This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/34352e3137392e3235322e302f32322d3234203d3e20323733363634.roa
File:                     34352e3137392e3235322e302f32322d3234203d3e20323733363634.roa (raw, json)
Hash identifier:          apU3m600mFaD0opDonmVU32HFubX+9GoKgn41ll3Vmg=
Subject key identifier:   78:55:30:AE:58:98:5C:D9:C6:36:6A:CC:EA:BA:7C:60:54:D6:6B:BB
Certificate issuer:       /CN=62877F2B1F6C47CB9BE968F819C94EFC7AA528B9
Certificate serial:       3BC574646887D721D4511CF6AF11860FA1D4F487
Authority key identifier: 62:87:7F:2B:1F:6C:47:CB:9B:E9:68:F8:19:C9:4E:FC:7A:A5:28:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/34352e3137392e3235322e302f32322d3234203d3e20323733363634.roa
Signing time:             Wed 21 Jan 2026 03:10:38 +0000
ROA not before:           Wed 21 Jan 2026 03:05:38 +0000
ROA not after:            Wed 20 Jan 2027 03:10:38 +0000
asID:                     273664
IP address blocks:        45.179.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl
                          rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c5:74:64:68:87:d7:21:d4:51:1c:f6:af:11:86:0f:a1:d4:f4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62877F2B1F6C47CB9BE968F819C94EFC7AA528B9
        Validity
            Not Before: Jan 21 03:05:38 2026 GMT
            Not After : Jan 20 03:10:38 2027 GMT
        Subject: CN=785530AE58985CD9C6366ACCEABA7C6054D66BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:72:1c:ef:f0:01:59:c7:20:fb:76:ad:36:
                    9c:74:79:bb:fd:10:dd:28:a0:a6:2a:65:ec:20:f7:
                    f1:94:65:3a:98:bd:4b:4f:a0:0c:cb:9f:3e:3a:4c:
                    9f:71:b4:ab:85:c4:29:a1:89:26:22:e8:03:a8:26:
                    38:f9:ca:22:c8:f6:4a:77:90:9d:ac:ef:89:62:f1:
                    c4:5a:a7:e3:a5:4d:e0:ca:04:15:7e:ce:09:85:27:
                    a0:17:9d:2e:bc:c9:e0:a2:6f:33:c4:ad:74:b4:24:
                    23:20:cf:cd:06:da:26:9a:20:5e:a4:3f:94:d8:c2:
                    e5:42:36:73:f7:47:51:87:26:73:87:81:df:37:86:
                    0d:e7:2e:40:0b:e1:ff:be:2f:7b:a0:e1:74:fd:e0:
                    a8:31:72:a7:dc:a1:3b:fc:86:69:33:db:36:f9:71:
                    a4:dc:c4:8b:b7:cd:de:0c:4d:25:bb:ac:f9:3c:d3:
                    32:a5:fc:bf:7b:52:b2:0d:1b:48:4e:ab:a1:8f:da:
                    74:36:9c:a4:7c:a0:3f:3b:70:ec:4f:10:a3:21:8a:
                    62:c2:37:ea:1f:5c:fb:bf:67:05:04:bd:6b:55:43:
                    20:41:c8:0d:9b:fe:c7:c0:06:ed:44:50:95:eb:9a:
                    02:84:91:fe:ba:e1:51:e1:da:de:db:17:cd:ef:b8:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:30:AE:58:98:5C:D9:C6:36:6A:CC:EA:BA:7C:60:54:D6:6B:BB
            X509v3 Authority Key Identifier:
                keyid:62:87:7F:2B:1F:6C:47:CB:9B:E9:68:F8:19:C9:4E:FC:7A:A5:28:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/34352e3137392e3235322e302f32322d3234203d3e20323733363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:7a:6f:fd:88:a7:0b:d4:55:7b:60:96:98:4e:fe:65:b1:6f:
         5f:bb:44:cb:3d:c5:ff:95:d0:15:d5:36:7c:67:e0:af:f9:24:
         2d:7f:6b:98:4a:a6:8b:ef:88:3c:4d:cf:72:00:17:bf:95:a3:
         51:81:ef:ac:ee:8b:6b:c0:d1:fc:3a:84:71:b5:54:1d:7d:c2:
         0b:6e:15:53:c2:2a:3d:e4:06:b6:5e:63:fa:3e:0d:44:8a:f6:
         ce:7b:9d:1e:92:92:14:f6:0d:6b:85:7d:fb:cb:3f:8d:c6:81:
         0b:bc:73:fe:67:e7:16:31:3e:29:38:76:45:30:82:ff:91:cd:
         1e:ab:69:e1:0a:e2:2b:ef:06:c5:9f:47:1b:c1:cd:d0:92:df:
         5a:36:78:ad:93:00:4f:3b:60:69:2c:45:c4:f6:1f:78:6b:5c:
         34:64:ee:b4:ca:45:53:b6:bd:0f:27:8f:41:2c:af:ac:ce:2f:
         75:a8:bf:8c:3e:33:7f:f0:f3:4d:41:af:69:d2:09:8a:ef:08:
         d6:c4:df:7e:3e:8c:2f:03:33:48:84:6b:e1:b2:96:5d:20:8d:
         24:b3:d4:28:1d:e4:e2:64:8f:a3:50:53:0f:11:4a:b8:99:f4:
         ec:c9:12:24:f8:0a:b9:17:14:3c:31:1b:1f:0a:aa:c5:29:b6:
         87:ca:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:44:45 2026 by rpki-client