This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa
File:                     34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          KB1crKYl27acQN6iK+a1UnQVFRdEZ3mFBAFhinT6wII=
Subject key identifier:   6E:11:18:FA:28:BE:11:C2:5A:91:D0:AD:36:C5:1B:97:F3:63:5C:AF
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       0C52874CD01C8AF9A493CE39D2356D7C292C39BE
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa
Signing time:             Tue 06 Jan 2026 13:44:31 +0000
ROA not before:           Tue 06 Jan 2026 13:39:31 +0000
ROA not after:            Tue 05 Jan 2027 13:44:31 +0000
asID:                     263665
IP address blocks:        45.227.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:52:87:4c:d0:1c:8a:f9:a4:93:ce:39:d2:35:6d:7c:29:2c:39:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Jan  6 13:39:31 2026 GMT
            Not After : Jan  5 13:44:31 2027 GMT
        Subject: CN=6E1118FA28BE11C25A91D0AD36C51B97F3635CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:7e:bb:67:5f:eb:48:3c:c9:07:80:06:cb:
                    01:b2:ce:d3:f5:e2:fc:cc:c8:e0:12:94:37:76:ab:
                    3b:57:d2:4b:7d:c3:09:52:0e:fe:2f:2e:f2:5e:e4:
                    ff:81:ac:ff:ab:6b:cc:cb:2b:d5:79:bc:c0:0f:80:
                    d1:f0:aa:e0:b6:93:8a:fc:6c:4f:7e:b4:ed:da:04:
                    f3:58:2e:6f:1d:8e:4e:90:84:81:c7:ff:7b:ad:78:
                    dc:34:09:9c:7b:2d:d8:36:a7:fc:d1:65:27:d9:db:
                    ba:5e:56:1c:79:5c:08:a6:8b:6d:b0:40:4a:c0:5a:
                    ad:14:77:9c:d1:ac:4b:95:e4:2c:25:6f:11:0d:a8:
                    f5:03:0e:b0:c8:cc:87:ff:a4:15:de:c3:0a:be:36:
                    b7:d2:0f:2b:f7:88:e5:d3:bf:44:aa:20:9b:ab:3b:
                    e9:9d:d8:9c:5d:a6:e2:26:7f:e4:31:5b:ef:65:d5:
                    33:d2:81:dd:b7:8b:3c:0f:58:3e:b1:01:07:74:43:
                    85:d0:b0:a2:3e:2d:bf:af:6a:1a:84:86:7a:09:49:
                    8f:88:6a:2d:8c:10:1c:17:48:b5:dd:61:64:43:58:
                    04:0e:f7:5d:87:a9:30:a2:40:86:61:4a:90:cb:f7:
                    0f:ba:0d:f8:f5:d8:b2:77:76:ac:a4:52:23:fc:61:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:11:18:FA:28:BE:11:C2:5A:91:D0:AD:36:C5:1B:97:F3:63:5C:AF
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3232372e3138382e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:d6:00:5e:51:f3:47:3c:01:33:63:f0:79:ab:96:9b:c7:64:
         28:55:e2:d5:38:24:d8:e3:17:83:e3:28:86:ab:2b:04:c4:74:
         51:cc:30:f5:a5:67:4c:ff:53:d0:15:f8:5f:4d:11:ba:8d:14:
         42:dd:37:1b:2e:55:13:d9:dc:9c:ca:c0:28:66:d1:e5:09:14:
         a8:04:5d:47:7e:d2:bc:50:5a:65:ef:f6:3f:50:43:7c:44:44:
         f9:aa:1a:ce:01:31:8d:80:5c:68:76:c8:ef:3e:ba:04:81:19:
         82:1e:b4:81:80:3d:28:04:c6:a8:50:6c:81:e7:50:cc:e7:8e:
         77:59:45:34:3d:0d:7b:e6:fa:cb:3f:9a:a8:e8:d4:0d:40:17:
         e7:d5:17:b4:a1:a0:86:93:4c:5b:6d:5a:7f:c3:a0:48:86:08:
         5a:ad:2d:85:0d:da:4c:65:90:85:ec:54:c4:2e:90:72:bc:b7:
         53:0d:e2:62:19:7d:7f:77:80:29:1f:29:b4:af:40:7b:fe:5c:
         3d:fd:25:6a:92:82:73:f5:cc:72:34:cd:12:9c:5a:c9:7b:1d:
         bd:d1:f1:04:51:fc:9d:55:c0:d1:6d:7b:9f:9d:a2:f8:48:26:
         90:47:0b:52:e4:5f:96:33:27:10:fc:ba:18:c6:59:4d:6a:78:
         e1:a3:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:45:39 2026 by rpki-client