This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31362e302f32322d3232203d3e20323637313931.roa
File:                     34352e3233312e31362e302f32322d3232203d3e20323637313931.roa (raw, json)
Hash identifier:          2gWgouZ921TjXyDdivWCiAKmvIo1yPXQeCDpD6hd0XY=
Subject key identifier:   67:BD:99:50:DF:1B:F0:CD:94:4B:AB:08:9D:00:64:9E:FC:51:A0:5C
Certificate issuer:       /CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
Certificate serial:       82C474BB42B190678D4D67F52F827DB2DC0D5C
Authority key identifier: 07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31362e302f32322d3232203d3e20323637313931.roa
Signing time:             Thu 15 Jan 2026 17:41:31 +0000
ROA not before:           Thu 15 Jan 2026 17:36:31 +0000
ROA not after:            Thu 14 Jan 2027 17:41:31 +0000
asID:                     267191
IP address blocks:        45.231.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl
                          rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 05:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            82:c4:74:bb:42:b1:90:67:8d:4d:67:f5:2f:82:7d:b2:dc:0d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
        Validity
            Not Before: Jan 15 17:36:31 2026 GMT
            Not After : Jan 14 17:41:31 2027 GMT
        Subject: CN=67BD9950DF1BF0CD944BAB089D00649EFC51A05C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:d3:8f:9d:d5:d4:ee:2d:d2:98:04:d0:b9:
                    b4:fa:d6:df:ed:9c:c4:e5:bf:62:6c:6b:45:c6:bb:
                    09:7e:55:2f:04:07:87:25:0d:94:71:3a:78:36:01:
                    49:13:7b:55:de:f6:8e:ea:2d:92:1d:9c:e7:57:08:
                    fa:9e:ec:a0:89:c3:fa:4f:1a:ac:2a:1b:90:94:f6:
                    c4:59:1a:a3:02:4d:4a:fe:c1:06:68:92:7f:c3:d1:
                    e4:e5:8e:2d:f1:a7:67:6e:f2:4e:3f:7c:e0:1c:b5:
                    29:b4:94:bd:13:5f:d4:75:b1:e8:11:c3:65:7a:94:
                    ea:00:05:46:3a:ca:58:09:c6:45:c2:cf:1e:52:ad:
                    b3:26:00:76:36:b2:a9:79:78:d4:0d:3f:b6:6a:8c:
                    2b:c3:1e:91:46:cd:71:f0:00:18:e6:60:05:ea:0c:
                    8c:78:c8:84:44:d1:9a:f3:ed:15:3a:0e:3f:ca:1e:
                    ae:dc:64:b3:a4:6b:c8:e3:99:b4:15:bf:56:ac:82:
                    9c:bd:d3:b6:bc:12:03:08:21:15:c6:2f:c5:f2:5f:
                    7d:86:0d:37:77:ec:30:28:e1:32:e1:9f:46:7d:0b:
                    92:15:6a:9a:33:c9:5f:be:65:0b:a2:af:86:9f:23:
                    6e:2f:b4:d0:ce:55:c0:0f:1d:06:b6:65:2d:52:97:
                    81:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BD:99:50:DF:1B:F0:CD:94:4B:AB:08:9D:00:64:9E:FC:51:A0:5C
            X509v3 Authority Key Identifier:
                keyid:07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31362e302f32322d3232203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:1d:0c:90:16:a1:28:37:39:57:fd:a8:41:5c:17:fb:3f:92:
         1d:dd:7c:85:32:45:c6:ba:b5:bb:3b:04:33:96:c9:ab:22:bf:
         f6:64:90:32:e9:af:f7:13:d7:33:23:a4:2a:d2:4c:80:61:9e:
         9f:4c:5f:ac:a5:6a:9e:cd:10:83:d4:01:7c:03:ce:07:61:6f:
         35:a4:86:3d:d5:74:d5:2d:14:de:8b:96:1a:8e:ff:ad:63:cc:
         9a:8c:48:f7:0d:b8:dd:f4:8d:ee:34:fb:61:82:91:ef:5c:60:
         d7:89:5c:57:7f:19:6f:46:e5:7e:7c:48:df:0b:f1:05:a8:78:
         a4:33:c5:dc:d1:82:33:ea:59:06:45:88:1b:e5:4e:a5:38:78:
         49:8a:85:7b:1b:d8:6e:b7:80:a7:30:6b:05:3c:31:f8:f4:bf:
         ab:c6:94:9b:1e:a7:bf:dd:4c:67:be:4e:10:61:77:83:dc:0d:
         c5:e1:a5:dd:21:3a:df:45:9d:7d:fb:c2:a8:ec:0e:db:35:7d:
         ce:69:6f:c8:b9:bb:d4:71:57:42:ba:cb:e6:c0:b7:05:76:00:
         70:12:43:37:83:2f:e6:fd:24:7b:4f:fe:df:3b:ed:96:4e:27:
         6b:92:a7:0e:b2:7a:ec:15:90:00:d3:4d:fc:39:1d:31:7a:fa:
         9a:63:cf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:25:42 2026 by rpki-client