This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231372e302f32342d3234203d3e20323637313139.roa
File:                     34352e3232382e3231372e302f32342d3234203d3e20323637313139.roa (raw, json)
Hash identifier:          POfiZ/dJVy/4LFE3DxjRG01hYoCJANyteJEpBPjnVCg=
Subject key identifier:   FE:E8:CD:F9:74:D9:1C:0B:30:35:0E:7C:61:36:70:85:F4:FB:63:B8
Certificate issuer:       /CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
Certificate serial:       4FE9DC1BB0E0ABC754564EEC6B1CBAC4BA22F72A
Authority key identifier: 6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231372e302f32342d3234203d3e20323637313139.roa
Signing time:             Thu 13 Nov 2025 18:40:39 +0000
ROA not before:           Thu 13 Nov 2025 18:35:39 +0000
ROA not after:            Thu 12 Nov 2026 18:40:39 +0000
asID:                     267119
IP address blocks:        45.228.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl
                          rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e9:dc:1b:b0:e0:ab:c7:54:56:4e:ec:6b:1c:ba:c4:ba:22:f7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
        Validity
            Not Before: Nov 13 18:35:39 2025 GMT
            Not After : Nov 12 18:40:39 2026 GMT
        Subject: CN=FEE8CDF974D91C0B30350E7C61367085F4FB63B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:3b:d9:ce:f6:21:e1:27:e2:8d:46:eb:04:
                    23:3c:ec:22:5b:85:df:a9:b2:f6:b6:b1:e8:dc:89:
                    76:b6:5d:8f:ee:ba:5b:03:e8:17:10:df:2a:12:8d:
                    55:99:c3:b4:8d:25:21:f6:5c:11:08:0d:77:eb:ab:
                    60:e3:2e:ed:57:cb:cd:17:ef:ed:ca:d7:c2:69:25:
                    60:b8:d6:62:74:0a:ec:df:88:4b:91:8a:8c:76:84:
                    aa:40:14:4b:48:6d:7a:96:16:dd:36:dd:05:3b:2c:
                    b9:25:64:68:bf:6c:48:40:7c:a8:35:78:a9:11:16:
                    b1:c9:0f:a4:f2:fb:50:6f:1d:77:35:96:78:d4:19:
                    e3:cd:f9:37:67:7c:82:12:87:56:74:67:70:1a:58:
                    73:a1:5d:a6:f6:20:a1:17:9b:2c:37:83:a2:aa:1f:
                    83:4d:7c:1f:c3:65:62:1c:03:04:fa:a4:db:8b:b6:
                    cb:a5:08:3c:eb:6c:aa:bc:e0:32:a3:b8:f0:62:d9:
                    f8:13:45:86:77:f2:fe:df:0b:a8:f9:a5:69:72:3a:
                    d6:e4:82:14:f9:b8:22:78:6a:92:0b:70:c1:a6:13:
                    7d:29:53:db:81:50:20:c0:c8:93:f5:83:4c:87:e8:
                    a2:6a:b6:ad:4b:c9:43:e4:de:8d:12:e3:57:9d:6c:
                    e0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E8:CD:F9:74:D9:1C:0B:30:35:0E:7C:61:36:70:85:F4:FB:63:B8
            X509v3 Authority Key Identifier:
                keyid:6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231372e302f32342d3234203d3e20323637313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:5b:ae:1d:6b:be:7b:12:96:8c:58:dc:27:e9:c2:4d:24:e5:
         d0:53:8e:38:7c:0e:93:fe:cf:7f:17:df:f4:04:f8:b2:e1:06:
         5e:cc:ae:62:7f:aa:a6:b6:96:94:81:5a:f8:4b:24:aa:5e:0a:
         b1:c6:32:2b:8b:6d:7f:11:70:e0:83:ea:ef:a0:f3:2c:e9:af:
         c4:db:34:d4:14:f3:f5:e2:aa:f5:c6:61:57:8c:db:eb:91:49:
         cd:44:ef:78:97:65:70:a7:4e:77:c2:40:7c:5a:a7:0b:70:c5:
         d4:34:e3:66:2e:c7:3e:37:94:b6:03:91:05:65:42:53:d0:22:
         5d:22:6a:f6:a5:b2:af:59:5a:e6:98:34:d4:65:fe:6a:8a:a8:
         66:b9:7b:73:ea:46:0c:f2:98:82:a8:47:91:fc:bf:f7:18:cc:
         95:7c:92:9e:67:b5:f2:49:36:04:29:58:f8:43:fd:db:1f:96:
         bc:a1:79:b1:06:7a:b5:65:d8:d9:e6:8d:6d:d3:c7:10:8a:c9:
         55:44:91:9a:3b:67:0b:40:db:ba:9a:61:8b:8e:7f:b8:b1:0e:
         d7:41:e8:47:1b:cf:b9:3c:01:f5:59:8c:a0:c4:88:7e:48:64:
         ba:4a:f3:f3:43:97:3a:53:7f:a7:a8:13:44:9b:f5:8a:43:fc:
         bc:bd:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:43 2025 by rpki-client