This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133392e302f32342d3234203d3e20323637333231.roa
File:                     34352e3233322e3133392e302f32342d3234203d3e20323637333231.roa (raw, json)
Hash identifier:          TCN6FnWmf3qZK9KXz8P44wEj1MSvfUBtEhzBg5pL884=
Subject key identifier:   D5:38:0E:91:73:B2:81:22:6F:6F:83:5C:3A:0C:09:7B:32:33:1F:79
Certificate issuer:       /CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
Certificate serial:       5B4C3DC0521E3A352FE046C693D164DAB44FC478
Authority key identifier: 4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133392e302f32342d3234203d3e20323637333231.roa
Signing time:             Fri 28 Nov 2025 19:34:26 +0000
ROA not before:           Fri 28 Nov 2025 19:29:26 +0000
ROA not after:            Fri 27 Nov 2026 19:34:26 +0000
asID:                     267321
IP address blocks:        45.232.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl
                          rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4c:3d:c0:52:1e:3a:35:2f:e0:46:c6:93:d1:64:da:b4:4f:c4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
        Validity
            Not Before: Nov 28 19:29:26 2025 GMT
            Not After : Nov 27 19:34:26 2026 GMT
        Subject: CN=D5380E9173B281226F6F835C3A0C097B32331F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:00:6e:15:aa:a8:dc:7e:31:e3:99:f4:53:45:
                    64:17:e5:21:58:6f:6d:f6:8d:25:6a:fe:04:c5:36:
                    ba:7c:ee:a4:30:95:36:76:b3:c8:9c:6b:30:c8:2c:
                    9c:51:c1:56:27:c6:bd:e8:17:21:47:ab:38:dd:12:
                    4e:15:b1:f2:f7:d2:6f:cb:29:53:14:5d:de:43:e1:
                    7e:41:3c:ff:47:03:94:36:df:c8:0a:55:36:0a:97:
                    ba:47:b4:8d:2c:85:2c:94:53:ba:fb:c6:6d:a6:52:
                    c5:5a:25:18:20:5e:ff:26:22:47:f7:62:1a:cb:44:
                    c6:2d:10:e9:1c:3f:86:d2:f9:31:4e:27:65:03:c6:
                    04:b1:db:b1:be:c3:2d:51:c0:8b:ec:f8:20:e0:37:
                    7a:b6:25:77:64:cc:bb:85:7f:c9:ef:83:53:5c:a0:
                    ff:c9:5f:d7:d7:52:45:9c:59:47:aa:8c:b7:fd:6e:
                    19:e3:56:f7:28:2d:b5:80:b4:09:f7:3a:a0:48:9b:
                    fe:b1:c5:c7:57:c6:ae:a3:ce:25:b2:4f:f2:b6:51:
                    ac:25:92:d3:c0:de:61:7c:b6:c4:08:87:e6:6b:fa:
                    cc:50:28:99:bd:d2:00:b6:62:4f:c1:f2:af:6b:1d:
                    34:c1:8a:28:be:5c:8c:a4:34:2b:fd:2c:a7:6b:34:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:38:0E:91:73:B2:81:22:6F:6F:83:5C:3A:0C:09:7B:32:33:1F:79
            X509v3 Authority Key Identifier:
                keyid:4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133392e302f32342d3234203d3e20323637333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:9b:2a:85:50:da:c3:84:99:57:af:b8:88:bf:35:8c:17:6d:
         79:b1:01:1f:17:c8:8a:58:eb:2b:49:0c:28:22:cd:34:4f:90:
         d8:85:08:d1:b1:20:f0:c1:99:b2:5f:f0:27:8e:bd:78:66:a7:
         9f:05:7c:11:27:33:12:43:72:26:2f:69:ae:8f:f3:7c:c6:1e:
         be:5c:2c:59:83:2a:68:f4:68:b4:e8:6e:e5:d2:b6:96:64:f4:
         84:f3:96:c9:60:88:ed:04:1a:ee:96:b7:1a:46:dc:15:c7:34:
         4d:51:8f:35:70:15:d6:8d:e1:84:d4:77:6f:fd:82:56:31:c5:
         76:bd:e6:8c:15:11:24:b6:7d:a3:64:1f:2a:46:8e:25:12:71:
         1c:2f:c6:22:94:ee:db:24:57:11:02:e8:2d:72:65:e7:a9:0c:
         a5:50:a9:dc:99:d7:2f:65:0e:7e:2c:7c:7b:25:cc:04:f8:8a:
         81:a4:50:1b:83:f4:97:2e:34:5f:34:1c:16:f0:8d:ed:62:86:
         2b:54:41:2b:8d:8d:68:61:fb:db:b3:04:17:42:a6:a3:f2:9d:
         02:17:9f:11:24:0b:a0:af:d2:0d:e2:91:48:2b:79:d3:2b:aa:
         ce:dd:28:a6:8a:d8:48:ec:f8:b4:d8:f7:93:57:7e:f3:7f:14:
         9d:4a:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:13 2025 by rpki-client