This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231362e302f32342d3234203d3e20323637313139.roa
File:                     34352e3232382e3231362e302f32342d3234203d3e20323637313139.roa (raw, json)
Hash identifier:          vqSITKnRpgNE/MVmspzPe8aRZrGOa6rs+h2oOEOvc8s=
Subject key identifier:   8F:BA:81:2A:EF:46:D1:36:63:FF:99:F5:A0:88:5A:7F:36:87:94:E4
Certificate issuer:       /CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
Certificate serial:       576F1C5B645D7D0B4F0A643B6BFCB1F24ADF7623
Authority key identifier: 6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231362e302f32342d3234203d3e20323637313139.roa
Signing time:             Thu 13 Nov 2025 18:40:35 +0000
ROA not before:           Thu 13 Nov 2025 18:35:35 +0000
ROA not after:            Thu 12 Nov 2026 18:40:35 +0000
asID:                     267119
IP address blocks:        45.228.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl
                          rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6f:1c:5b:64:5d:7d:0b:4f:0a:64:3b:6b:fc:b1:f2:4a:df:76:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
        Validity
            Not Before: Nov 13 18:35:35 2025 GMT
            Not After : Nov 12 18:40:35 2026 GMT
        Subject: CN=8FBA812AEF46D13663FF99F5A0885A7F368794E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:7b:ab:39:02:07:c1:c1:63:16:28:db:41:
                    78:9a:0c:32:84:33:57:37:97:53:e7:27:89:40:28:
                    b9:d7:29:70:e3:9f:31:ec:a2:17:14:e2:87:ad:ba:
                    4c:cc:41:51:61:85:7f:1f:ef:7c:48:8a:ff:b7:06:
                    c4:06:51:cf:b5:10:e0:78:24:1f:4b:12:b0:ff:9e:
                    3d:be:d1:e0:27:58:3b:96:a9:45:ae:08:98:b4:05:
                    2f:3a:08:d4:78:86:ef:69:66:26:73:7e:df:d9:97:
                    2a:ce:d6:9d:87:8e:cb:e6:67:03:7f:6d:50:cd:ce:
                    66:7e:df:8c:cc:3d:8b:e5:ce:cc:22:b4:44:d8:27:
                    24:c9:f2:85:05:56:06:82:16:57:cc:06:79:41:69:
                    e0:83:a4:fd:62:61:35:1d:04:da:4d:aa:a2:f0:43:
                    11:75:cf:be:74:e4:60:4b:4e:4a:89:a2:e1:ee:eb:
                    c8:a9:4e:e7:12:0b:50:65:81:00:86:b1:6f:6e:29:
                    13:ae:a5:fd:73:73:e7:29:94:32:2b:5d:e1:ca:0f:
                    cf:07:c0:53:11:b2:42:fb:30:6c:9a:14:31:da:12:
                    bb:75:f4:2f:54:45:6d:52:7a:3d:8f:76:13:bf:7d:
                    78:6e:ec:1d:52:c0:74:16:f9:23:76:0d:90:00:50:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BA:81:2A:EF:46:D1:36:63:FF:99:F5:A0:88:5A:7F:36:87:94:E4
            X509v3 Authority Key Identifier:
                keyid:6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231362e302f32342d3234203d3e20323637313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:59:4b:8c:24:cd:cf:12:f4:4f:77:62:3c:10:3b:c3:08:26:
         e5:64:3d:93:02:60:3a:e6:87:82:5d:7e:6c:92:2a:9c:27:b4:
         f3:91:5e:75:f2:19:ec:90:19:fd:c7:a8:a3:88:c6:0d:17:88:
         60:ec:d6:a5:ba:f2:a1:3c:b5:da:3f:cb:97:5c:6d:94:ae:d5:
         ec:36:cc:97:2f:75:f5:5a:68:52:dc:48:88:c3:30:ac:f2:17:
         9e:e9:99:d2:c9:cd:af:8d:b5:3d:c0:a7:59:48:bc:4a:a6:88:
         5d:47:9a:54:94:49:cb:6b:6e:6b:44:c3:14:a0:f4:4d:59:54:
         06:4f:61:93:78:11:8e:a4:74:45:ec:a2:eb:4b:f1:87:e4:6c:
         50:91:a8:72:eb:be:f3:11:19:14:40:02:a0:fa:d3:33:59:e0:
         de:75:f7:47:60:0c:ad:79:a7:53:6f:e6:0d:c4:74:1a:40:66:
         27:f1:32:6d:a2:34:22:39:6f:a2:32:5b:91:bb:bc:ba:65:c5:
         11:1f:8d:f6:a4:69:1c:8a:48:4c:1e:7f:2f:15:bc:3b:0b:e7:
         ea:16:c6:27:a0:8f:01:26:3b:9a:98:69:1d:01:f1:2a:00:4e:
         38:fb:8c:a2:7a:77:47:3d:ef:73:28:29:32:0c:7f:78:63:a5:
         55:6e:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:06 2025 by rpki-client