This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231382e302f32342d3234203d3e20323637313139.roa
File:                     34352e3232382e3231382e302f32342d3234203d3e20323637313139.roa (raw, json)
Hash identifier:          lxTBPBNBv9rCsTF2vOsA8rDkH5UxY1ddCOFgBZ8X0bg=
Subject key identifier:   33:5C:30:4E:99:54:0B:D7:31:DE:C4:EB:4B:17:82:1B:E4:90:F8:A8
Certificate issuer:       /CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
Certificate serial:       33E6A3C61E22D04D1E01ECCA31468BD69FAD83E5
Authority key identifier: 6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231382e302f32342d3234203d3e20323637313139.roa
Signing time:             Thu 13 Nov 2025 18:40:42 +0000
ROA not before:           Thu 13 Nov 2025 18:35:42 +0000
ROA not after:            Thu 12 Nov 2026 18:40:42 +0000
asID:                     267119
IP address blocks:        45.228.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl
                          rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e6:a3:c6:1e:22:d0:4d:1e:01:ec:ca:31:46:8b:d6:9f:ad:83:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
        Validity
            Not Before: Nov 13 18:35:42 2025 GMT
            Not After : Nov 12 18:40:42 2026 GMT
        Subject: CN=335C304E99540BD731DEC4EB4B17821BE490F8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:cf:22:f8:48:42:11:90:d4:d0:e0:2d:b8:
                    d2:84:2b:86:b3:56:79:e0:4b:ef:34:a6:e6:48:8c:
                    ff:37:fb:2e:6a:7d:60:64:ab:49:7d:82:a1:4e:ff:
                    85:96:d9:ff:42:bf:6c:7d:ae:81:52:5b:a3:c1:3f:
                    6e:a4:89:ae:0d:43:ff:59:0f:c5:2a:e9:11:0b:17:
                    1d:f6:e0:58:f6:19:97:7f:ab:d8:aa:1b:08:2d:f3:
                    9a:12:1a:69:29:b3:42:b2:eb:09:6c:cf:c0:47:3f:
                    fe:30:45:19:1c:4b:95:81:8d:88:99:f5:81:41:e9:
                    25:84:48:93:1d:d7:fa:99:84:ba:65:cf:ad:b4:65:
                    3f:c7:e5:4a:54:91:60:3a:df:d0:e1:af:20:01:50:
                    2a:c5:b0:72:f8:a5:0d:3c:a5:8e:16:7c:a5:e0:4e:
                    67:92:10:0e:9f:a3:0d:5e:8b:13:1c:1e:47:da:ce:
                    a3:85:e0:0d:18:6e:c1:42:1d:39:d4:a4:c4:7c:bc:
                    ab:1e:c4:ad:4a:b9:eb:db:b2:cb:13:ad:71:9f:58:
                    ea:7c:34:72:f8:56:d1:14:1e:e5:c0:ed:94:9a:5d:
                    3a:4b:09:70:94:93:28:37:35:29:b3:35:93:59:66:
                    48:13:06:bd:4a:d3:60:f1:f4:30:7d:d6:f1:b2:c0:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5C:30:4E:99:54:0B:D7:31:DE:C4:EB:4B:17:82:1B:E4:90:F8:A8
            X509v3 Authority Key Identifier:
                keyid:6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231382e302f32342d3234203d3e20323637313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:11:f8:4f:32:a5:ec:fd:34:c6:f3:3c:fb:95:87:d6:0c:a8:
         f9:14:54:9c:3b:49:17:81:09:1d:9c:39:25:c8:8f:78:83:ec:
         27:14:0a:1e:cc:4a:45:7b:4c:08:44:a4:79:31:05:4f:ca:73:
         75:a7:bf:19:a1:2a:e2:15:03:e7:35:5a:0c:65:7d:1d:a4:0d:
         c1:07:fd:3e:55:45:5d:2e:98:bf:90:4e:fe:7f:d5:9c:84:90:
         48:ab:b3:4c:40:c1:56:ba:ef:f6:16:6a:67:8a:e2:f0:c7:e8:
         bb:81:55:1f:5b:90:07:c4:a9:9b:fe:14:e5:f9:c6:0b:01:af:
         b2:f3:6f:13:0b:7a:f2:c3:b3:17:08:17:41:e1:6d:92:20:68:
         9c:0e:e4:a1:2f:bb:a6:57:30:7f:12:9b:a1:6b:dc:a0:af:00:
         b4:71:20:a0:3c:38:bf:12:f3:0b:c0:d8:86:a3:91:1d:8f:cd:
         b2:1b:d2:3e:4f:f9:17:00:34:17:2b:61:94:c7:b6:3a:a9:52:
         81:fe:ec:cb:22:bd:03:e5:01:7f:d5:d6:9d:77:a4:ed:b9:b5:
         b7:3f:17:96:f0:ec:c3:44:5e:0c:7c:24:cb:17:b6:67:29:9f:
         51:1a:61:bd:40:2f:ec:db:e0:ce:6b:22:c3:8e:cf:98:7d:60:
         15:4c:b9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:12 2025 by rpki-client