This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32322d3332203d3e20323637333339.roa
File:                     34352e3233332e3230382e302f32322d3332203d3e20323637333339.roa (raw, json)
Hash identifier:          NGTUFTXyORQkFs3vq+M06BUVFtpWRAhH6jCJrd+2aps=
Subject key identifier:   66:5D:4D:6F:79:07:D6:7F:EC:45:4A:9F:95:EA:2E:FD:B5:97:45:43
Certificate issuer:       /CN=2790865F71C22A29E6AAC376A6A33439446A37D3
Certificate serial:       23228A769D7D76833156CFC1436BF68983404067
Authority key identifier: 27:90:86:5F:71:C2:2A:29:E6:AA:C3:76:A6:A3:34:39:44:6A:37:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2790865F71C22A29E6AAC376A6A33439446A37D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32322d3332203d3e20323637333339.roa
Signing time:             Tue 13 Jan 2026 20:08:51 +0000
ROA not before:           Tue 13 Jan 2026 20:03:51 +0000
ROA not after:            Tue 12 Jan 2027 20:08:51 +0000
asID:                     267339
IP address blocks:        45.233.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/2790865F71C22A29E6AAC376A6A33439446A37D3.crl
                          rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/2790865F71C22A29E6AAC376A6A33439446A37D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2790865F71C22A29E6AAC376A6A33439446A37D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:22:8a:76:9d:7d:76:83:31:56:cf:c1:43:6b:f6:89:83:40:40:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2790865F71C22A29E6AAC376A6A33439446A37D3
        Validity
            Not Before: Jan 13 20:03:51 2026 GMT
            Not After : Jan 12 20:08:51 2027 GMT
        Subject: CN=665D4D6F7907D67FEC454A9F95EA2EFDB5974543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:97:a4:bd:7d:f4:7f:0a:f5:5f:21:b5:3b:
                    0a:e2:1a:5f:13:fa:c1:d3:bd:7f:3f:31:c1:09:49:
                    02:24:5f:7d:80:37:ad:b1:a5:96:91:0e:87:2b:73:
                    24:c4:8d:9f:0a:d3:07:06:81:83:3b:f6:31:22:ce:
                    87:91:b6:d9:4b:c9:dc:57:ec:81:f7:cb:4a:96:4d:
                    a5:03:38:92:42:71:82:1a:60:da:47:05:d6:07:81:
                    4b:2e:2f:76:c2:41:36:05:7d:94:0b:1e:55:8d:a2:
                    14:08:b8:c4:fb:44:15:85:99:b5:23:81:d8:9f:9d:
                    b6:0a:44:45:aa:48:00:bf:b6:c7:34:a1:e2:81:bf:
                    46:8b:a8:4c:0d:cf:e7:f1:b5:72:50:d3:95:d0:19:
                    de:ca:89:4f:dc:88:2e:80:5d:90:86:75:88:0b:76:
                    fd:8c:cb:a9:71:55:68:4b:e7:8f:59:40:bc:e9:06:
                    11:c6:87:b3:e2:c1:8a:33:65:be:d5:f9:ec:23:24:
                    7d:f5:55:4d:c6:51:fd:16:50:80:07:d1:16:9d:d2:
                    ed:bd:1a:43:ea:1a:a5:75:df:87:ce:82:5f:65:05:
                    40:7b:fb:a6:02:4c:ab:ec:76:2b:75:80:ba:3b:eb:
                    47:3b:0a:ca:d7:31:db:e3:ec:dd:86:68:5e:49:eb:
                    42:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5D:4D:6F:79:07:D6:7F:EC:45:4A:9F:95:EA:2E:FD:B5:97:45:43
            X509v3 Authority Key Identifier:
                keyid:27:90:86:5F:71:C2:2A:29:E6:AA:C3:76:A6:A3:34:39:44:6A:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/2790865F71C22A29E6AAC376A6A33439446A37D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2790865F71C22A29E6AAC376A6A33439446A37D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32322d3332203d3e20323637333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:19:e0:4d:6c:84:70:2c:6b:cf:bd:73:bc:cc:a8:4d:18:
         96:fe:21:29:71:c4:da:59:39:7e:ad:75:a0:c4:13:a1:53:f4:
         9d:53:99:3b:3b:65:76:97:37:d3:3e:d0:35:52:04:b0:95:2c:
         85:22:1b:4d:4b:01:36:72:ba:f0:cc:21:f0:76:db:f6:e4:b3:
         05:d8:a4:a0:21:62:0a:a2:dc:cd:4a:38:2a:e0:af:da:62:d7:
         cb:bc:14:f1:96:95:72:83:c0:20:22:8e:74:a4:9c:77:57:3e:
         2b:d3:4f:d1:10:1c:38:a9:08:69:c3:d1:d6:46:3d:43:0a:df:
         f1:be:e3:4e:22:41:20:eb:8c:30:70:15:60:6e:36:47:68:30:
         e2:66:4c:25:0d:cc:5a:4e:18:5e:05:20:c7:1a:95:7e:bf:25:
         f1:14:c8:3e:d7:2a:7f:26:14:f7:9c:6c:69:5a:cc:1a:f1:73:
         79:ca:43:a8:0c:95:27:35:d3:9f:fd:b1:d0:92:8f:19:d2:ab:
         a2:60:ce:00:9e:c4:c0:81:fa:c4:a7:2a:4f:3d:cb:d3:5f:cc:
         7b:80:b2:71:c5:e2:21:97:4b:e7:86:b2:1e:67:fa:a7:1e:81:
         d0:b0:95:fb:95:ea:ad:39:90:c5:03:db:f0:12:c3:0f:7c:c9:
         97:76:5d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:37 2026 by rpki-client