This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3231302e302f32342d3234203d3e20323636323638.roa
File:                     34352e36352e3231302e302f32342d3234203d3e20323636323638.roa (raw, json)
Hash identifier:          6B9cSt5oJ0BIre1sRmTZm930OSuMiB/MBkl6OUU0ecg=
Subject key identifier:   28:7B:E9:E0:08:FA:DF:1D:7E:5A:EF:DF:22:B4:B0:01:BC:E7:EB:F6
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       3996222B58A1E3ACCCA2352C64BD0BE1F260DFEE
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3231302e302f32342d3234203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:37 +0000
ROA not before:           Mon 22 Dec 2025 19:11:37 +0000
ROA not after:            Mon 21 Dec 2026 19:16:37 +0000
asID:                     266268
IP address blocks:        45.65.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:96:22:2b:58:a1:e3:ac:cc:a2:35:2c:64:bd:0b:e1:f2:60:df:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:37 2025 GMT
            Not After : Dec 21 19:16:37 2026 GMT
        Subject: CN=287BE9E008FADF1D7E5AEFDF22B4B001BCE7EBF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:f6:6b:2d:aa:8e:50:90:fb:52:35:af:9d:
                    90:94:b8:ee:db:9a:58:ec:14:40:d9:93:af:f3:d9:
                    19:7d:66:7b:5c:7a:77:dc:25:99:49:c7:d8:ff:43:
                    1f:1e:8e:43:e7:3c:68:d2:76:f9:7f:7d:c0:77:11:
                    cc:ba:b6:70:b9:f2:d6:35:6a:fb:80:b2:ee:39:eb:
                    85:2c:53:42:11:94:63:e5:43:0a:a4:8a:fb:93:f6:
                    41:56:e8:38:d4:4e:ca:5d:b9:64:b9:87:b3:32:82:
                    90:d2:1e:00:30:c6:82:27:77:33:ee:aa:e3:61:80:
                    0a:cf:24:28:77:4a:ea:fd:6f:75:e8:a7:08:70:35:
                    fc:b0:8f:f5:f0:f4:c8:dd:c5:2c:dd:db:b1:34:8c:
                    f7:c6:57:64:a9:1b:81:87:a4:e9:84:a9:30:ae:78:
                    fc:73:c3:77:67:52:88:78:5c:ab:39:a0:c2:d4:4a:
                    4c:11:d6:2b:e5:30:1e:1f:94:47:da:93:0b:9f:a8:
                    d3:3f:c5:9c:22:5c:12:cd:47:cc:28:21:90:4d:31:
                    62:fe:ac:2b:c3:7b:11:14:f1:20:e2:08:f4:ee:1e:
                    3b:b6:4a:e5:fc:da:51:ac:59:22:91:ee:52:cc:20:
                    0d:8d:2f:06:99:5d:82:92:2a:a5:45:a3:b7:e1:53:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7B:E9:E0:08:FA:DF:1D:7E:5A:EF:DF:22:B4:B0:01:BC:E7:EB:F6
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3231302e302f32342d3234203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:71:70:61:d2:a1:4b:f1:2e:91:8b:65:20:c6:9f:9e:8e:0a:
         d4:35:ab:27:85:91:93:78:02:d8:bc:d9:c0:a1:18:93:25:e5:
         4d:67:da:36:50:73:37:f8:8e:9a:3b:5e:ac:c0:f4:e9:8a:42:
         f5:ab:68:76:bc:29:df:f7:6d:9f:f4:f2:d8:20:da:87:fa:cc:
         7a:b2:ef:d7:13:ba:38:2f:b2:b2:20:60:96:0a:14:b2:eb:76:
         c1:bb:66:7f:3a:fc:0f:ce:a7:c3:9f:8e:7b:29:01:2a:d1:f4:
         91:d9:b0:b6:fa:6d:20:a3:5b:8d:a5:8e:b6:7c:41:30:dd:28:
         01:ff:9e:c9:2d:17:69:f6:75:90:66:f0:e2:46:e6:dc:6a:d3:
         9b:0b:8e:d9:63:21:8b:52:b0:dd:a9:69:f9:23:3a:6d:0f:97:
         00:78:c9:82:00:1d:6a:05:1f:91:3c:ed:41:c5:b6:f1:9b:21:
         47:eb:48:1b:0d:a4:52:a2:34:eb:f0:1b:98:0a:5c:98:f4:77:
         df:4d:75:8a:6a:a1:32:b1:4f:59:fa:6d:4a:3a:26:3b:9c:43:
         fc:6b:a0:04:1b:c4:6a:7c:e2:58:6e:ec:51:05:3d:34:aa:6d:
         b7:5d:4e:0b:9a:9a:2b:34:3f:30:e1:f4:dc:35:d6:a6:b0:62:
         0f:e3:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:08:50 2026 by rpki-client