This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/34352e3138362e3231322e302f32322d3332203d3e20323639343336.roa
File:                     34352e3138362e3231322e302f32322d3332203d3e20323639343336.roa (raw, json)
Hash identifier:          E643jPaeYUPDK3RU+Ce2AOkHId8EHnEh4Ip6QlquBzY=
Subject key identifier:   70:90:C9:AD:BF:EC:58:DF:30:03:64:45:B2:92:69:F2:07:40:69:5A
Certificate issuer:       /CN=30FD06C8AB4B34C6A130B3FC8C20C891FE576788
Certificate serial:       06A0126BD85E8235CD8CF13D93B69CDCE4FA234A
Authority key identifier: 30:FD:06:C8:AB:4B:34:C6:A1:30:B3:FC:8C:20:C8:91:FE:57:67:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FD06C8AB4B34C6A130B3FC8C20C891FE576788.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/34352e3138362e3231322e302f32322d3332203d3e20323639343336.roa
Signing time:             Wed 21 Jan 2026 12:48:40 +0000
ROA not before:           Wed 21 Jan 2026 12:43:40 +0000
ROA not after:            Wed 20 Jan 2027 12:48:40 +0000
asID:                     269436
IP address blocks:        45.186.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/30FD06C8AB4B34C6A130B3FC8C20C891FE576788.crl
                          rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/30FD06C8AB4B34C6A130B3FC8C20C891FE576788.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FD06C8AB4B34C6A130B3FC8C20C891FE576788.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a0:12:6b:d8:5e:82:35:cd:8c:f1:3d:93:b6:9c:dc:e4:fa:23:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FD06C8AB4B34C6A130B3FC8C20C891FE576788
        Validity
            Not Before: Jan 21 12:43:40 2026 GMT
            Not After : Jan 20 12:48:40 2027 GMT
        Subject: CN=7090C9ADBFEC58DF30036445B29269F20740695A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:da:1d:5a:31:4f:61:66:57:43:35:2c:a9:
                    6e:0c:c1:a2:88:6d:f8:1c:b4:c1:bc:51:c1:3c:e4:
                    dc:a6:4b:2f:60:cc:b8:b7:43:57:8d:83:a7:96:54:
                    c1:bc:6e:03:e6:2e:f1:e4:a8:fd:ed:e9:bb:6a:b2:
                    fd:0a:f5:98:72:c0:c8:c7:88:c1:4c:67:24:de:22:
                    9e:f5:f2:4a:2c:2f:0f:27:db:40:0d:5e:6f:71:8a:
                    f7:2b:12:3c:ca:cd:59:ee:42:2c:00:b2:dc:53:97:
                    f8:71:f0:02:21:e6:c5:e0:21:1e:c8:68:e2:64:85:
                    2a:61:cb:a0:dc:2c:b1:32:00:88:55:4f:fa:d3:87:
                    7d:18:16:33:fa:22:b4:f6:36:7e:6f:18:ee:be:6f:
                    8e:74:d6:4b:fe:58:ee:6d:f9:63:1a:dd:e4:87:8b:
                    15:50:cf:7d:24:2c:06:44:e0:47:62:dc:b6:54:e1:
                    85:1a:1a:9c:54:55:af:70:d4:ad:dd:5e:96:42:b7:
                    a1:6a:d5:65:b6:be:28:4a:0f:f8:77:bc:00:dd:29:
                    6d:21:4e:1f:91:e7:3e:95:3b:a4:47:0a:34:fc:f5:
                    65:af:19:0a:c1:f2:17:c1:5e:04:21:02:c1:ab:7f:
                    62:eb:28:fc:11:38:2f:4b:92:13:f4:a0:20:b0:70:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:90:C9:AD:BF:EC:58:DF:30:03:64:45:B2:92:69:F2:07:40:69:5A
            X509v3 Authority Key Identifier:
                keyid:30:FD:06:C8:AB:4B:34:C6:A1:30:B3:FC:8C:20:C8:91:FE:57:67:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/30FD06C8AB4B34C6A130B3FC8C20C891FE576788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FD06C8AB4B34C6A130B3FC8C20C891FE576788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLcRr5cyFsLcZRYTPVAnCRQ5ofk6f28TygXeeNp3aeig/0/34352e3138362e3231322e302f32322d3332203d3e20323639343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:6d:3c:ab:6d:87:94:9a:54:e5:d5:e9:d0:ef:2b:22:f6:b5:
         a0:52:03:9a:57:a4:5c:b1:71:43:5f:31:8b:36:0b:8f:e5:ea:
         66:6e:8b:c5:cf:60:63:26:f2:c8:2b:a8:02:5f:a6:17:5b:64:
         ec:6a:40:44:35:de:1c:55:b3:6f:53:84:3d:c8:1c:be:03:5a:
         88:f0:89:73:ad:d2:d1:23:7d:80:88:91:af:bd:2a:9c:b0:36:
         d5:67:ca:d7:c0:6f:a2:4a:97:5b:08:09:36:92:50:d0:e5:06:
         da:b4:30:79:aa:e3:e8:12:f4:bb:bb:fd:f4:8d:fc:91:4d:b9:
         cc:0c:b3:28:f8:a8:75:75:c0:8f:91:38:f2:df:d2:4d:42:27:
         95:bd:a2:62:b1:b7:a5:84:90:9b:a3:b5:93:be:43:87:0d:49:
         6c:75:ab:11:cb:1a:7e:fe:33:a1:59:9c:7e:68:61:41:7d:0b:
         06:0d:fc:e1:84:90:43:03:df:17:71:b9:09:21:88:cc:2f:66:
         df:7f:e7:a4:51:8b:ca:d1:31:86:d7:05:b1:ed:48:cd:88:5e:
         f5:9c:e6:8d:08:33:e2:b7:80:4d:b8:35:8a:0c:8e:6e:4e:e2:
         c0:3d:f0:80:75:e8:d6:05:57:88:18:58:5a:60:aa:70:ba:e6:
         1d:43:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:59 2026 by rpki-client