This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230322e302f32332d3233203d3e20323638313434.roa
File:                     34352e3136382e3230322e302f32332d3233203d3e20323638313434.roa (raw, json)
Hash identifier:          o8lw/hC7x83SCM2dZ00vSeqY4z5eHTHSNNqPxAOs9ng=
Subject key identifier:   B5:75:2B:1E:8D:30:9A:2E:88:4A:81:9C:25:7F:E5:E0:FA:33:AC:8F
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       3CD96F1C97F71ADC4F0CCCA5F2C37B8E9C984C5A
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230322e302f32332d3233203d3e20323638313434.roa
Signing time:             Mon 15 Dec 2025 12:56:00 +0000
ROA not before:           Mon 15 Dec 2025 12:51:00 +0000
ROA not after:            Mon 14 Dec 2026 12:56:00 +0000
asID:                     268144
IP address blocks:        45.168.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 03:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d9:6f:1c:97:f7:1a:dc:4f:0c:cc:a5:f2:c3:7b:8e:9c:98:4c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:00 2025 GMT
            Not After : Dec 14 12:56:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:d5:6e:34:4a:23:1b:02:ae:cc:51:34:fd:
                    f5:25:92:0b:a3:d8:9c:e8:57:75:34:52:1d:dd:7c:
                    7a:75:b7:1d:00:ff:1d:b4:4b:64:b2:17:b1:69:73:
                    a4:2b:34:17:d2:c4:83:4b:15:1e:c2:c4:b7:a6:9c:
                    61:f6:dd:71:81:29:71:9c:08:bb:36:3c:5d:af:79:
                    2a:23:64:af:d4:ef:9a:76:7a:f3:dd:bf:d4:c7:a9:
                    98:f2:4e:a2:4a:2d:f1:d2:ae:a7:a6:e2:10:86:06:
                    a0:f3:5b:c1:30:c5:0a:8a:3a:90:fb:0d:a1:95:f3:
                    29:ba:4a:7d:2c:a0:ea:2a:dd:d8:fe:56:24:22:2c:
                    9c:8f:be:1b:b2:84:a7:07:d6:c0:ba:a5:33:dc:cc:
                    b5:f9:13:4b:a6:ca:06:78:53:01:88:31:6b:a5:4b:
                    75:83:50:54:37:e4:62:a7:00:15:08:a1:cb:68:45:
                    3a:94:0f:61:18:be:87:49:f7:3c:28:d3:e4:48:67:
                    f6:27:83:8f:b1:40:6a:01:fd:7f:c9:50:a4:14:fb:
                    8e:e7:3f:1f:35:34:d2:ef:e2:d9:de:11:d8:58:cb:
                    95:e5:43:dd:ec:a8:d3:99:b6:af:ab:da:a5:c0:64:
                    bc:64:05:be:7b:13:8c:4d:fe:91:71:31:46:d6:d6:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:75:2B:1E:8D:30:9A:2E:88:4A:81:9C:25:7F:E5:E0:FA:33:AC:8F
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230322e302f32332d3233203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:38:52:4f:b5:8c:c1:36:ef:6d:11:e7:6c:72:81:c3:a4:0f:
         ea:e4:0d:93:32:45:ac:9a:a3:f9:e3:f4:7c:00:c8:e8:e7:21:
         26:53:67:8a:e4:63:59:98:df:45:64:4a:72:90:2f:74:e2:02:
         18:4f:a3:3c:15:97:62:b6:d1:b8:40:99:78:e7:58:6a:32:15:
         22:90:c1:8f:1a:65:9a:4b:53:4c:41:c6:8b:1f:20:2d:12:35:
         46:e8:df:b9:f6:4e:68:89:b2:09:57:56:58:f0:72:1c:41:5b:
         c5:57:2c:3e:4d:33:9d:a1:46:d0:5f:c6:e6:84:50:7e:5e:c2:
         d9:8c:8e:37:8f:bb:b7:c1:89:ff:88:44:4a:c7:b7:8a:5a:24:
         d9:0e:ec:d0:f2:d8:44:f4:15:9a:8f:15:48:fe:54:e5:40:61:
         38:b1:7a:46:b9:87:e3:e7:87:9b:67:54:0b:72:4a:75:4b:32:
         9e:8c:89:6d:0a:c7:17:84:29:09:64:6b:c1:6a:95:dd:4b:dd:
         6d:12:39:2b:b6:10:5a:6e:38:16:c4:04:7b:8d:c8:a3:72:de:
         2e:ae:d7:1a:8d:6c:38:35:9c:ca:b9:3e:5b:70:7b:f6:e0:4e:
         a8:e1:77:ec:a2:93:43:f3:fc:4a:79:47:b4:cb:15:eb:29:44:
         08:8d:90:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:40:29 2025 by rpki-client