This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/34352e3137322e35322e302f32322d3332203d3e20323638373530.roa
File:                     34352e3137322e35322e302f32322d3332203d3e20323638373530.roa (raw, json)
Hash identifier:          Wix10rxGIkTu/LPTgBBL6WSpuNZdDLXoL/dYCx/USUY=
Subject key identifier:   96:56:95:C2:9D:2C:BB:BC:A0:E3:33:EC:44:6E:7A:83:19:2B:50:2D
Certificate issuer:       /CN=750793881DE2335EBEBDD183BA537E3DA151707C
Certificate serial:       7BB06DF73A6AC7C0E7861016EDA6CF08C10D53CD
Authority key identifier: 75:07:93:88:1D:E2:33:5E:BE:BD:D1:83:BA:53:7E:3D:A1:51:70:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/750793881DE2335EBEBDD183BA537E3DA151707C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/34352e3137322e35322e302f32322d3332203d3e20323638373530.roa
Signing time:             Tue 23 Dec 2025 13:20:14 +0000
ROA not before:           Tue 23 Dec 2025 13:15:14 +0000
ROA not after:            Tue 22 Dec 2026 13:20:14 +0000
asID:                     268750
IP address blocks:        45.172.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/750793881DE2335EBEBDD183BA537E3DA151707C.crl
                          rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/750793881DE2335EBEBDD183BA537E3DA151707C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/750793881DE2335EBEBDD183BA537E3DA151707C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b0:6d:f7:3a:6a:c7:c0:e7:86:10:16:ed:a6:cf:08:c1:0d:53:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750793881DE2335EBEBDD183BA537E3DA151707C
        Validity
            Not Before: Dec 23 13:15:14 2025 GMT
            Not After : Dec 22 13:20:14 2026 GMT
        Subject: CN=965695C29D2CBBBCA0E333EC446E7A83192B502D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:8c:3b:c3:d9:0d:08:73:f0:1d:13:d8:87:
                    79:61:76:77:1d:89:88:45:82:69:78:51:75:3b:63:
                    d2:69:cb:dd:79:0b:35:97:aa:48:3f:32:a0:0b:25:
                    38:fc:96:7d:c9:ea:b1:7c:c6:9f:5b:56:f5:67:bf:
                    31:d9:31:16:5f:b7:74:8c:26:87:36:c4:26:91:cb:
                    4a:d5:13:6a:77:71:61:ba:86:89:fe:e0:46:3e:f5:
                    fc:47:6d:37:37:d4:1a:e5:51:1b:97:a1:2b:93:54:
                    90:29:01:62:85:38:56:cb:96:6d:73:02:b0:f4:e2:
                    7e:76:e6:72:11:57:77:b5:4a:ef:9e:95:0d:22:8f:
                    ce:d3:34:aa:a9:29:53:07:c3:3f:9f:65:0e:fd:cc:
                    57:74:24:d0:7e:7a:f6:6c:fb:e4:9f:a7:ee:a4:51:
                    b3:85:94:f0:93:5e:18:85:e9:14:76:08:d4:ea:88:
                    e8:ad:74:6c:98:f4:b3:8b:cc:b0:3f:5c:32:55:e8:
                    fb:6a:2f:eb:66:9a:63:c7:0b:12:c7:88:fe:09:d0:
                    ed:49:65:cd:4f:36:ca:91:cb:2a:4c:4a:97:7e:46:
                    72:78:2e:70:fa:b3:76:46:90:37:fd:8d:d2:a9:eb:
                    db:5b:43:6b:fd:36:04:3e:30:b8:d9:3a:81:42:74:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:56:95:C2:9D:2C:BB:BC:A0:E3:33:EC:44:6E:7A:83:19:2B:50:2D
            X509v3 Authority Key Identifier:
                keyid:75:07:93:88:1D:E2:33:5E:BE:BD:D1:83:BA:53:7E:3D:A1:51:70:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/750793881DE2335EBEBDD183BA537E3DA151707C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/750793881DE2335EBEBDD183BA537E3DA151707C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/34352e3137322e35322e302f32322d3332203d3e20323638373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:06:05:4f:8d:d2:23:88:5c:13:9d:4b:5b:f2:ec:ed:f0:99:
         b0:dd:49:85:24:62:a5:8c:c8:84:6a:05:d8:60:87:b2:93:0d:
         09:15:73:60:3f:6e:d7:20:5f:6d:e8:b3:48:74:d6:de:1d:c6:
         3a:9e:b9:4a:05:b5:3f:8f:0f:71:79:3b:86:15:6a:a5:13:08:
         2c:0c:50:38:75:14:1a:4e:07:ef:5a:94:bf:38:62:8e:9e:c2:
         91:c2:a9:dc:41:5f:4d:93:7b:be:a5:a3:c5:8b:c9:3c:a5:a8:
         d5:25:e6:e4:91:57:c7:c6:43:6d:05:d3:4f:d4:80:84:8f:cf:
         58:86:78:55:7c:04:55:30:33:8f:c3:ca:3e:b5:99:31:c9:e9:
         85:56:3a:b2:76:27:7c:ec:af:bd:b9:31:d6:eb:4b:58:a7:ca:
         3c:f1:87:f2:df:91:a4:54:45:9c:1a:ba:54:9d:74:95:9d:36:
         eb:ce:ce:ec:47:ed:a2:db:8f:e8:b3:0b:a3:39:3a:53:c1:e1:
         97:6c:ba:40:90:c8:f6:d3:60:47:67:42:96:80:97:67:ac:bd:
         51:75:c1:36:a3:0f:07:a3:97:71:f0:f0:ab:09:81:59:b1:02:
         bb:a6:98:e4:68:7f:de:77:25:e2:32:ac:7d:27:a8:09:14:f5:
         37:5f:7a:40
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe7Bt9zpqx8DnhhAW7abPCMENU80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzUwNzkzODgxREUyMzM1RUJFQkREMTgzQkE1MzdFM0RB
MTUxNzA3QzAeFw0yNTEyMjMxMzE1MTRaFw0yNjEyMjIxMzIwMTRaMDMxMTAvBgNV
BAMTKDk2NTY5NUMyOUQyQ0JCQkNBMEUzMzNFQzQ0NkU3QTgzMTkyQjUwMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFow7w9kNCHPwHRPYh3lhdncd
iYhFgml4UXU7Y9Jpy915CzWXqkg/MqALJTj8ln3J6rF8xp9bVvVnvzHZMRZft3SM
Joc2xCaRy0rVE2p3cWG6hon+4EY+9fxHbTc31BrlURuXoSuTVJApAWKFOFbLlm1z
ArD04n525nIRV3e1Su+elQ0ij87TNKqpKVMHwz+fZQ79zFd0JNB+evZs++Sfp+6k
UbOFlPCTXhiF6RR2CNTqiOitdGyY9LOLzLA/XDJV6PtqL+tmmmPHCxLHiP4J0O1J
Zc1PNsqRyypMSpd+RnJ4LnD6s3ZGkDf9jdKp69tbQ2v9NgQ+MLjZOoFCdK9lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUllaVwp0su7yg4zPsRG56gxkrUC0wHwYDVR0j
BBgwFoAUdQeTiB3iM16+vdGDulN+PaFRcHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdpRGYybW51Rlk2b1Y0YWpLYk12eG5HTHg1MjZNS3Fic2J4UW1qYVlU
WnYvMC83NTA3OTM4ODFERTIzMzVFQkVCREQxODNCQTUzN0UzREExNTE3MDdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1MDc5Mzg4MURFMjMzNUVC
RUJERDE4M0JBNTM3RTNEQTE1MTcwN0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3aURmMm1udUZZNm9WNGFqS2JNdnhuR0x4NTI2TUtxYnNieFFtamFZVFp2LzAv
MzQzNTJlMzEzNzMyMmUzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzczNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaw0MA0GCSqGSIb3DQEBCwUAA4IBAQDTBgVPjdIj
iFwTnUtb8uzt8Jmw3UmFJGKljMiEagXYYIeykw0JFXNgP27XIF9t6LNIdNbeHcY6
nrlKBbU/jw9xeTuGFWqlEwgsDFA4dRQaTgfvWpS/OGKOnsKRwqncQV9Nk3u+paPF
i8k8pajVJebkkVfHxkNtBdNP1ICEj89YhnhVfARVMDOPw8o+tZkxyemFVjqydid8
7K+9uTHW60tYp8o88Yfy35GkVEWcGrpUnXSVnTbrzs7sR+2i24/oswujOTpTweGX
bLpAkMj202BHZ0KWgJdnrL1RdcE2ow8Ho5dx8PCrCYFZsQK7ppjkaH/edyXiMqx9
J6gJFPU3X3pA
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:29 2026 by rpki-client