This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231362e302f32322d3232203d3e20323637313139.roa
File:                     34352e3232382e3231362e302f32322d3232203d3e20323637313139.roa (raw, json)
Hash identifier:          N5o/6WwAzx8N24XFOqcLwCUtWBlk5+ddM00ySK8QR5E=
Subject key identifier:   A3:75:75:23:AE:AC:B1:94:C6:53:6E:3E:A5:D4:4C:D9:37:2F:4D:3A
Certificate issuer:       /CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
Certificate serial:       73DE19DFCEB36EEEE47BFFFA58FC80F48B7DD219
Authority key identifier: 6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231362e302f32322d3232203d3e20323637313139.roa
Signing time:             Thu 13 Nov 2025 18:40:32 +0000
ROA not before:           Thu 13 Nov 2025 18:35:32 +0000
ROA not after:            Thu 12 Nov 2026 18:40:32 +0000
asID:                     267119
IP address blocks:        45.228.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl
                          rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:de:19:df:ce:b3:6e:ee:e4:7b:ff:fa:58:fc:80:f4:8b:7d:d2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
        Validity
            Not Before: Nov 13 18:35:32 2025 GMT
            Not After : Nov 12 18:40:32 2026 GMT
        Subject: CN=A3757523AEACB194C6536E3EA5D44CD9372F4D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:70:d7:ba:7a:02:35:be:93:09:2a:5b:26:
                    c9:e7:59:34:97:00:a4:40:6f:85:26:73:8b:d0:ae:
                    ba:2c:63:8a:9f:6a:18:ac:52:98:99:3f:74:88:0f:
                    de:c7:33:d1:61:19:ea:91:60:6e:c0:ed:c9:88:43:
                    3b:54:09:84:c5:c3:82:58:a3:aa:1c:75:c6:25:66:
                    82:f0:06:13:b6:c1:43:cd:75:bf:81:9c:2a:81:37:
                    0a:0a:8d:69:8c:d9:03:20:9a:ef:18:dd:33:df:3b:
                    12:e0:01:31:22:f8:8b:7e:04:2f:7a:bd:59:3a:a2:
                    4c:b3:1e:59:11:86:1b:f0:f5:c1:52:b6:eb:bf:19:
                    6f:e8:9a:e3:d6:85:37:02:d2:ca:da:71:f9:be:93:
                    9c:b3:de:a4:5b:62:57:e5:32:86:55:25:82:53:1f:
                    c3:92:ca:e6:aa:0e:e0:65:55:23:60:55:57:65:3d:
                    11:c3:29:52:61:d8:f1:f1:9b:93:18:33:ca:0c:f8:
                    bc:b6:f7:db:c8:69:39:e8:03:75:e9:a6:30:51:69:
                    9b:a2:16:1f:74:87:86:25:13:63:33:3a:7a:39:c6:
                    0d:27:78:2e:8e:6a:f7:b2:f2:75:01:25:99:53:31:
                    a4:72:10:87:9a:3d:b2:d9:0a:69:c1:8d:d6:34:fc:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:75:75:23:AE:AC:B1:94:C6:53:6E:3E:A5:D4:4C:D9:37:2F:4D:3A
            X509v3 Authority Key Identifier:
                keyid:6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231362e302f32322d3232203d3e20323637313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:5e:08:91:e5:ea:0f:4c:15:be:83:e0:d5:cc:af:dc:d6:
         ec:0d:ca:ef:6c:75:e6:d3:dd:55:df:a3:e5:bc:d8:b1:1e:06:
         9d:a9:40:4d:99:6b:20:54:e0:a7:53:8e:ed:f1:54:dd:0e:ac:
         c5:b1:71:4e:53:3f:b2:56:55:58:4b:31:99:85:ab:de:45:b0:
         8d:6d:5a:fe:35:85:08:89:e9:8a:53:57:2c:10:41:38:92:1a:
         e2:c3:b9:84:e3:a7:b4:66:ac:0d:b7:b0:62:c9:0f:36:bf:fd:
         e4:72:75:3b:cc:5c:09:b8:bc:ff:28:ef:a9:cc:eb:21:05:cc:
         e3:31:d9:89:16:0e:66:e6:16:c1:97:ee:e1:66:8a:d4:68:cc:
         f3:e4:42:a8:cd:1b:f9:d0:53:17:03:07:34:d3:fe:ac:4c:34:
         fc:34:00:dd:f6:49:31:9e:d5:3c:26:99:a8:25:6e:73:f2:6d:
         dd:6d:07:33:d8:53:0a:72:f5:b6:2a:5c:bc:87:75:0a:8e:a4:
         59:79:b1:5d:67:48:59:fd:74:32:e4:95:88:df:96:a8:ad:78:
         46:c4:65:ba:38:1f:8f:2c:8e:c6:07:ae:b0:cd:0b:35:04:5a:
         3a:4b:3a:f3:b1:be:a5:d4:c4:04:ec:4f:90:2a:e9:ad:46:4d:
         38:74:9d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:11:08 2025 by rpki-client