This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31382e302f32332d3233203d3e20323637313931.roa
File:                     34352e3233312e31382e302f32332d3233203d3e20323637313931.roa (raw, json)
Hash identifier:          6vIGPxWx31dtHX2q6yxOMktdmtkwzOY4W8bHtHGVJ1M=
Subject key identifier:   EB:32:A5:D7:D9:88:05:DA:D3:12:A1:81:FD:62:D9:B7:88:54:A1:6C
Certificate issuer:       /CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
Certificate serial:       67E8C60883107C7722B1884A6D0C9439D00BE874
Authority key identifier: 07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31382e302f32332d3233203d3e20323637313931.roa
Signing time:             Thu 15 Jan 2026 17:41:32 +0000
ROA not before:           Thu 15 Jan 2026 17:36:32 +0000
ROA not after:            Thu 14 Jan 2027 17:41:32 +0000
asID:                     267191
IP address blocks:        45.231.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl
                          rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 05:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e8:c6:08:83:10:7c:77:22:b1:88:4a:6d:0c:94:39:d0:0b:e8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
        Validity
            Not Before: Jan 15 17:36:32 2026 GMT
            Not After : Jan 14 17:41:32 2027 GMT
        Subject: CN=EB32A5D7D98805DAD312A181FD62D9B78854A16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:25:13:e6:64:ea:79:de:2c:6d:33:4b:5c:71:
                    73:b2:2f:8d:4c:e1:3c:39:ff:d8:f8:93:5a:4f:d5:
                    1f:37:88:01:27:63:5a:d6:bf:da:4e:69:dc:dc:44:
                    e6:97:82:5b:10:ee:31:61:e1:56:4f:7e:e4:8f:68:
                    1c:20:d9:50:f1:a1:c1:96:ee:de:33:25:fa:d4:03:
                    69:46:c1:1c:6e:ed:a6:79:d1:2d:de:20:ec:4c:2c:
                    d7:c8:91:e6:df:ec:4c:94:8c:bc:42:bd:5f:56:5d:
                    18:86:60:3a:c9:de:b4:ea:ff:d2:78:f9:9d:a7:ff:
                    6c:96:94:e9:cd:e8:5b:47:74:60:9f:db:d5:6c:d6:
                    dd:7b:67:f6:57:70:53:0c:58:c3:1b:cf:88:1e:5a:
                    81:e1:f8:e3:cf:1a:f1:4f:e4:b6:06:94:90:f7:c7:
                    3f:91:3d:9e:de:c2:59:bb:ad:15:fd:38:70:fd:9c:
                    6a:c8:08:8b:45:6d:95:14:86:c9:d0:59:d4:02:1e:
                    e3:b8:f8:2a:8c:4d:63:f2:e8:59:a6:ce:9c:23:a3:
                    63:96:ee:2d:5b:43:ed:e2:c2:82:60:3c:c0:b4:bc:
                    32:5d:70:bd:9f:cc:c4:03:9d:75:33:2d:2a:54:b8:
                    17:03:61:88:25:5f:70:6d:c3:ff:c4:bb:c5:e7:89:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:32:A5:D7:D9:88:05:DA:D3:12:A1:81:FD:62:D9:B7:88:54:A1:6C
            X509v3 Authority Key Identifier:
                keyid:07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31382e302f32332d3233203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:68:61:7c:95:a2:0a:64:ed:9a:bd:e3:d1:22:0e:a4:7f:cf:
         c8:72:dd:26:bb:9a:0f:ca:fd:ca:52:01:ef:66:74:f9:db:a1:
         57:98:f5:4d:8d:3e:7e:c7:93:d0:0b:8f:6b:95:d5:7a:64:67:
         a2:e1:e2:15:fb:81:f1:d2:01:30:bf:7c:cd:db:21:96:82:47:
         75:ed:77:16:c7:8b:21:ac:59:96:e5:76:ec:f1:a7:8f:45:ed:
         25:53:f8:dd:47:ee:c4:a0:2b:56:a7:2d:c2:e6:60:ee:b6:cd:
         be:0f:0a:e9:90:20:0f:0d:19:9a:8b:b0:41:98:4b:1d:3e:bb:
         13:76:09:4a:b5:55:28:68:66:d6:56:91:d2:f0:d0:30:04:73:
         fa:35:1b:06:53:31:1a:0b:c1:79:14:8e:6c:a4:b3:65:4e:63:
         4b:30:53:44:75:ab:08:58:d8:32:82:3c:66:47:18:8e:b1:56:
         0c:27:a8:04:da:19:d0:53:fc:79:eb:ee:d5:56:25:30:73:1a:
         84:81:f3:8a:bb:4d:db:25:5d:ce:1c:2d:0f:d5:17:b7:25:ba:
         d9:24:57:a6:6c:83:72:07:d3:54:3b:85:ca:19:cc:f8:99:6e:
         d3:fb:e4:b3:a7:66:92:c9:95:2f:a1:b2:c2:8e:9c:03:e5:94:
         e8:fd:1f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:24:19 2026 by rpki-client