This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37322e302f32322d3232203d3e20323637333634.roa
File:                     34352e3233342e37322e302f32322d3232203d3e20323637333634.roa (raw, json)
Hash identifier:          FxuyqqKJQtec/4OULORtgRFRwzqC8ehfcDFTYeHblGI=
Subject key identifier:   E6:11:A2:FF:8A:DA:E4:9B:A6:68:5D:93:75:D4:DA:99:61:F7:C6:86
Certificate issuer:       /CN=EE908CF6B5C6DE896D19822212A8E9D12A806EA3
Certificate serial:       77A7F06C93BE4B8361558E20904CED2B37F06591
Authority key identifier: EE:90:8C:F6:B5:C6:DE:89:6D:19:82:22:12:A8:E9:D1:2A:80:6E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37322e302f32322d3232203d3e20323637333634.roa
Signing time:             Fri 09 Jan 2026 15:47:36 +0000
ROA not before:           Fri 09 Jan 2026 15:42:36 +0000
ROA not after:            Fri 08 Jan 2027 15:47:36 +0000
asID:                     267364
IP address blocks:        45.234.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.crl
                          rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a7:f0:6c:93:be:4b:83:61:55:8e:20:90:4c:ed:2b:37:f0:65:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE908CF6B5C6DE896D19822212A8E9D12A806EA3
        Validity
            Not Before: Jan  9 15:42:36 2026 GMT
            Not After : Jan  8 15:47:36 2027 GMT
        Subject: CN=E611A2FF8ADAE49BA6685D9375D4DA9961F7C686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:f7:e7:10:56:a5:bc:56:ab:14:ef:48:85:
                    a7:77:9b:39:1b:9c:7a:59:71:42:65:b6:6f:7c:8e:
                    f4:db:37:ab:0c:61:c9:6c:08:df:57:c2:9a:b1:4f:
                    1a:41:a7:88:b7:aa:bd:ba:03:d0:da:1f:96:46:d3:
                    98:9c:86:fd:2a:26:08:a8:e4:25:0a:c4:87:7d:8e:
                    99:b9:c6:64:5c:02:22:1f:e3:25:e9:a4:21:30:b1:
                    4f:38:ec:b4:91:06:5c:9e:3e:05:bb:5d:88:93:0a:
                    91:70:bc:23:25:9a:c9:bc:7c:61:48:8e:63:34:5e:
                    35:20:ab:a7:25:21:16:d5:9c:d1:67:3c:83:0f:e0:
                    4b:34:d6:92:70:16:c4:77:41:d2:4e:76:90:fe:56:
                    03:70:b2:d1:8b:02:75:6e:5d:33:9d:37:b6:86:85:
                    0f:c7:3e:fb:d4:82:40:5f:2a:e2:f1:ef:ac:d0:32:
                    e5:65:f9:04:27:a2:44:cd:bd:8c:77:ab:4b:b0:d7:
                    d3:da:11:5e:ce:49:47:d5:e9:22:dc:0d:a1:5e:32:
                    e9:dd:16:39:17:8b:42:40:d5:c2:31:21:e8:ee:9b:
                    7e:52:16:a1:64:f0:5d:48:eb:89:9c:a2:65:c1:a7:
                    ed:3f:c6:8a:f9:95:39:5f:1e:22:98:eb:f0:29:6c:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:11:A2:FF:8A:DA:E4:9B:A6:68:5D:93:75:D4:DA:99:61:F7:C6:86
            X509v3 Authority Key Identifier:
                keyid:EE:90:8C:F6:B5:C6:DE:89:6D:19:82:22:12:A8:E9:D1:2A:80:6E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37322e302f32322d3232203d3e20323637333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:b1:b7:2e:ac:1d:06:90:7d:99:5e:11:ea:34:c4:47:04:23:
         98:68:b0:73:0d:f2:f9:2a:bf:ea:2c:d6:08:30:25:51:13:f1:
         f7:b3:3b:74:34:9c:d7:38:7c:32:11:9f:bb:de:a4:ba:37:66:
         f8:64:28:48:c6:ea:27:00:65:8f:17:86:60:41:a8:f0:36:8e:
         be:0c:8b:46:bc:b6:92:af:74:ee:39:ab:7b:ff:da:04:9d:ce:
         c6:4e:4e:93:11:35:e9:f1:49:d1:25:b1:b1:a8:af:84:1b:00:
         51:8c:60:0d:f1:89:ad:0f:d0:9b:0e:fe:9e:ff:f8:68:c5:ae:
         e5:55:2c:a9:06:0d:a1:78:c0:34:7f:38:3c:75:bc:d9:31:b1:
         bc:95:4a:f8:63:37:17:e9:c1:8e:62:97:84:ac:cc:79:74:46:
         99:99:cf:4a:ca:af:0e:22:f5:2a:c4:78:a7:5e:a3:c7:71:e9:
         76:7a:e0:6d:ae:0f:24:a2:4a:07:e3:e7:78:ee:1a:92:cc:ff:
         8f:c9:3f:35:ba:a5:6e:a0:d0:64:eb:42:5b:b8:2c:ac:92:b8:
         06:3d:eb:32:33:bb:f0:e2:df:77:31:9d:b4:f0:6b:38:32:71:
         f8:1a:bb:24:79:c7:60:63:11:e7:80:e3:c9:27:98:99:3e:1f:
         52:36:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:53 2026 by rpki-client