This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32332d3233203d3e20323636303336.roa
File:                     34352e342e32382e302f32332d3233203d3e20323636303336.roa (raw, json)
Hash identifier:          yejs1RzYU7luWgqn2Gdeq9QpH8iURkMNUp7MF1RMwak=
Subject key identifier:   3C:ED:B7:D2:E4:D7:2E:40:81:7A:D3:B9:9F:DB:65:A8:09:39:02:07
Certificate issuer:       /CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
Certificate serial:       6050CE33E863B9C96AB7E0000578C8661BBE1D16
Authority key identifier: 53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32332d3233203d3e20323636303336.roa
Signing time:             Mon 05 Jan 2026 21:13:50 +0000
ROA not before:           Mon 05 Jan 2026 21:08:50 +0000
ROA not after:            Mon 04 Jan 2027 21:13:50 +0000
asID:                     266036
IP address blocks:        45.4.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl
                          rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:50:ce:33:e8:63:b9:c9:6a:b7:e0:00:05:78:c8:66:1b:be:1d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
        Validity
            Not Before: Jan  5 21:08:50 2026 GMT
            Not After : Jan  4 21:13:50 2027 GMT
        Subject: CN=3CEDB7D2E4D72E40817AD3B99FDB65A809390207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:35:75:12:94:44:27:89:1c:8b:7b:7b:7f:
                    35:d1:46:53:38:61:46:fa:1b:e4:f8:1d:49:22:1f:
                    83:95:e2:7a:16:3c:ec:79:b6:92:22:5a:ab:fb:1c:
                    29:57:2e:0c:73:7b:69:a2:ca:54:4c:ef:2e:89:9f:
                    ce:89:ac:ed:01:9d:5d:64:38:06:13:06:3d:2c:69:
                    79:aa:48:f0:aa:59:b5:7c:39:28:e5:c1:4c:fe:46:
                    a2:bf:4f:cb:2f:1b:ee:da:78:db:fd:d2:bf:df:27:
                    e6:ea:71:e7:7b:43:d1:ed:55:03:24:4b:67:4d:15:
                    db:27:c4:fb:c3:b2:f4:3f:58:f6:4f:cd:b5:08:73:
                    c7:d2:eb:3c:f4:9b:64:72:4b:ec:02:eb:a7:d4:39:
                    f8:0a:a1:50:7c:38:30:e0:77:9d:67:5e:04:24:84:
                    0b:1f:6b:dd:10:0a:87:c9:8f:3d:a0:d0:70:6a:fb:
                    f1:15:d4:1f:bf:72:9e:69:00:e0:55:63:6c:cd:7d:
                    54:5a:a8:5d:87:fb:00:20:64:da:e2:c3:bf:40:46:
                    62:0c:4d:77:44:f3:ae:66:83:07:7d:e6:3f:c4:30:
                    d6:7c:73:aa:9d:b8:59:d5:43:4b:f3:63:c1:c4:9e:
                    31:b3:fa:79:bf:02:00:49:07:a1:cb:2c:c8:23:77:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:ED:B7:D2:E4:D7:2E:40:81:7A:D3:B9:9F:DB:65:A8:09:39:02:07
            X509v3 Authority Key Identifier:
                keyid:53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32332d3233203d3e20323636303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:3c:09:ea:52:a0:a8:73:d5:37:70:19:5c:3b:2c:49:18:c4:
         17:17:38:05:a5:0b:3a:d7:7c:84:b6:5c:42:41:fe:a9:b2:76:
         dc:7b:1a:e1:69:a6:b5:35:c4:08:e6:a0:d8:49:8d:82:88:40:
         f1:ad:90:51:69:ae:d7:de:cc:d7:46:6b:78:be:c3:1b:74:e7:
         b6:9e:45:fb:af:43:ca:80:5e:3a:29:a9:f3:cd:2b:e4:4e:86:
         8c:f2:bc:7c:77:e7:22:0b:f1:59:cc:f2:34:2a:37:37:0b:91:
         c3:44:72:d8:8c:30:2d:51:ca:f9:16:41:71:a8:70:35:43:b9:
         d4:99:42:20:13:c5:a9:fc:d9:85:94:52:ad:d2:a8:2a:b5:c7:
         ef:be:89:80:7b:1c:13:50:fe:ad:f3:f2:c8:1d:b6:a7:98:bd:
         f2:f8:0e:b9:15:a1:19:d6:cb:64:31:cb:cd:7b:dd:a6:6b:f5:
         78:ef:50:3b:4a:48:c2:30:34:05:78:ee:a1:a9:3e:e6:4a:79:
         e0:91:30:1f:e1:3c:0f:ff:79:ca:41:0e:34:04:2f:43:97:fb:
         7b:0e:67:a4:fc:60:be:52:cb:c8:f6:92:55:67:77:58:65:fd:
         43:e2:27:ac:14:dd:05:02:f2:7f:e8:82:b1:23:2e:85:6b:20:
         da:91:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:46 2026 by rpki-client