This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/34352e3137302e3131342e302f32342d3234203d3e20323638313538.roa
File:                     34352e3137302e3131342e302f32342d3234203d3e20323638313538.roa (raw, json)
Hash identifier:          OSylaSKJAUMJ771kJjJPv/6kNYJNqpyD01nADBsE7Rk=
Subject key identifier:   6B:E7:19:EE:05:05:92:15:E3:F6:AF:86:70:04:0F:76:F1:A0:31:4D
Certificate issuer:       /CN=87FAD8F85A284E3B305BEB86544D2840BEA7FA2F
Certificate serial:       0DF185BE92AF1B6EBDD13021FF0BB19248B8EEAA
Authority key identifier: 87:FA:D8:F8:5A:28:4E:3B:30:5B:EB:86:54:4D:28:40:BE:A7:FA:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/34352e3137302e3131342e302f32342d3234203d3e20323638313538.roa
Signing time:             Fri 16 Jan 2026 17:05:43 +0000
ROA not before:           Fri 16 Jan 2026 17:00:43 +0000
ROA not after:            Fri 15 Jan 2027 17:05:43 +0000
asID:                     268158
IP address blocks:        45.170.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.crl
                          rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f1:85:be:92:af:1b:6e:bd:d1:30:21:ff:0b:b1:92:48:b8:ee:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87FAD8F85A284E3B305BEB86544D2840BEA7FA2F
        Validity
            Not Before: Jan 16 17:00:43 2026 GMT
            Not After : Jan 15 17:05:43 2027 GMT
        Subject: CN=6BE719EE05059215E3F6AF8670040F76F1A0314D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:ec:f3:d7:f4:e9:93:9a:dc:bb:21:a6:2d:
                    17:86:41:ae:fb:9e:9b:54:11:51:d7:b2:ea:d4:f5:
                    14:09:5e:e8:e6:83:b4:2b:da:f0:54:80:c3:60:fe:
                    6c:02:f1:5a:ec:d6:21:60:15:29:a8:c2:6d:36:50:
                    98:e0:14:d6:8a:1a:11:67:63:fc:e0:c5:21:17:1c:
                    b6:2b:b4:ff:c8:c4:d5:e3:1d:d9:63:a6:36:68:75:
                    ad:38:be:71:e5:9b:ec:51:5d:ef:29:7a:f0:83:fb:
                    5c:ad:24:5d:e7:25:7f:54:a2:d2:e5:ba:b6:4e:a8:
                    0f:55:74:90:85:80:91:74:50:e3:b2:44:a8:a2:77:
                    e1:9e:4e:75:b0:06:28:87:ef:ea:ff:15:47:74:91:
                    a2:4b:c0:88:86:13:bc:e1:ff:9d:75:0e:fd:70:fd:
                    ed:09:1a:1f:e1:1e:c0:ff:cc:92:6e:dd:3f:e7:2f:
                    8c:55:4f:11:6d:37:67:21:d6:b5:00:8f:30:c4:6c:
                    de:95:03:d5:f8:b4:e9:06:6d:83:aa:ed:49:e2:86:
                    b7:ad:52:02:67:15:92:3f:2a:0a:6e:14:06:56:fb:
                    51:cd:9a:7f:2a:de:d6:bd:77:f4:17:24:ef:9f:34:
                    f3:53:27:52:7a:4e:7f:5c:19:df:7d:0d:0c:1a:f4:
                    ee:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E7:19:EE:05:05:92:15:E3:F6:AF:86:70:04:0F:76:F1:A0:31:4D
            X509v3 Authority Key Identifier:
                keyid:87:FA:D8:F8:5A:28:4E:3B:30:5B:EB:86:54:4D:28:40:BE:A7:FA:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/34352e3137302e3131342e302f32342d3234203d3e20323638313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:8b:92:c4:91:43:f6:66:72:c6:0b:14:8e:82:fe:b2:4b:20:
         01:fa:23:07:41:dd:c1:a5:ac:0c:b5:fa:b3:46:b6:cd:f0:b9:
         68:d9:c4:9c:38:fb:d5:90:73:c2:e0:ba:5b:3d:99:8a:bb:d9:
         ca:5a:0e:06:b0:b8:e1:d6:c8:27:59:7d:26:db:d4:e1:b1:d8:
         8a:cf:bc:f6:37:62:5d:d0:6d:52:d4:19:ab:ea:12:d2:d3:cd:
         fe:0a:ef:ca:97:47:70:5f:91:da:24:16:2d:54:81:af:cb:8a:
         5c:37:21:2e:be:30:84:1d:51:65:b8:96:f2:9d:67:dd:f2:38:
         cd:35:09:48:c0:98:85:cb:9c:82:3d:9f:0a:50:c3:2e:c6:fe:
         fe:06:d9:05:6c:19:0a:de:92:b8:1b:90:14:8f:f8:d2:30:4c:
         d9:d3:dc:a1:20:d2:92:dc:1b:d7:22:ba:2b:84:ed:c2:e4:77:
         b7:91:14:fc:39:22:8d:4b:59:bb:ef:f6:e7:42:3c:c5:55:27:
         66:13:1f:d8:1a:4d:fe:a4:dc:b7:61:05:7c:0a:32:40:03:b2:
         39:99:30:d1:a4:d6:bd:bc:0d:c0:01:07:4d:ad:30:de:a9:8f:
         4d:47:2b:7f:cf:93:25:85:c7:f5:51:9a:88:11:2b:a1:56:b2:
         b4:e9:9f:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDfGFvpKvG2690TAh/wuxkki47qowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdGQUQ4Rjg1QTI4NEUzQjMwNUJFQjg2NTQ0RDI4NDBC
RUE3RkEyRjAeFw0yNjAxMTYxNzAwNDNaFw0yNzAxMTUxNzA1NDNaMDMxMTAvBgNV
BAMTKDZCRTcxOUVFMDUwNTkyMTVFM0Y2QUY4NjcwMDQwRjc2RjFBMDMxNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzOzz1/Tpk5rcuyGmLReGQa77
nptUEVHXsurU9RQJXujmg7Qr2vBUgMNg/mwC8Vrs1iFgFSmowm02UJjgFNaKGhFn
Y/zgxSEXHLYrtP/IxNXjHdljpjZoda04vnHlm+xRXe8pevCD+1ytJF3nJX9UotLl
urZOqA9VdJCFgJF0UOOyRKiid+GeTnWwBiiH7+r/FUd0kaJLwIiGE7zh/511Dv1w
/e0JGh/hHsD/zJJu3T/nL4xVTxFtN2ch1rUAjzDEbN6VA9X4tOkGbYOq7Unihret
UgJnFZI/KgpuFAZW+1HNmn8q3ta9d/QXJO+fNPNTJ1J6Tn9cGd99DQwa9O77AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa+cZ7gUFkhXj9q+GcAQPdvGgMU0wHwYDVR0j
BBgwFoAUh/rY+FooTjswW+uGVE0oQL6n+i8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FMYm9waEZ0Mnl5c1hvY1B0NVU1dHRHRXdHN25FR29vMXZWcUJCSHpv
RXIvMC84N0ZBRDhGODVBMjg0RTNCMzA1QkVCODY1NDREMjg0MEJFQTdGQTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3RkFEOEY4NUEyODRFM0Iz
MDVCRUI4NjU0NEQyODQwQkVBN0ZBMkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRTGJvcGhGdDJ5eXNYb2NQdDVVNXR0R0V3RzduRUdvbzF2VnFCQkh6b0VyLzAv
MzQzNTJlMzEzNzMwMmUzMTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqnIwDQYJKoZIhvcNAQELBQADggEBAJOLksSR
Q/ZmcsYLFI6C/rJLIAH6IwdB3cGlrAy1+rNGts3wuWjZxJw4+9WQc8Lguls9mYq7
2cpaDgawuOHWyCdZfSbb1OGx2IrPvPY3Yl3QbVLUGavqEtLTzf4K78qXR3Bfkdok
Fi1Uga/Lilw3IS6+MIQdUWW4lvKdZ93yOM01CUjAmIXLnII9nwpQwy7G/v4G2QVs
GQrekrgbkBSP+NIwTNnT3KEg0pLcG9ciuiuE7cLkd7eRFPw5Io1LWbvv9udCPMVV
J2YTH9gaTf6k3LdhBXwKMkADsjmZMNGk1r28DcABB02tMN6pj01HK3/PkyWFx/VR
mogRK6FWsrTpnwU=
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:01:09 2026 by rpki-client