This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31342e302f32342d3234203d3e203631353930.roa
File:                     34352e3233342e31342e302f32342d3234203d3e203631353930.roa (raw, json)
Hash identifier:          jhm2aZSX2/rvjf0YfiJ9dSnPCDno+zlmfnVEdh2lGjc=
Subject key identifier:   21:47:48:1B:C9:D9:64:7A:FF:B1:8D:57:DF:3F:04:BF:BE:40:74:00
Certificate issuer:       /CN=1BC53F212E26C974A3552F8E1703246BF93E5856
Certificate serial:       333FF736CD9D2C5B2D2BCC6CC121380DDFF9FD97
Authority key identifier: 1B:C5:3F:21:2E:26:C9:74:A3:55:2F:8E:17:03:24:6B:F9:3E:58:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31342e302f32342d3234203d3e203631353930.roa
Signing time:             Tue 20 Jan 2026 15:40:30 +0000
ROA not before:           Tue 20 Jan 2026 15:35:30 +0000
ROA not after:            Tue 19 Jan 2027 15:40:30 +0000
asID:                     61590
IP address blocks:        45.234.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.crl
                          rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 23:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3f:f7:36:cd:9d:2c:5b:2d:2b:cc:6c:c1:21:38:0d:df:f9:fd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC53F212E26C974A3552F8E1703246BF93E5856
        Validity
            Not Before: Jan 20 15:35:30 2026 GMT
            Not After : Jan 19 15:40:30 2027 GMT
        Subject: CN=2147481BC9D9647AFFB18D57DF3F04BFBE407400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:f1:c0:b6:4d:c2:3c:8b:40:9c:b2:eb:33:
                    39:6f:b6:81:1e:9d:ba:f8:22:ab:e6:40:bf:fa:84:
                    42:d5:35:93:58:5e:3f:95:fa:b7:ea:e2:d0:78:14:
                    2c:bf:1e:f3:74:2d:0c:e9:a5:33:2a:81:3c:3b:29:
                    7c:c8:bc:8e:b0:a9:d9:f7:fd:18:d1:d4:63:72:3e:
                    c7:18:11:82:64:f7:7d:42:08:b9:1a:cb:4a:3a:ee:
                    d3:97:0d:b6:2d:d0:e2:b6:2a:23:6a:eb:69:95:a6:
                    7e:63:11:7e:73:42:53:82:6b:15:7f:95:15:e8:e0:
                    8f:99:ba:87:56:6d:14:c3:e2:ad:9b:f8:5d:26:ed:
                    70:52:fe:a9:7e:46:e0:3d:2e:79:1a:04:73:45:f1:
                    26:f6:3c:96:09:3e:c1:32:6e:59:93:ce:e9:04:b2:
                    e1:e2:e4:8b:15:c0:aa:e9:2f:ad:0e:47:43:8e:6e:
                    34:34:8e:a4:5a:44:56:17:7d:91:50:f4:ac:9b:93:
                    b9:d0:e1:54:b0:d1:4b:f7:a4:de:91:2c:cf:a2:9a:
                    4c:b6:79:f3:84:3f:45:3c:b9:aa:9e:6b:4a:31:2e:
                    90:ae:a2:ed:c0:25:62:40:1f:6b:ba:49:02:59:ca:
                    5a:39:04:5f:07:af:d2:a8:74:23:bb:d6:40:d3:85:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:47:48:1B:C9:D9:64:7A:FF:B1:8D:57:DF:3F:04:BF:BE:40:74:00
            X509v3 Authority Key Identifier:
                keyid:1B:C5:3F:21:2E:26:C9:74:A3:55:2F:8E:17:03:24:6B:F9:3E:58:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31342e302f32342d3234203d3e203631353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:40:48:82:fe:4e:fd:a4:71:7c:59:06:91:d8:0d:78:6a:c5:
         a3:f6:25:ea:8c:9b:06:20:f9:a0:26:69:7b:ed:5b:93:90:96:
         95:af:e9:f4:c5:fc:d3:16:6c:12:f1:49:a2:da:18:bb:13:8e:
         94:48:04:ea:8a:df:92:04:41:f5:5d:9b:03:cb:8f:89:80:6d:
         12:a1:d4:6c:ce:0b:a2:10:c9:ca:da:1b:a1:9b:38:c5:cd:47:
         4d:b4:e7:61:80:20:bc:a4:98:31:30:fe:d5:72:cc:7c:9a:ac:
         39:e8:3c:75:82:9b:d8:fe:2d:26:c2:fa:d1:f0:bd:9b:c9:83:
         bd:aa:07:e6:9c:5d:9b:aa:70:14:da:29:cc:6f:30:84:cd:72:
         e4:b0:aa:cd:39:e2:04:ef:ac:1b:7b:7b:f6:2b:90:b4:b0:44:
         f1:37:c9:ac:c5:9f:f9:d7:65:fc:80:e2:02:99:f6:bf:fb:6e:
         ed:41:18:3d:63:95:84:d5:7f:29:b5:61:bf:52:0e:3f:f2:2b:
         22:eb:2c:7e:8a:00:9f:12:a2:5c:50:6e:ef:8b:a6:b4:03:9c:
         39:5d:d3:6a:1b:97:aa:f1:bf:c2:58:c2:8f:da:23:19:e9:69:
         fd:e3:d3:f2:eb:fe:3d:73:fc:14:cf:c8:20:b8:f8:3f:65:94:
         db:a0:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:26:12 2026 by rpki-client