This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/34352e3136322e34392e302f32342d3234203d3e20323638353239.roa
File:                     34352e3136322e34392e302f32342d3234203d3e20323638353239.roa (raw, json)
Hash identifier:          0dwLyXzdEN7NjIUYnBYEdG6E3t8kZG2oUycGgZ7HFvc=
Subject key identifier:   5C:62:71:F0:75:9A:85:FE:B8:3F:A0:CB:E6:B7:85:A0:F8:B5:8A:B9
Certificate issuer:       /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
Certificate serial:       6E610BF928C6078A2A0A9551D01C5C77D82F1F1B
Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/34352e3136322e34392e302f32342d3234203d3e20323638353239.roa
Signing time:             Tue 06 Jan 2026 13:59:02 +0000
ROA not before:           Tue 06 Jan 2026 13:54:02 +0000
ROA not after:            Tue 05 Jan 2027 13:59:02 +0000
asID:                     268529
IP address blocks:        45.162.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl
                          rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:61:0b:f9:28:c6:07:8a:2a:0a:95:51:d0:1c:5c:77:d8:2f:1f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
        Validity
            Not Before: Jan  6 13:54:02 2026 GMT
            Not After : Jan  5 13:59:02 2027 GMT
        Subject: CN=5C6271F0759A85FEB83FA0CBE6B785A0F8B58AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:39:7c:95:76:b3:31:90:ff:2f:6d:02:5c:
                    79:8e:e5:98:69:59:85:47:b8:da:30:56:13:31:1b:
                    ad:b3:37:9d:ed:7f:00:20:e0:08:08:ac:51:95:3d:
                    2e:4d:fb:7e:17:e8:2c:e6:cd:d4:db:b7:8d:99:77:
                    64:e9:b0:79:02:29:68:02:8e:e9:6f:57:74:da:26:
                    c6:c7:9a:37:1d:86:ee:73:c4:03:04:4c:29:1b:7f:
                    c1:48:97:b5:0c:41:03:67:60:87:a7:21:6e:6b:bd:
                    17:4a:b0:5a:72:99:47:ef:e4:40:f6:b6:18:08:70:
                    c9:df:44:ee:b6:e2:b0:7e:6a:88:bf:11:52:63:b3:
                    28:44:bc:0f:79:e8:6c:01:c8:11:6a:15:31:56:0d:
                    ba:af:a9:61:9e:2c:4e:52:84:6c:91:f1:5c:8e:fd:
                    1c:fb:c0:f2:6d:3d:4c:c8:ef:e8:2d:b6:b2:43:3d:
                    fc:5d:b7:9b:55:ce:2b:e1:ce:4b:35:52:8c:1d:fa:
                    66:f2:9e:b4:52:c2:ba:fd:b3:c9:da:75:fb:1f:ad:
                    50:7a:d2:fd:db:a9:67:e9:f6:3f:4f:ed:fe:f7:cb:
                    de:fd:0f:a3:70:d6:9c:f0:3d:e6:fb:f7:94:16:27:
                    d4:b8:c0:f6:9a:b1:c3:f3:a5:29:69:a4:22:91:dd:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:62:71:F0:75:9A:85:FE:B8:3F:A0:CB:E6:B7:85:A0:F8:B5:8A:B9
            X509v3 Authority Key Identifier:
                keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/34352e3136322e34392e302f32342d3234203d3e20323638353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:c4:0f:8f:e7:6b:91:61:60:1f:bd:0a:cf:b8:2c:06:c5:7a:
         35:6d:2b:68:94:12:72:fb:c7:08:57:1a:59:dc:61:8f:d4:9a:
         51:1e:8f:3e:e1:47:63:eb:a0:3c:3a:2d:d6:07:c3:13:fe:31:
         80:9e:95:3a:c7:13:df:90:eb:0a:b4:7b:10:b4:fd:7d:69:c5:
         79:47:18:4d:3f:0e:52:91:e0:7f:65:ac:a9:3f:7c:d1:32:d7:
         30:1c:e6:c5:eb:58:7a:90:cd:57:29:ed:56:86:ce:f8:df:00:
         a4:f1:a4:76:18:08:9a:00:9c:e9:db:2d:b7:cc:43:37:e0:31:
         dc:44:ae:59:f7:fa:37:59:10:37:ce:1e:ba:e1:57:fd:15:75:
         a9:0c:d9:c6:cb:81:e6:5a:7a:b7:d9:3b:5b:a5:6b:0c:53:af:
         a8:08:06:61:11:ca:14:42:74:5d:47:31:12:be:3d:af:9f:4b:
         a5:62:1e:26:b8:6e:e4:e6:d5:3f:23:36:9f:65:ee:0f:41:20:
         e2:91:bd:e9:aa:ad:84:4d:4d:5d:ac:42:db:e7:98:28:e2:50:
         35:a2:26:7a:98:03:d1:78:2b:fa:49:58:b9:6a:74:38:43:7a:
         3b:3d:b5:7e:71:40:24:72:9c:10:41:9f:66:37:33:78:29:8a:
         8b:ac:e6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:32:41 2026 by rpki-client