This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/34352e3136342e3136382e302f32322d3332203d3e20323731373137.roa
File:                     34352e3136342e3136382e302f32322d3332203d3e20323731373137.roa (raw, json)
Hash identifier:          CjoqMsbzM1Hru4SLzSDKeuKS3sgxoGCHcCMd1Aw3lUI=
Subject key identifier:   AB:2B:C1:A1:78:4B:9D:64:27:82:FB:32:BC:90:9B:34:30:7D:5A:0F
Certificate issuer:       /CN=5E878ACF42BCB846E133F1C042360C4F1DF3ED27
Certificate serial:       7CAA23481ACA27A826FC0950BC0F414B4D6381D9
Authority key identifier: 5E:87:8A:CF:42:BC:B8:46:E1:33:F1:C0:42:36:0C:4F:1D:F3:ED:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/34352e3136342e3136382e302f32322d3332203d3e20323731373137.roa
Signing time:             Tue 25 Nov 2025 14:09:26 +0000
ROA not before:           Tue 25 Nov 2025 14:04:26 +0000
ROA not after:            Tue 24 Nov 2026 14:09:26 +0000
asID:                     271717
IP address blocks:        45.164.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.crl
                          rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:aa:23:48:1a:ca:27:a8:26:fc:09:50:bc:0f:41:4b:4d:63:81:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E878ACF42BCB846E133F1C042360C4F1DF3ED27
        Validity
            Not Before: Nov 25 14:04:26 2025 GMT
            Not After : Nov 24 14:09:26 2026 GMT
        Subject: CN=AB2BC1A1784B9D642782FB32BC909B34307D5A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:31:1f:08:29:e8:b1:67:6b:20:7b:65:d1:
                    d4:87:b9:8a:05:88:b4:e6:96:ed:8e:b1:90:b8:67:
                    20:f3:c9:0a:74:06:58:21:d9:69:ed:25:30:1f:aa:
                    09:67:14:86:de:8b:03:d1:7d:71:75:0a:fc:bd:5f:
                    b5:42:6b:59:2c:a0:2d:c1:04:37:88:6d:22:b0:04:
                    95:b9:39:75:12:69:ab:76:cb:b1:6e:64:a6:a6:ab:
                    92:73:d0:0e:1f:f5:d6:da:db:9f:a0:1c:11:80:a0:
                    11:74:eb:b7:c4:29:d1:39:e9:a5:11:d7:83:c4:a3:
                    2a:85:76:30:ca:9b:32:b9:0b:49:8e:ca:5c:07:48:
                    ec:15:2e:2e:88:5c:5e:0c:e3:20:67:c0:7c:fd:25:
                    03:36:20:d1:6f:65:ee:8f:50:0b:e2:20:b3:52:3a:
                    bc:bb:de:09:76:b1:19:8c:3a:53:2d:e9:2c:7d:f2:
                    77:57:6c:d3:b5:5c:75:f6:db:c9:96:f6:64:73:8a:
                    ac:51:40:89:b4:66:4e:60:d7:1a:aa:1e:36:c4:6f:
                    00:44:ae:24:3f:e4:ad:e3:7a:3b:19:ab:61:ed:7d:
                    16:ac:0b:1c:0c:77:da:cf:51:c8:a2:ed:aa:28:23:
                    ae:7b:13:72:0e:ac:bf:13:4c:a5:3f:26:1b:f6:3f:
                    2c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2B:C1:A1:78:4B:9D:64:27:82:FB:32:BC:90:9B:34:30:7D:5A:0F
            X509v3 Authority Key Identifier:
                keyid:5E:87:8A:CF:42:BC:B8:46:E1:33:F1:C0:42:36:0C:4F:1D:F3:ED:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/34352e3136342e3136382e302f32322d3332203d3e20323731373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:5f:6c:22:f0:10:cb:72:50:f6:e1:42:ce:b8:f6:21:9c:b5:
         09:b1:86:39:34:5c:11:bc:f6:7d:f0:e2:35:f6:98:23:02:1c:
         dc:01:c4:4a:48:6c:f0:82:75:f4:69:72:4e:eb:f6:44:06:3e:
         29:9a:c7:66:5f:d2:a8:90:16:a4:3f:7b:84:f1:50:d4:b3:35:
         79:98:98:2d:8a:85:2b:82:f8:b7:1e:38:57:3e:b9:e0:94:3f:
         0d:95:79:8a:ac:d4:f2:ca:b5:4f:15:38:bf:38:ca:b2:3c:7e:
         d6:38:ff:84:41:dc:0a:8c:2b:25:74:8c:fb:a6:10:b1:24:69:
         45:84:08:ed:dd:33:36:47:27:c0:85:e4:fb:6e:33:2b:08:2b:
         6e:80:c5:ea:03:52:dd:59:79:fd:52:f2:ed:20:a0:e7:54:37:
         21:07:f9:e5:d8:b6:d8:db:71:e2:1e:f1:2e:6c:32:70:20:c8:
         0e:40:c8:3e:17:c7:30:4c:20:70:a1:d1:9e:52:4c:6e:af:73:
         e1:09:81:04:23:55:42:81:d3:fa:fe:2f:b3:23:dc:df:7a:45:
         be:33:87:ce:26:b6:cf:10:61:70:e3:49:7f:6f:0a:52:93:7a:
         d2:7d:c3:ea:df:0d:0f:ac:4f:f1:24:69:af:d9:73:4b:df:ec:
         d1:2a:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:26 2025 by rpki-client