This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/34352e3137332e3138302e302f32342d3332203d3e20323635343332.roa
File:                     34352e3137332e3138302e302f32342d3332203d3e20323635343332.roa (raw, json)
Hash identifier:          DVzAmraahgcEvu17CMdBBLT8NB0hvpJJfNB0kmBA5G0=
Subject key identifier:   B1:24:81:94:E1:90:92:9F:62:D2:61:66:C5:97:E4:1E:7E:26:8C:8D
Certificate issuer:       /CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C
Certificate serial:       0AA7C36629F74B6C7E5F9006EB4AA9E1FB8995CB
Authority key identifier: 2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/34352e3137332e3138302e302f32342d3332203d3e20323635343332.roa
Signing time:             Mon 05 Jan 2026 14:45:02 +0000
ROA not before:           Mon 05 Jan 2026 14:40:02 +0000
ROA not after:            Mon 04 Jan 2027 14:45:02 +0000
asID:                     265432
IP address blocks:        45.173.180.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl
                          rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a7:c3:66:29:f7:4b:6c:7e:5f:90:06:eb:4a:a9:e1:fb:89:95:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C
        Validity
            Not Before: Jan  5 14:40:02 2026 GMT
            Not After : Jan  4 14:45:02 2027 GMT
        Subject: CN=B1248194E190929F62D26166C597E41E7E268C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:18:fd:7c:4a:d9:8c:c4:b9:ed:92:3c:bb:
                    b1:d7:73:28:85:59:a8:05:fe:d2:14:2d:d6:39:54:
                    26:2d:75:19:31:62:d1:76:dc:06:31:bc:04:0d:df:
                    f4:bd:b1:6d:a2:64:26:86:06:64:d6:66:58:c3:1e:
                    c6:42:23:85:07:84:e4:f7:07:de:06:fe:bc:b7:86:
                    90:07:0e:1b:ee:25:5b:15:ed:88:93:d8:57:76:7a:
                    5e:2f:6f:ad:57:d7:4c:d1:4b:a6:76:54:62:df:b5:
                    ed:2c:b0:9d:1e:be:2e:e6:4e:4f:14:bb:8b:02:a1:
                    18:b9:d4:bf:15:f2:12:42:9e:e0:97:0a:d4:ce:38:
                    ef:06:8b:d0:f0:72:c4:37:3e:1e:e5:b6:ad:68:01:
                    66:67:c1:e8:8f:72:8b:e8:15:e1:db:68:89:8a:39:
                    af:9c:84:6d:d6:08:22:94:bd:20:0b:9e:f1:ff:8e:
                    11:24:b9:1f:c2:54:55:01:fd:88:01:e8:03:e8:de:
                    b5:46:8b:b8:2e:9b:16:c6:e9:5d:99:8f:79:8c:21:
                    85:75:de:9a:9f:42:49:6d:98:31:9b:30:ce:bd:ca:
                    30:c9:68:0d:6a:b6:5b:12:df:a5:7d:ec:ad:c2:34:
                    d7:aa:a0:1b:e5:8c:7d:5a:29:bc:35:3b:36:6c:1a:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:24:81:94:E1:90:92:9F:62:D2:61:66:C5:97:E4:1E:7E:26:8C:8D
            X509v3 Authority Key Identifier:
                keyid:2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/34352e3137332e3138302e302f32342d3332203d3e20323635343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a2:62:b9:6b:26:89:5e:81:c1:25:95:9f:c4:cc:f9:3d:af:
         bb:ba:36:3a:88:1b:88:aa:c8:23:25:d1:05:f0:02:11:20:06:
         f3:7c:c1:1d:b5:a4:54:a3:9d:fe:96:12:69:19:62:55:74:d7:
         e2:dd:12:c3:9f:6d:9a:e3:8b:8a:0b:d0:eb:18:23:cd:00:78:
         19:89:82:83:22:03:f0:fa:fd:8b:a3:e1:12:fd:65:cb:c8:18:
         5a:8b:0b:ab:da:0b:6d:ac:94:58:fd:06:31:6b:7c:70:27:86:
         0c:6c:96:1a:61:fd:4a:22:c5:53:c5:6b:c4:02:67:40:47:57:
         be:02:d7:95:46:a5:bd:ad:34:bf:70:21:56:dd:e7:dd:91:f7:
         a8:f8:ca:17:9e:3b:57:61:4d:6c:fa:59:cd:5e:cc:2b:5f:68:
         8b:d3:46:c7:48:63:24:a9:e9:94:ab:84:f0:2e:c1:0c:89:d0:
         0d:a3:17:02:3e:57:35:fb:16:62:d6:12:57:27:8e:d4:15:27:
         04:75:dd:2e:0b:a7:85:4d:db:f5:0c:04:51:59:3e:34:e6:ac:
         f1:53:39:ea:4a:d7:9c:1f:77:b5:6c:00:94:2c:f2:d1:d1:37:
         a8:e6:d6:6a:74:2b:f9:5e:a5:92:1f:be:87:52:e8:0e:78:c9:
         70:3f:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:03:59 2026 by rpki-client