This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37342e302f32342d3234203d3e20323637333634.roa
File:                     34352e3233342e37342e302f32342d3234203d3e20323637333634.roa (raw, json)
Hash identifier:          EUqNakvo5yps3DEYWZbBEvpy+T/UOtX8qZ+JoAZT0W8=
Subject key identifier:   6E:6F:4A:D0:5C:C2:F8:68:1F:03:B5:C6:F0:8F:94:D5:E9:9D:22:A7
Certificate issuer:       /CN=EE908CF6B5C6DE896D19822212A8E9D12A806EA3
Certificate serial:       14E47F72E5AF3C0A64C2EEE0EC75E0EF80C38C1A
Authority key identifier: EE:90:8C:F6:B5:C6:DE:89:6D:19:82:22:12:A8:E9:D1:2A:80:6E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37342e302f32342d3234203d3e20323637333634.roa
Signing time:             Fri 09 Jan 2026 15:47:36 +0000
ROA not before:           Fri 09 Jan 2026 15:42:36 +0000
ROA not after:            Fri 08 Jan 2027 15:47:36 +0000
asID:                     267364
IP address blocks:        45.234.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.crl
                          rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e4:7f:72:e5:af:3c:0a:64:c2:ee:e0:ec:75:e0:ef:80:c3:8c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE908CF6B5C6DE896D19822212A8E9D12A806EA3
        Validity
            Not Before: Jan  9 15:42:36 2026 GMT
            Not After : Jan  8 15:47:36 2027 GMT
        Subject: CN=6E6F4AD05CC2F8681F03B5C6F08F94D5E99D22A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3d:15:6a:ca:d6:a5:da:87:32:6d:52:b5:f4:
                    8f:c8:72:0a:ce:0c:5c:6d:ab:63:e5:e1:2e:68:b1:
                    1a:4a:e3:9d:e3:38:61:21:59:95:67:0d:14:2e:63:
                    e8:06:b0:e2:89:86:b0:1a:6d:28:6c:d6:50:4d:84:
                    2d:61:80:bc:16:fa:47:b2:01:4e:12:34:90:0f:e6:
                    95:c8:d6:3b:03:e8:02:00:6d:d5:9f:7a:33:3e:b6:
                    da:dd:69:e1:a7:6f:93:c6:c9:75:39:2a:13:85:f8:
                    08:f6:61:32:50:00:91:d5:4c:fd:f6:9a:b2:48:89:
                    37:1e:8c:33:ed:ee:ab:b5:fe:cb:56:05:ee:87:da:
                    68:f7:4a:f5:80:08:d4:6f:63:6b:8f:ac:63:94:38:
                    c6:82:a3:20:47:8f:44:94:f6:ab:9b:22:03:85:3f:
                    73:f8:69:1b:31:cf:34:a7:39:95:01:71:a3:ec:e6:
                    53:ed:8a:32:cf:e2:b8:85:5d:6f:0b:21:19:5c:a5:
                    56:74:8e:c7:e0:7f:68:ce:eb:08:6b:7b:15:d2:69:
                    25:5b:3e:3a:e7:3a:93:a2:4d:6a:c0:62:31:ec:97:
                    0d:a9:aa:9e:92:75:6b:22:48:36:25:69:bb:1c:9e:
                    93:63:61:19:5c:e4:da:7c:a7:cf:5c:d9:04:88:9f:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6F:4A:D0:5C:C2:F8:68:1F:03:B5:C6:F0:8F:94:D5:E9:9D:22:A7
            X509v3 Authority Key Identifier:
                keyid:EE:90:8C:F6:B5:C6:DE:89:6D:19:82:22:12:A8:E9:D1:2A:80:6E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE908CF6B5C6DE896D19822212A8E9D12A806EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/34352e3233342e37342e302f32342d3234203d3e20323637333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:de:3e:f0:f1:d3:ff:bc:45:1f:98:a3:be:fc:22:1b:0e:
         91:86:c4:95:81:fb:93:f8:62:06:a2:34:d2:a6:54:bf:b3:0f:
         a2:86:3f:68:1e:14:c2:24:9d:5b:01:3b:10:31:a1:92:63:4f:
         b2:e9:0c:c9:f8:5d:0f:61:5a:78:18:1b:82:dc:01:be:69:6c:
         84:f7:c9:8a:10:7b:ae:9f:6d:68:d8:80:29:e6:82:b7:ea:f3:
         05:53:1e:45:5e:65:5e:ed:df:f9:66:56:9c:3b:18:a4:f2:32:
         22:d5:31:2f:7c:56:73:a7:df:ad:b0:46:1d:41:a3:fa:39:0d:
         40:00:97:df:b0:0e:14:64:b0:1e:df:e9:62:c5:86:8a:83:6a:
         5e:f4:0a:fe:e0:a8:60:89:b8:62:05:06:7f:87:a7:40:41:5a:
         88:1f:a7:95:b9:f6:d7:d7:d3:ec:5e:69:65:9f:77:48:3d:13:
         e6:0c:87:60:10:9d:57:b7:c7:43:ae:40:80:ee:1e:35:15:0b:
         61:62:63:7f:92:e6:a0:2a:4f:e9:e3:de:47:8f:55:09:93:9a:
         38:54:13:8b:a4:fc:4f:41:3f:0a:b0:4f:ac:97:50:55:16:01:
         86:b6:4e:5b:9c:c9:d0:3c:8f:c7:6f:33:21:af:69:1d:0b:a2:
         0a:83:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:54:01 2026 by rpki-client