This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
File:                     34352e3233362e37322e302f32332d3234203d3e20323731343738.roa (raw, json)
Hash identifier:          RzGxkLsdU/QZCbIVYhszDJ0pT2LqVu0WdUFMqzDAZcM=
Subject key identifier:   FF:CA:3F:56:3E:A9:49:EB:05:18:82:AE:AB:39:AD:F1:54:EE:37:79
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       230E58C0D9898A529C8AF6E5546F847090398548
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
Signing time:             Fri 14 Nov 2025 15:53:57 +0000
ROA not before:           Fri 14 Nov 2025 15:48:57 +0000
ROA not after:            Fri 13 Nov 2026 15:53:57 +0000
asID:                     271478
IP address blocks:        45.236.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0e:58:c0:d9:89:8a:52:9c:8a:f6:e5:54:6f:84:70:90:39:85:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: Nov 14 15:48:57 2025 GMT
            Not After : Nov 13 15:53:57 2026 GMT
        Subject: CN=FFCA3F563EA949EB051882AEAB39ADF154EE3779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:62:9a:d9:d9:fe:66:9d:d3:dc:ed:bc:de:
                    c6:11:fd:0b:57:da:b1:05:37:69:0b:58:0c:c7:28:
                    70:09:ed:83:48:0a:cd:28:5c:4c:2f:21:f7:a2:24:
                    5e:4d:ee:85:f3:b9:25:b2:dc:3d:8c:de:3f:23:c6:
                    5a:56:78:fb:d5:a5:a5:5c:56:8d:78:93:af:76:fa:
                    41:3d:8f:c3:1b:43:97:c1:9e:7b:0e:7b:8a:9e:e2:
                    c2:a2:37:12:a3:ac:02:aa:74:aa:e8:e1:f2:0f:60:
                    c3:4c:eb:7e:79:69:d6:bd:81:b7:33:6b:cf:b9:20:
                    36:32:f2:f7:19:2a:6a:ae:e6:6b:0b:75:6b:14:23:
                    e8:75:af:36:cd:46:01:f6:35:72:85:a5:3f:45:e3:
                    5a:63:81:af:7e:83:7c:0f:a1:c3:08:a7:08:0b:3a:
                    6b:86:6b:c7:81:04:d3:ec:25:1e:08:30:7f:7f:70:
                    50:5b:a5:af:5e:94:a0:94:9a:d6:53:b0:95:12:ff:
                    43:b6:53:52:d2:ce:ee:7f:5f:b3:07:32:ec:67:1c:
                    ba:d3:1c:dc:d2:53:c8:32:71:98:25:0c:4c:91:e2:
                    3d:c1:3c:17:e3:de:9c:bc:5b:c3:61:22:bf:c4:09:
                    2c:ce:bd:5b:c1:f5:a4:1e:2e:96:75:fb:b2:04:e5:
                    8a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CA:3F:56:3E:A9:49:EB:05:18:82:AE:AB:39:AD:F1:54:EE:37:79
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:f5:fe:77:59:de:71:ec:61:e2:92:fd:c6:09:8a:5a:1e:34:
         ed:87:e7:3f:0b:ce:0d:7a:15:91:3f:26:f3:c2:64:a8:08:ca:
         3c:bf:9a:5c:bb:74:a1:ab:be:c7:98:49:38:9b:54:d4:b4:e2:
         e5:8a:99:41:24:c1:57:d2:c5:07:18:39:1e:0f:66:d5:95:f7:
         c5:38:b6:b5:0d:3d:8c:87:cf:19:4a:ba:d2:37:87:51:c5:37:
         f3:52:55:03:bf:06:d2:ff:f0:6f:0b:e3:c0:8f:05:f7:7b:fc:
         d3:d6:8a:a0:0a:b7:aa:9e:9b:7f:25:85:59:87:4f:f6:8e:60:
         44:5a:b9:69:96:ed:c1:fe:86:da:12:2f:77:2f:59:ef:44:9d:
         67:1b:56:55:2d:c9:df:3c:bc:58:6d:48:1c:9d:4a:4f:15:4b:
         ca:49:e7:be:a4:9f:4b:bc:48:23:11:a1:b5:49:30:2a:21:b0:
         41:7d:67:d6:4d:ef:c0:e0:82:e9:3a:70:57:6c:46:e9:ef:47:
         29:24:11:b7:d5:20:98:02:eb:ec:fc:82:14:b7:4e:0d:8f:f1:
         2b:29:80:3a:85:de:7f:b1:17:82:de:2f:77:d9:e2:d0:5c:22:
         39:c2:4b:bd:34:fe:63:4b:cb:5d:25:54:03:38:1d:04:4c:63:
         42:0f:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:55:39 2025 by rpki-client