This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3235312e302f32342d3234203d3e20323639363536.roa
File:                     34352e3139302e3235312e302f32342d3234203d3e20323639363536.roa (raw, json)
Hash identifier:          XtZa4kgGBJPLw5wKoiZ9KOjyGxfrNdOBD8eubY+ECek=
Subject key identifier:   34:1D:3D:55:CB:FF:9F:02:E7:F6:D4:C6:06:3B:A8:7D:D4:E8:C9:B1
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       771F90E48D307D8F152C1F005144150848B03956
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3235312e302f32342d3234203d3e20323639363536.roa
Signing time:             Thu 06 Nov 2025 18:18:39 +0000
ROA not before:           Thu 06 Nov 2025 18:13:39 +0000
ROA not after:            Thu 05 Nov 2026 18:18:39 +0000
asID:                     269656
IP address blocks:        45.190.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1f:90:e4:8d:30:7d:8f:15:2c:1f:00:51:44:15:08:48:b0:39:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Nov  6 18:13:39 2025 GMT
            Not After : Nov  5 18:18:39 2026 GMT
        Subject: CN=341D3D55CBFF9F02E7F6D4C6063BA87DD4E8C9B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:bc:a4:0b:ba:af:c5:34:c5:a3:76:b9:13:
                    2d:95:86:ab:18:d0:60:37:42:78:0e:73:e0:ea:cf:
                    25:23:13:1c:21:52:8e:0b:83:09:aa:8e:bb:16:cb:
                    99:6d:0b:69:a4:52:95:ea:b2:34:fa:28:0e:f2:c1:
                    6e:f2:6d:ab:6b:e9:fa:77:98:6a:01:36:1e:82:55:
                    0d:c2:5a:e7:0d:d7:9d:50:c6:03:52:ce:e3:c1:14:
                    16:25:1b:6c:10:7f:73:1c:99:67:e3:e4:3f:d6:5e:
                    f8:8e:5a:09:c1:bf:49:5a:af:29:be:ed:d9:9a:5e:
                    26:01:10:10:f6:4e:a5:09:47:9e:4d:eb:de:17:46:
                    64:39:44:8d:35:9b:f9:74:69:b3:92:fb:bb:03:64:
                    46:1d:08:07:22:a6:bc:62:a8:8b:f7:b1:46:b7:52:
                    bc:9d:37:8e:2b:02:76:48:ed:a3:ac:f5:5a:7f:10:
                    72:d1:c4:27:03:8a:cd:36:04:3e:ae:57:e1:64:80:
                    85:b7:a3:a3:fa:48:e3:8e:d5:0e:6e:34:4a:69:9c:
                    5a:29:7e:96:34:bf:22:03:53:08:5a:7c:bc:88:8a:
                    4f:f3:98:d7:01:be:50:b6:24:b8:f1:3b:56:7a:3c:
                    b5:98:02:40:5e:22:7d:b5:63:20:52:3e:4d:f0:0e:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1D:3D:55:CB:FF:9F:02:E7:F6:D4:C6:06:3B:A8:7D:D4:E8:C9:B1
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/34352e3139302e3235312e302f32342d3234203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:82:96:b0:d0:dd:8e:35:6d:0d:a6:77:05:b1:08:7c:ba:89:
         ba:d0:86:62:4d:63:2a:70:f6:56:68:6c:27:a2:e9:db:65:c5:
         d8:fe:b8:60:e8:6a:3e:bb:54:c0:54:bc:74:f2:0a:8f:1c:a6:
         c7:8c:d6:5c:de:39:26:7f:5c:5a:50:3d:26:49:08:62:41:b9:
         7f:a5:21:20:ca:62:47:90:f5:cb:3d:29:c4:17:08:42:94:de:
         e4:5e:4f:0e:74:de:00:e6:ad:f5:12:a5:d8:89:ec:9c:1b:8d:
         5e:a5:a5:82:48:4a:5b:aa:2c:d8:37:f9:3c:85:f9:c1:19:ad:
         25:11:28:d0:97:0d:f8:d8:a7:59:ab:6a:b5:55:8e:b6:9c:67:
         9c:e3:cc:b4:42:2b:34:47:49:cb:be:6d:56:0d:6a:08:62:52:
         d7:c4:7e:40:7c:11:ce:64:91:fc:92:48:40:c0:58:99:77:77:
         d7:d8:c0:7e:22:fe:34:3f:3c:a1:ad:83:e2:27:fe:9f:8c:63:
         6a:45:51:98:f1:d4:49:cf:3b:fa:94:ec:1b:41:d0:c2:55:9c:
         03:79:d4:c2:e0:34:36:5a:fe:45:af:9a:99:0e:19:bd:d5:d1:
         38:d5:3e:af:61:2d:e6:48:dd:24:61:9f:a7:d5:cf:4f:b9:fc:
         79:c0:96:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:37 2025 by rpki-client