This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e3137342e3135362e302f32322d3234203d3e20323632393037.roa
File:                     34352e3137342e3135362e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          hBMkQpDy6UJ5BlFGNr+HV/A2K2jD/4QVBsPtcUhjJlM=
Subject key identifier:   E3:F5:04:3B:1B:63:B1:2C:F8:50:64:32:2D:AD:3A:F6:16:53:4C:E5
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       5E565CD5DF0E9E802218D637CFB5FF1495C8CA10
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e3137342e3135362e302f32322d3234203d3e20323632393037.roa
Signing time:             Thu 08 Jan 2026 12:13:15 +0000
ROA not before:           Thu 08 Jan 2026 12:08:15 +0000
ROA not after:            Thu 07 Jan 2027 12:13:15 +0000
asID:                     262907
IP address blocks:        45.174.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:56:5c:d5:df:0e:9e:80:22:18:d6:37:cf:b5:ff:14:95:c8:ca:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Jan  8 12:08:15 2026 GMT
            Not After : Jan  7 12:13:15 2027 GMT
        Subject: CN=E3F5043B1B63B12CF85064322DAD3AF616534CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:61:35:aa:4a:94:da:58:ad:f1:1f:cc:04:
                    e7:b2:70:0c:03:71:a6:1b:a1:78:6e:8f:c6:09:e7:
                    7f:15:a7:83:76:61:5c:95:90:01:92:79:44:66:d3:
                    bc:3d:1d:1b:32:0d:0f:e1:17:a2:1a:95:ce:c6:42:
                    ba:0c:e5:b8:7e:0e:86:9f:33:5a:07:35:f3:a7:7a:
                    28:c0:8e:02:6b:08:43:09:1d:83:6b:ec:47:67:5a:
                    71:12:f7:89:eb:d6:5c:a5:d3:46:e2:35:da:48:31:
                    3a:49:b1:6e:39:d0:e7:80:a0:64:b2:5c:a3:7b:46:
                    e0:dd:b1:93:4a:24:f5:ba:b2:2c:fb:f2:f4:ef:6c:
                    c7:80:5d:32:b0:1c:e8:05:51:51:05:50:84:34:43:
                    74:97:25:72:e6:a3:a4:52:cf:5e:97:8c:b8:b8:79:
                    dd:1c:74:03:66:4e:c8:a6:ed:82:98:76:f7:6e:0f:
                    16:01:e2:61:5d:5e:27:0b:27:db:1f:05:7c:cc:f4:
                    f1:91:33:6c:20:cb:87:83:bf:67:5a:9c:4d:dc:01:
                    6e:3e:0a:a8:36:de:a9:9e:ed:c0:7c:56:c9:99:15:
                    33:4c:fc:30:63:1d:0f:e9:75:4a:be:99:df:5a:1b:
                    c3:38:bb:8b:c8:7f:4a:10:bd:09:d5:a0:28:24:83:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F5:04:3B:1B:63:B1:2C:F8:50:64:32:2D:AD:3A:F6:16:53:4C:E5
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e3137342e3135362e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:dd:0b:d4:8b:9f:be:60:d4:a5:ec:b0:b9:8e:c7:7f:de:bf:
         91:86:92:22:35:3e:0f:26:53:d8:7f:38:ad:4a:9e:b3:62:4e:
         75:ba:9f:41:3e:2d:47:64:5e:75:c2:35:63:ef:f9:f7:70:c7:
         db:3a:06:8c:ee:a2:cc:b3:62:9b:7c:a7:39:45:4d:49:79:29:
         15:23:82:63:e3:29:de:64:74:da:ca:6b:d1:c0:a3:d4:42:55:
         be:37:66:3c:61:2d:8f:f1:85:dc:e3:64:de:2b:56:76:9a:e8:
         b5:e1:0c:e1:ce:b8:f3:fd:a4:a7:d6:81:87:26:c2:17:9c:f3:
         54:39:84:0b:22:71:96:20:30:ec:d7:7a:74:12:d8:32:e2:36:
         ab:c7:20:7e:7e:df:8e:0b:9d:94:b0:de:08:27:70:bd:71:ff:
         cc:33:ee:56:9b:73:12:00:75:13:e7:80:93:10:3b:73:b6:47:
         98:a8:c8:2a:1e:9a:c5:51:2c:95:fc:ac:ea:d0:bd:ea:ab:ad:
         80:17:41:8d:8f:b4:8f:ac:8f:c1:da:38:13:d4:f7:01:fc:d3:
         c0:66:87:d9:5f:26:7c:6a:fd:8e:51:2c:8f:5b:57:a4:dc:64:
         16:cf:2a:db:11:9a:ff:bd:50:24:49:7c:0d:b8:7f:57:1a:24:
         8c:23:19:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:36 2026 by rpki-client