This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/34352e3137312e3130342e302f32322d3332203d3e20323638373530.roa
File:                     34352e3137312e3130342e302f32322d3332203d3e20323638373530.roa (raw, json)
Hash identifier:          5QfVF4E38J4oSW5M5+rlGAkZPY5P7cnmBAsBrpaGKgI=
Subject key identifier:   7B:38:01:1C:15:6D:C9:6F:69:20:01:45:01:D3:32:80:B0:79:3F:FB
Certificate issuer:       /CN=750793881DE2335EBEBDD183BA537E3DA151707C
Certificate serial:       4DEC6E276540460A86D49D0CAC3DDBBF4082E091
Authority key identifier: 75:07:93:88:1D:E2:33:5E:BE:BD:D1:83:BA:53:7E:3D:A1:51:70:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/750793881DE2335EBEBDD183BA537E3DA151707C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/34352e3137312e3130342e302f32322d3332203d3e20323638373530.roa
Signing time:             Tue 23 Dec 2025 13:19:45 +0000
ROA not before:           Tue 23 Dec 2025 13:14:45 +0000
ROA not after:            Tue 22 Dec 2026 13:19:45 +0000
asID:                     268750
IP address blocks:        45.171.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/750793881DE2335EBEBDD183BA537E3DA151707C.crl
                          rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/750793881DE2335EBEBDD183BA537E3DA151707C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/750793881DE2335EBEBDD183BA537E3DA151707C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ec:6e:27:65:40:46:0a:86:d4:9d:0c:ac:3d:db:bf:40:82:e0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750793881DE2335EBEBDD183BA537E3DA151707C
        Validity
            Not Before: Dec 23 13:14:45 2025 GMT
            Not After : Dec 22 13:19:45 2026 GMT
        Subject: CN=7B38011C156DC96F6920014501D33280B0793FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:21:21:96:78:20:1c:20:41:d1:72:b9:a2:
                    f3:99:52:51:83:a7:8c:f6:57:2d:59:d7:93:db:82:
                    83:a1:10:1a:4a:13:86:aa:7e:fc:e4:69:bc:e7:63:
                    d7:46:7c:3b:f0:23:21:3c:55:31:20:10:37:e3:77:
                    94:fc:f1:2e:22:8e:18:db:2f:df:f1:fc:2d:65:35:
                    c0:92:bb:e4:ea:7b:7b:01:f4:50:b5:ab:e0:9e:8d:
                    b4:73:4c:ba:08:46:8c:14:27:b2:b9:7d:5e:08:3c:
                    bb:8a:10:c5:db:58:55:69:28:05:96:a1:c8:7e:3f:
                    ad:a9:fc:9c:e1:53:c8:9e:2f:bb:21:a0:02:1d:fc:
                    32:ef:71:a7:cd:df:56:25:6e:af:31:29:fb:e3:f0:
                    55:88:94:a1:84:dd:1b:b8:cc:f8:4e:a6:d9:20:bf:
                    c2:20:84:47:a3:ca:84:d1:c0:05:2c:9c:c7:d3:ae:
                    71:9f:32:0c:6b:6e:98:6c:6f:00:c1:ba:8a:a2:6d:
                    dd:6e:b9:e5:26:6d:a9:93:fb:c3:7e:a5:c5:19:75:
                    44:56:2b:75:f6:df:d4:1c:9e:8c:f6:52:b4:a2:c0:
                    50:84:0e:7c:a3:6c:2a:48:43:0d:14:09:0a:df:c9:
                    66:3d:c8:20:fe:a9:01:02:d2:2b:f7:73:50:c3:2f:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:38:01:1C:15:6D:C9:6F:69:20:01:45:01:D3:32:80:B0:79:3F:FB
            X509v3 Authority Key Identifier:
                keyid:75:07:93:88:1D:E2:33:5E:BE:BD:D1:83:BA:53:7E:3D:A1:51:70:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/750793881DE2335EBEBDD183BA537E3DA151707C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/750793881DE2335EBEBDD183BA537E3DA151707C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/34352e3137312e3130342e302f32322d3332203d3e20323638373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:9a:3f:b4:0e:2d:1d:e5:8c:5b:26:54:f3:dd:46:b8:8e:98:
         7b:36:e9:64:78:f4:02:78:44:d4:32:46:bc:8c:37:fc:46:62:
         f6:98:43:54:19:3e:23:a7:cf:fa:ae:fd:41:73:f1:16:3c:26:
         a4:3a:08:dc:36:83:25:2b:3a:85:5e:ed:52:12:0f:90:03:0f:
         d5:d4:85:be:82:6f:fd:7b:1a:0c:72:d8:3b:b0:db:d1:24:44:
         c7:3e:36:71:d0:4b:05:15:f7:93:0f:62:b2:03:1f:63:44:c5:
         a6:dd:67:9a:5b:3e:59:41:ad:18:9b:e5:ac:01:0d:8f:65:d1:
         62:d7:b7:0f:d6:d0:6f:6f:5b:2f:89:d8:69:d1:71:20:b0:ba:
         af:a8:a3:ae:25:f8:e9:d5:a2:af:7c:f4:94:db:cb:22:b9:28:
         54:72:5d:93:93:eb:3f:78:84:d0:e3:0f:e0:de:4e:05:b6:26:
         e2:d3:75:e5:28:ba:b2:09:7f:94:56:a4:cb:62:fd:9e:b1:52:
         c3:ad:59:46:85:6c:3e:18:d6:b0:c6:21:ec:c0:4d:90:c8:9d:
         18:a3:da:c1:9e:2b:1d:38:2d:4f:d3:81:89:f4:7a:f5:98:33:
         e7:3f:94:a2:e9:97:35:5c:62:08:42:a5:1a:49:15:82:81:2a:
         81:a2:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:31 2026 by rpki-client