:70:cc:37:
                    e9:26:be:e6:a0:70:6d:e5:97:4c:03:2f:fa:77:73:
                    94:a8:2f:b4:07:9d:a6:12:96:11:65:49:b6:6f:3c:
                    12:f2:0e:d8:e5:d7:24:16:36:8e:c0:a3:19:37:03:
                    de:31:df:77:99:53:d6:c9:3c:99:60:0b:23:6c:d4:
                    ba:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:09:92:01:B4:89:D0:E8:C3:D6:16:3B:1B:64:EE:B6:A4:43:57:F9
            X509v3 Authority Key Identifier:
                keyid:4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:f9:25:e1:34:ce:62:c2:73:be:f1:31:c7:20:24:cd:56:
         14:e1:f0:92:06:b7:0e:16:a7:84:66:b9:94:fb:8f:9b:56:b0:
         66:c8:e3:81:bf:53:55:e6:35:74:cc:ef:25:28:fd:00:95:5f:
         6f:26:a9:f0:82:34:d3:f4:6e:31:77:09:5f:4c:61:f6:df:bf:
         4a:14:de:00:7f:bc:60:13:54:35:ec:dd:f4:88:e3:0f:67:4d:
         f6:86:b5:90:9c:8c:1a:49:2f:0d:3f:75:33:6c:64:32:d2:9e:
         62:17:89:36:88:91:f1:56:4e:a5:00:44:01:60:59:92:88:99:
         f3:39:5d:fb:7f:04:1d:39:21:5f:7d:87:38:5f:e7:90:b1:63:
         99:67:8e:89:56:a5:81:06:78:01:ca:ae:f1:cb:49:43:db:51:
         59:81:93:f2:cd:46:bb:b7:a3:83:c4:14:6a:86:6b:d2:49:8c:
         96:e9:1b:ef:be:3c:ed:34:15:2a:ad:4c:a4:4f:02:32:79:d0:
         5f:38:49:62:75:a9:d0:9f:77:9a:fb:b4:ef:a2:5f:45:0e:2b:
         26:fb:0a:69:dd:fe:19:25:87:87:12:b1:9c:fb:3d:8e:e7:f6:
         1d:55:ec:0e:16:92:f3:89:50:15:57:cf:df:75:dc:66:e5:62:
         ba:dc:b0:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI1eL5jp06xFjrt+Ne8Pk6zqXhoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM3OUUzNzI5Q0YyQ0NBNEYzNjQ1MUY2MUU4NjQ4MkJF
MjI2OTYyNjAeFw0yNTExMjgxOTI4NTJaFw0yNjExMjcxOTMzNTJaMDMxMTAvBgNV
BAMTKDlFMDk5MjAxQjQ4OUQwRThDM0Q2MTYzQjFCNjRFRUI2QTQ0MzU3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JtCs25pVMpLRqt4+A9IYWq2v
uAGWGwUIq03AD8QmU5XZmVK7QvUvmMGt/GnbwrShVl88qhDhh1HrfAc91rOyONLA
cL29NJ+THZR2pG2FCYa73RGFVgEc1xbJRHBKM0SEIzo7Kbl3bhQ/Pn6fw15sc626
DAWJUanYHGidCNxHQWeSHHXA71fHY7/akbYfrJ9YjJ0rTsWE3TmNPduSwyBd95jQ
zdp9JJVZL7ru2PNHEKE3u9oee2WRnTA6+L/uHnDMN+kmvuagcG3ll0wDL/p3c5So
L7QHnaYSlhFlSbZvPBLyDtjl1yQWNo7Aoxk3A94x33eZU9bJPJlgCyNs1LqxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUngmSAbSJ0OjD1hY7G2TutqRDV/kwHwYDVR0j
BBgwFoAUTHnjcpzyzKTzZFH2HoZIK+ImliYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHBvR05pOW9mNGRrWm56bUJqRmlXMXJyaUF4SDR2Rmd5eDlCakhmRmZw
MUwvMS80Qzc5RTM3MjlDRjJDQ0E0RjM2NDUxRjYxRTg2NDgyQkUyMjY5NjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDNzlFMzcyOUNGMkNDQTRG
MzY0NTFGNjFFODY0ODJCRTIyNjk2MjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhwb0dOaTlvZjRka1puem1CakZpVzFycmlBeEg0dkZneXg5QmpIZkZmcDFMLzEv
MzQzNTJlMzIzMzMyMmUzMTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6IkwDQYJKoZIhvcNAQELBQADggEBABue+SXh
NM5iwnO+8THHICTNVhTh8JIGtw4Wp4RmuZT7j5tWsGbI44G/U1XmNXTM7yUo/QCV
X28mqfCCNNP0bjF3CV9MYfbfv0oU3gB/vGATVDXs3fSI4w9nTfaGtZCcjBpJLw0/
dTNsZDLSnmIXiTaIkfFWTqUARAFgWZKImfM5Xft/BB05IV99hzhf55CxY5lnjolW
pYEGeAHKrvHLSUPbUVmBk/LNRru3o4PEFGqGa9JJjJbpG+++PO00FSqtTKRPAjJ5
0F84SWJ1qdCfd5r7tO+iX0UOKyb7Cmnd/hklh4cSsZz7PY7n9h1V7A4WkvOJUBVX
z9913GblYrrcsO0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:18 2025 by rpki-client