This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/34352e352e3234342e302f32322d3332203d3e20323636313130.roa
File:                     34352e352e3234342e302f32322d3332203d3e20323636313130.roa (raw, json)
Hash identifier:          cMkqFT4jomS0RNAoIYq7J3lk3g30QJDvQ8/i+1x6mbw=
Subject key identifier:   42:1A:A3:37:6A:06:DC:81:E7:C3:91:79:8D:27:FD:5B:3E:24:54:91
Certificate issuer:       /CN=C79AF87227A5408AD8E9DEB9BC437BD71BB764D8
Certificate serial:       0A523A996FFAD28A5AD1FA5F5D49C9CBED319E97
Authority key identifier: C7:9A:F8:72:27:A5:40:8A:D8:E9:DE:B9:BC:43:7B:D7:1B:B7:64:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C79AF87227A5408AD8E9DEB9BC437BD71BB764D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/34352e352e3234342e302f32322d3332203d3e20323636313130.roa
Signing time:             Wed 31 Dec 2025 12:13:12 +0000
ROA not before:           Wed 31 Dec 2025 12:08:12 +0000
ROA not after:            Wed 30 Dec 2026 12:13:12 +0000
asID:                     266110
IP address blocks:        45.5.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/C79AF87227A5408AD8E9DEB9BC437BD71BB764D8.crl
                          rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/C79AF87227A5408AD8E9DEB9BC437BD71BB764D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C79AF87227A5408AD8E9DEB9BC437BD71BB764D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:52:3a:99:6f:fa:d2:8a:5a:d1:fa:5f:5d:49:c9:cb:ed:31:9e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C79AF87227A5408AD8E9DEB9BC437BD71BB764D8
        Validity
            Not Before: Dec 31 12:08:12 2025 GMT
            Not After : Dec 30 12:13:12 2026 GMT
        Subject: CN=421AA3376A06DC81E7C391798D27FD5B3E245491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:74:b2:c0:25:e9:13:90:a1:92:9f:83:5a:
                    dd:da:65:7d:39:fe:66:51:58:7e:b6:cc:8e:5c:0a:
                    0f:ad:6a:05:93:81:8d:ee:c4:fe:e8:74:10:e7:b5:
                    75:7a:c3:ef:dd:91:4c:ad:88:07:56:39:a4:19:c9:
                    43:75:30:97:9a:67:e9:78:17:4b:ee:ff:d3:2c:9f:
                    9e:8e:2b:77:b8:f4:85:e3:d0:08:4a:2b:3e:21:2a:
                    64:dc:98:21:43:58:4a:ab:1a:4a:6f:70:83:2e:d1:
                    c7:99:ea:8f:22:ed:c0:de:08:ab:b5:cb:e6:47:33:
                    2f:08:a2:74:e9:25:53:08:bf:32:70:e4:b0:7b:b6:
                    3a:ab:2b:6f:a5:30:e5:dd:d2:a2:3d:a1:0f:2d:77:
                    7e:0d:5c:c0:f0:39:cf:cd:5f:d8:22:f0:98:37:75:
                    b4:97:57:07:16:22:bf:59:17:7b:9d:cb:b9:f4:93:
                    e7:ec:e3:fa:ed:84:de:a6:39:44:1c:b6:96:3d:8b:
                    80:62:d3:2b:02:32:ac:9d:0c:06:56:7c:02:0c:a9:
                    04:da:7c:8d:00:05:11:ba:2b:20:89:51:2a:db:05:
                    26:a5:30:14:e3:44:6a:c2:dc:e2:e3:13:93:39:71:
                    05:be:9f:6b:53:71:ed:a2:10:64:4f:c6:3c:92:2b:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1A:A3:37:6A:06:DC:81:E7:C3:91:79:8D:27:FD:5B:3E:24:54:91
            X509v3 Authority Key Identifier:
                keyid:C7:9A:F8:72:27:A5:40:8A:D8:E9:DE:B9:BC:43:7B:D7:1B:B7:64:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/C79AF87227A5408AD8E9DEB9BC437BD71BB764D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C79AF87227A5408AD8E9DEB9BC437BD71BB764D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/34352e352e3234342e302f32322d3332203d3e20323636313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:eb:ea:32:08:9d:c9:c7:67:14:5e:4f:36:eb:43:63:dc:b1:
         94:e4:ca:6b:22:39:83:29:32:a3:08:b0:67:9a:cd:a4:a8:7a:
         2e:1f:85:09:d4:4a:38:06:f5:58:8c:9e:a3:46:0f:75:a5:c8:
         a6:7e:c2:08:45:5d:b5:49:e0:b0:91:b9:f6:69:07:5f:96:3b:
         d3:c7:ce:e5:a7:d6:11:9f:a4:d3:42:64:93:14:09:34:07:f6:
         04:a7:b3:dc:30:4b:86:d6:2a:a2:93:56:4c:70:40:ca:3b:5c:
         bb:02:e2:16:1f:75:91:0c:16:49:57:f4:95:5d:48:79:ba:27:
         4f:19:5b:9a:fd:99:85:37:40:eb:0e:67:8d:45:be:6f:d0:0b:
         f2:72:ee:6e:c8:de:7a:49:a4:a8:96:a5:8d:1a:98:e8:c4:2a:
         36:64:18:88:b6:1d:25:8a:8c:fd:1d:b4:33:09:8b:5d:55:ef:
         8e:12:c2:29:2d:78:36:09:bf:ed:f6:67:00:39:18:9a:e6:9b:
         f8:11:76:9e:7b:ff:1b:ca:c3:91:79:97:c4:61:5f:ff:78:61:
         60:02:14:2a:7a:07:45:99:3f:c2:ba:0e:15:fb:75:41:7b:06:
         f9:a4:e7:bc:d1:f2:57:17:68:39:2d:e5:ed:e7:3d:5a:5b:21:
         14:f8:dd:c3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUClI6mW/60opa0fpfXUnJy+0xnpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc5QUY4NzIyN0E1NDA4QUQ4RTlERUI5QkM0MzdCRDcx
QkI3NjREODAeFw0yNTEyMzExMjA4MTJaFw0yNjEyMzAxMjEzMTJaMDMxMTAvBgNV
BAMTKDQyMUFBMzM3NkEwNkRDODFFN0MzOTE3OThEMjdGRDVCM0UyNDU0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjzXSywCXpE5Chkp+DWt3aZX05
/mZRWH62zI5cCg+tagWTgY3uxP7odBDntXV6w+/dkUytiAdWOaQZyUN1MJeaZ+l4
F0vu/9Msn56OK3e49IXj0AhKKz4hKmTcmCFDWEqrGkpvcIMu0ceZ6o8i7cDeCKu1
y+ZHMy8IonTpJVMIvzJw5LB7tjqrK2+lMOXd0qI9oQ8td34NXMDwOc/NX9gi8Jg3
dbSXVwcWIr9ZF3udy7n0k+fs4/rthN6mOUQctpY9i4Bi0ysCMqydDAZWfAIMqQTa
fI0ABRG6KyCJUSrbBSalMBTjRGrC3OLjE5M5cQW+n2tTce2iEGRPxjySKzeHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQhqjN2oG3IHnw5F5jSf9Wz4kVJEwHwYDVR0j
BBgwFoAUx5r4cielQIrY6d65vEN71xu3ZNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGZ2RUVzSFkxclNEbTdHdnl6ZVVqYlVXYkRINzMyd3NncXVUYkVDN0Zu
a0cvMC9DNzlBRjg3MjI3QTU0MDhBRDhFOURFQjlCQzQzN0JENzFCQjc2NEQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3OUFGODcyMjdBNTQwOEFE
OEU5REVCOUJDNDM3QkQ3MUJCNzY0RDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RmdkVFc0hZMXJTRG03R3Z5emVVamJVV2JESDczMndzZ3F1VGJFQzdGbmtHLzAv
MzQzNTJlMzUyZTMyMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjMx
MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0F9DANBgkqhkiG9w0BAQsFAAOCAQEAoevqMgidycdn
FF5PNutDY9yxlOTKayI5gykyowiwZ5rNpKh6Lh+FCdRKOAb1WIyeo0YPdaXIpn7C
CEVdtUngsJG59mkHX5Y708fO5afWEZ+k00JkkxQJNAf2BKez3DBLhtYqopNWTHBA
yjtcuwLiFh91kQwWSVf0lV1IebonTxlbmv2ZhTdA6w5njUW+b9AL8nLubsjeekmk
qJaljRqY6MQqNmQYiLYdJYqM/R20MwmLXVXvjhLCKS14Ngm/7fZnADkYmuab+BF2
nnv/G8rDkXmXxGFf/3hhYAIUKnoHRZk/wroOFft1QXsG+aTnvNHyVxdoOS3l7ec9
WlshFPjdww==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:51 2026 by rpki-client