This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/34352e3136322e35312e302f32342d3234203d3e20323638353239.roa
File:                     34352e3136322e35312e302f32342d3234203d3e20323638353239.roa (raw, json)
Hash identifier:          jUYXbsZvnQ/1DQQxFb2AS/5McEXR4349BvfmLJcfjvg=
Subject key identifier:   37:BD:25:97:77:4B:F1:D9:7B:8B:D9:80:DC:3B:D5:30:65:AB:C0:D1
Certificate issuer:       /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
Certificate serial:       07A5E01E0C57A2D7A79BD02943897D63FBA2880C
Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/34352e3136322e35312e302f32342d3234203d3e20323638353239.roa
Signing time:             Tue 06 Jan 2026 13:59:00 +0000
ROA not before:           Tue 06 Jan 2026 13:54:00 +0000
ROA not after:            Tue 05 Jan 2027 13:59:00 +0000
asID:                     268529
IP address blocks:        45.162.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl
                          rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a5:e0:1e:0c:57:a2:d7:a7:9b:d0:29:43:89:7d:63:fb:a2:88:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
        Validity
            Not Before: Jan  6 13:54:00 2026 GMT
            Not After : Jan  5 13:59:00 2027 GMT
        Subject: CN=37BD2597774BF1D97B8BD980DC3BD53065ABC0D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:5b:ee:9f:37:ae:79:24:e8:ed:87:cc:37:
                    4d:a5:6b:73:25:d1:d3:c8:b5:f7:11:3b:73:18:3c:
                    f8:fe:fc:3a:6f:c2:9a:05:5e:da:25:f7:1b:a0:04:
                    e1:88:35:4f:34:6c:1f:a7:4a:2c:d2:d3:3f:34:da:
                    cc:d2:2f:42:17:30:5f:e5:64:65:67:6a:d9:45:45:
                    90:dd:d2:b1:83:a6:6b:41:e6:03:db:86:7c:f6:c8:
                    7f:23:3b:d8:e1:5a:62:41:1f:db:c0:a2:07:2e:c5:
                    fa:b0:2a:63:09:f3:b8:2b:53:fe:35:eb:e6:da:8e:
                    49:d6:3c:ea:52:86:6c:f1:e6:39:3b:52:c0:d6:a4:
                    5b:99:db:43:7b:63:87:ce:83:e3:e0:4a:75:38:3e:
                    22:c5:22:c2:86:7f:e2:d8:e5:b3:1d:7f:ff:5f:d1:
                    47:da:d1:50:56:a0:02:9b:89:55:8b:12:48:df:ef:
                    03:82:d8:88:de:80:39:16:59:6f:47:72:ff:82:4a:
                    8b:cd:b8:0b:f8:08:10:f0:43:19:0e:ae:61:84:b7:
                    2a:72:7d:87:4b:14:c7:f3:c8:84:67:c5:ec:44:59:
                    9b:11:af:e3:f2:22:fb:69:f9:75:53:3f:19:a8:ac:
                    eb:36:49:20:28:ea:ed:9c:5a:ed:4f:ad:7f:fe:5f:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BD:25:97:77:4B:F1:D9:7B:8B:D9:80:DC:3B:D5:30:65:AB:C0:D1
            X509v3 Authority Key Identifier:
                keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/34352e3136322e35312e302f32342d3234203d3e20323638353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:48:ea:58:3b:2f:29:76:37:e4:3e:86:01:3a:47:85:97:79:
         be:b0:a9:fd:24:97:a0:0e:09:c0:8d:c6:6c:1c:23:05:09:e6:
         58:60:d7:d0:f5:76:ef:67:ff:75:41:f2:c6:c8:eb:63:1e:1f:
         76:af:df:63:7f:ad:a3:69:24:f0:e4:df:87:c1:fe:34:35:13:
         0e:14:3d:39:7d:b7:19:0d:08:cf:76:57:40:96:b2:13:29:d7:
         7d:7c:44:82:e7:69:51:b3:83:d0:0e:cb:3c:0b:db:96:45:0f:
         01:98:c9:db:e4:6a:42:fa:67:a0:77:33:3d:45:75:4e:06:07:
         80:07:4b:50:fe:2a:14:b0:0f:f8:90:fa:52:1f:93:80:34:84:
         f5:50:2e:60:79:f7:2c:b8:51:00:29:f8:61:5b:0e:72:46:03:
         5f:69:2c:36:69:fc:9f:6e:ad:f5:41:f7:ba:e0:c2:61:ce:ea:
         59:68:5c:0a:40:78:ca:84:b6:e7:3e:1c:63:74:08:22:5e:e0:
         fd:bf:a0:2e:74:27:50:90:6c:8c:61:aa:48:e2:9d:30:ea:b7:
         26:17:e7:a7:20:3a:a9:21:6b:96:f4:55:10:73:a2:59:57:eb:
         e5:1e:a3:30:c6:ce:87:a5:cf:79:da:e3:6c:ea:38:10:aa:31:
         2e:99:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:50:24 2026 by rpki-client