This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33302e302f32332d3233203d3e20323636303336.roa
File:                     34352e342e33302e302f32332d3233203d3e20323636303336.roa (raw, json)
Hash identifier:          a6JQCbb4ZrxXL1G7lnb+Mg1GTozru6qELh8bF62VqcU=
Subject key identifier:   4A:2A:5F:8B:18:00:78:6B:DA:85:3D:28:F9:C3:01:A5:FA:7D:FC:D2
Certificate issuer:       /CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
Certificate serial:       23E7279482BBD01AB72FBC84641A05692862EE1B
Authority key identifier: 53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33302e302f32332d3233203d3e20323636303336.roa
Signing time:             Mon 05 Jan 2026 21:13:51 +0000
ROA not before:           Mon 05 Jan 2026 21:08:51 +0000
ROA not after:            Mon 04 Jan 2027 21:13:51 +0000
asID:                     266036
IP address blocks:        45.4.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl
                          rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e7:27:94:82:bb:d0:1a:b7:2f:bc:84:64:1a:05:69:28:62:ee:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
        Validity
            Not Before: Jan  5 21:08:51 2026 GMT
            Not After : Jan  4 21:13:51 2027 GMT
        Subject: CN=4A2A5F8B1800786BDA853D28F9C301A5FA7DFCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:19:b8:29:86:f3:43:0c:c2:df:c8:3f:24:fa:
                    f0:a8:cc:80:54:db:3b:30:85:6f:27:bb:d5:cf:e0:
                    8a:3f:5b:6d:09:48:05:36:2a:28:fe:f2:46:eb:32:
                    a9:b2:01:1f:8a:6e:27:d0:5f:08:85:3b:28:14:27:
                    30:3e:44:65:0a:3b:91:ea:82:e1:45:40:d1:6a:aa:
                    c4:f1:c1:3e:7f:4b:15:76:d0:64:ff:4f:36:1a:4c:
                    33:2c:96:41:14:83:b4:31:91:bf:6b:08:b9:d3:59:
                    35:21:af:96:cc:ef:37:60:47:27:b5:32:b6:48:1e:
                    73:85:e6:3c:94:1f:f7:8a:90:32:bb:7d:4c:c0:07:
                    b4:fd:15:45:ea:af:1f:47:18:cb:5f:60:f5:a4:8e:
                    69:08:c0:72:bd:d7:ab:7e:6e:79:61:05:73:22:d8:
                    04:93:ed:83:bf:9e:29:f6:f2:a4:0c:ee:f8:ec:3a:
                    24:b7:d1:70:c2:91:30:79:fb:63:88:29:1d:08:c9:
                    db:d7:43:da:13:1b:16:6d:7e:00:4b:6a:e0:cb:27:
                    c8:a4:9d:5c:69:e4:ce:a8:ea:93:b4:05:f8:c3:ac:
                    fd:5f:9f:c5:2c:33:05:c7:dc:9a:32:b2:55:b8:1b:
                    22:b8:0a:6d:19:24:27:2a:2b:a3:d4:9a:ee:4a:2a:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2A:5F:8B:18:00:78:6B:DA:85:3D:28:F9:C3:01:A5:FA:7D:FC:D2
            X509v3 Authority Key Identifier:
                keyid:53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33302e302f32332d3233203d3e20323636303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:28:a2:dc:94:6b:05:ab:2c:cf:ce:22:d2:28:41:15:5b:04:
         ed:b4:04:d1:15:40:fb:7e:bb:9f:a1:31:db:e9:78:00:fd:7e:
         aa:59:63:5a:8d:6c:78:1c:3d:95:f7:c4:83:2e:ac:8b:6f:c9:
         ef:7e:d3:ca:8b:53:9e:41:8a:7b:59:8a:ab:55:c6:0f:ae:f0:
         2f:ea:0e:b6:e2:a3:8f:b3:ae:8a:73:a5:02:cf:97:cc:27:04:
         c3:3a:67:78:53:0b:12:3f:6c:da:1a:80:95:50:4b:b3:fd:ec:
         60:10:3d:f7:00:00:4f:76:42:b6:2a:30:85:92:eb:61:ab:9e:
         8d:b2:f1:50:e6:a3:18:53:ab:30:2a:07:3b:7a:26:8b:51:02:
         2a:65:79:2f:b5:0f:83:94:5b:61:47:2e:77:56:b2:87:67:1d:
         56:ab:18:40:77:40:04:a9:53:b6:fd:2f:51:f5:1c:9a:b1:43:
         0a:f5:d9:84:d6:a8:cd:35:8e:cb:01:57:96:c7:b4:7b:8f:35:
         6a:c6:a3:1e:aa:f0:0a:ac:b0:79:b3:54:df:9e:de:12:e6:2f:
         95:f1:ea:00:9b:3c:4a:2a:ca:e2:88:1a:c3:af:57:12:9c:01:
         ab:f9:ae:12:28:60:97:b9:9f:4b:51:d8:ee:9e:d0:3f:cc:99:
         35:1f:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:48 2026 by rpki-client