This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/34352e3136392e3137322e302f32322d3332203d3e20323638373031.roa
File:                     34352e3136392e3137322e302f32322d3332203d3e20323638373031.roa (raw, json)
Hash identifier:          6NV71V0AYxrnpGbnAP43kbdLvtfm5e/BEdmGARmJlT0=
Subject key identifier:   61:E7:FE:82:DB:0B:FF:06:AD:A8:E9:EB:00:21:B4:23:DE:46:A4:1D
Certificate issuer:       /CN=CA46B42FB0BBF428F33303D970954360F960AD2B
Certificate serial:       3F381051F8AED7C309233FF6F9AA207171565FBA
Authority key identifier: CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/34352e3136392e3137322e302f32322d3332203d3e20323638373031.roa
Signing time:             Thu 06 Nov 2025 17:53:41 +0000
ROA not before:           Thu 06 Nov 2025 17:48:41 +0000
ROA not after:            Thu 05 Nov 2026 17:53:41 +0000
asID:                     268701
IP address blocks:        45.169.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl
                          rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:38:10:51:f8:ae:d7:c3:09:23:3f:f6:f9:aa:20:71:71:56:5f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA46B42FB0BBF428F33303D970954360F960AD2B
        Validity
            Not Before: Nov  6 17:48:41 2025 GMT
            Not After : Nov  5 17:53:41 2026 GMT
        Subject: CN=61E7FE82DB0BFF06ADA8E9EB0021B423DE46A41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:d6:52:dc:81:1f:b2:e5:08:f3:cb:e1:15:
                    c8:a9:a1:af:64:ea:cc:e0:09:fb:9a:ce:a6:1e:52:
                    ed:a0:9e:d8:c2:8a:a6:c5:14:c5:84:5e:14:3f:5f:
                    5b:96:5e:b1:a4:ef:42:5b:4f:6f:bb:0c:6d:fd:4d:
                    db:05:b3:2e:40:38:0d:a2:46:d0:a2:d0:f7:22:72:
                    9c:a9:f1:58:e6:74:15:cf:80:ca:1d:3c:0e:64:9b:
                    c7:76:bd:96:31:ea:b5:60:12:3c:f8:88:63:b9:69:
                    ce:6b:91:5b:6d:f2:c5:3b:4c:fb:fc:6d:5f:4b:3f:
                    36:9b:bd:f7:d2:8b:98:bc:92:04:f1:58:60:75:4b:
                    47:2e:ad:45:22:77:ea:e0:e4:05:22:26:02:73:31:
                    5d:66:02:2f:30:9e:7e:64:42:94:79:29:41:1d:b1:
                    b7:f0:62:ac:a4:3a:85:17:5d:31:30:64:64:44:5b:
                    a9:19:58:7c:24:b5:ad:7c:e3:d0:78:c1:4f:63:78:
                    62:35:1b:56:cc:6e:13:45:0f:55:8d:f1:c2:38:ee:
                    57:28:79:ee:b5:15:ec:89:1a:ff:35:b6:6f:2c:fc:
                    5f:3c:14:3a:0a:bd:da:1a:a0:24:55:49:9f:fe:f7:
                    af:7d:fe:a3:33:32:84:f4:20:8c:17:83:fd:85:64:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E7:FE:82:DB:0B:FF:06:AD:A8:E9:EB:00:21:B4:23:DE:46:A4:1D
            X509v3 Authority Key Identifier:
                keyid:CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/34352e3136392e3137322e302f32322d3332203d3e20323638373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:ec:ec:71:0d:fc:c6:57:e7:bd:b3:5c:c6:dc:bd:3f:d2:
         fa:02:bf:98:75:d4:44:9b:50:6f:89:f7:17:85:70:2c:e7:12:
         ac:76:1d:ab:58:22:ed:d5:d3:a2:22:9a:f0:cc:ce:c5:47:71:
         82:ec:85:67:d3:4f:de:4f:c3:02:70:c3:fc:7f:cc:2c:20:af:
         00:66:c3:63:68:90:53:5a:99:4b:c4:33:8f:44:70:01:16:f3:
         dd:b9:a2:70:aa:0e:b7:b6:cd:b1:b8:ac:cb:d8:52:84:77:b0:
         de:1e:98:16:c0:fa:5f:2b:95:19:99:9b:e9:15:0d:b5:f1:83:
         5a:b8:85:57:00:29:bd:e5:eb:20:d4:28:47:6a:d6:26:0c:a2:
         fb:6b:6b:8a:a5:9c:01:ff:59:b6:51:b1:c1:9a:99:e2:22:5b:
         0a:e0:eb:43:8f:f4:f7:bf:4f:81:fe:0d:5f:6e:0b:58:63:89:
         bd:66:87:66:10:95:ea:9f:12:6b:47:bc:e8:6f:0a:41:d3:a3:
         90:3a:a4:1a:22:c6:1b:56:4e:cb:82:7a:c0:81:91:ae:48:48:
         1a:84:f1:c3:d3:88:e1:3a:9c:39:d6:1a:b5:c2:49:ca:24:d7:
         cd:a6:20:20:5b:1b:9a:ed:ee:de:e3:7e:e2:9a:7f:4c:be:98:
         1b:f1:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:14 2025 by rpki-client