This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133382e302f32342d3234203d3e20323637333231.roa
File:                     34352e3233322e3133382e302f32342d3234203d3e20323637333231.roa (raw, json)
Hash identifier:          127U4Q3LcORfkA3pNpcVFGr2mGtWKqUSeVM6Lbk+OD4=
Subject key identifier:   BD:2E:9C:FB:25:F3:14:5E:9E:BA:87:E1:31:41:75:FE:20:0D:6A:15
Certificate issuer:       /CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
Certificate serial:       2A331B8B9968F0FEDEB150156318B417A3DDA605
Authority key identifier: 4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133382e302f32342d3234203d3e20323637333231.roa
Signing time:             Fri 28 Nov 2025 19:34:05 +0000
ROA not before:           Fri 28 Nov 2025 19:29:05 +0000
ROA not after:            Fri 27 Nov 2026 19:34:05 +0000
asID:                     267321
IP address blocks:        45.232.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl
                          rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:33:1b:8b:99:68:f0:fe:de:b1:50:15:63:18:b4:17:a3:dd:a6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
        Validity
            Not Before: Nov 28 19:29:05 2025 GMT
            Not After : Nov 27 19:34:05 2026 GMT
        Subject: CN=BD2E9CFB25F3145E9EBA87E1314175FE200D6A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:c9:13:bd:07:d6:33:a6:a6:e3:4e:e6:c7:
                    5e:36:9b:0d:5f:fd:e6:4b:b5:45:49:6a:a7:2f:bc:
                    e2:ee:0c:6e:ea:64:22:8b:0b:71:eb:7f:df:2b:b6:
                    7f:63:f3:ea:86:b0:c3:5d:85:b6:3e:18:7d:21:0e:
                    b1:98:44:0e:6e:a7:c8:60:4a:8a:5c:b0:3f:3a:7b:
                    79:64:2c:f9:aa:34:c6:f5:9e:5b:5e:c3:37:76:99:
                    0a:6d:c6:c2:ac:a7:da:79:f0:2b:6f:24:34:b5:a7:
                    08:79:84:7d:c4:4f:ff:3c:af:ee:46:98:47:58:f7:
                    29:1b:53:8a:51:b3:e1:33:06:45:b8:67:1b:71:fa:
                    e5:74:16:25:b3:7d:b8:0b:da:b3:e7:2d:68:53:26:
                    4a:9a:4a:99:60:42:95:77:c8:3b:51:fd:1a:d6:79:
                    09:14:c2:a0:1b:8e:b2:b5:15:e7:a8:2a:2e:f0:68:
                    42:91:41:ea:eb:48:c0:de:de:d6:f0:ff:4c:78:b1:
                    68:f5:0f:d4:49:7e:84:56:0c:b7:b5:83:8c:5f:7d:
                    e6:27:02:09:92:11:30:90:7e:08:3b:f1:41:56:96:
                    9c:ec:da:56:7d:e8:96:38:36:5e:28:3d:bb:8d:69:
                    86:66:41:9c:65:ce:bb:a5:f3:9b:48:06:26:54:06:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2E:9C:FB:25:F3:14:5E:9E:BA:87:E1:31:41:75:FE:20:0D:6A:15
            X509v3 Authority Key Identifier:
                keyid:4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133382e302f32342d3234203d3e20323637333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:23:d3:38:57:3b:80:dc:c5:a1:ce:32:ea:f2:47:01:24:
         5f:a8:1c:c9:87:9a:c5:6a:db:cc:42:0b:6c:db:21:77:dc:57:
         79:8c:4e:e4:60:f0:00:e6:16:cb:be:92:32:61:88:04:28:bf:
         80:d9:7c:28:f3:9e:53:d2:fa:cb:d1:86:be:56:5b:09:b5:84:
         5a:9c:ff:19:79:82:22:c9:06:48:ff:89:80:a4:f4:85:e7:7a:
         f9:be:09:b5:05:91:2e:7c:be:1a:23:67:3f:cd:cd:15:a9:66:
         eb:25:b7:a3:43:d5:61:85:b8:e4:c5:b3:64:c0:c8:ad:99:28:
         72:3c:01:44:ad:b0:b9:95:a0:02:83:39:2b:22:8a:a1:7a:96:
         cb:3c:f9:03:fe:fc:c0:73:de:74:f8:a5:b8:94:ff:41:fc:d8:
         e7:b3:55:b4:66:c9:ce:59:e8:dd:ba:47:e0:d6:b9:b2:d1:02:
         8b:60:0f:af:23:a2:d7:06:2d:a5:14:45:98:50:8c:07:ee:75:
         a8:c8:ab:ee:72:f2:10:f8:d2:77:f9:25:21:88:75:af:54:6f:
         a0:b4:59:99:08:1d:f1:aa:48:06:72:45:9c:68:a3:ff:24:d3:
         07:1d:48:35:b0:1c:14:ce:e0:e6:6e:32:e7:ac:1d:f2:0b:37:
         3d:9c:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:04 2025 by rpki-client