This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/34352e3138342e3131342e302f32332d3233203d3e20323639333936.roa
File:                     34352e3138342e3131342e302f32332d3233203d3e20323639333936.roa (raw, json)
Hash identifier:          9Ll9SlYhCe9s5J3AdmUJk/u5EYDWZrDBERmYkJ4XipI=
Subject key identifier:   51:48:1E:C9:2F:2E:9B:62:71:4D:5E:DA:75:9C:F8:F6:F2:66:44:52
Certificate issuer:       /CN=CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4
Certificate serial:       4744959861A41841AA8D5C6B4BBF54F90C497DCE
Authority key identifier: CA:FB:3F:D5:BF:98:78:D8:18:3A:B3:AD:06:18:B5:AE:D2:3F:DC:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/34352e3138342e3131342e302f32332d3233203d3e20323639333936.roa
Signing time:             Wed 03 Dec 2025 18:18:57 +0000
ROA not before:           Wed 03 Dec 2025 18:13:57 +0000
ROA not after:            Wed 02 Dec 2026 18:18:57 +0000
asID:                     269396
IP address blocks:        45.184.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl
                          rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:44:95:98:61:a4:18:41:aa:8d:5c:6b:4b:bf:54:f9:0c:49:7d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4
        Validity
            Not Before: Dec  3 18:13:57 2025 GMT
            Not After : Dec  2 18:18:57 2026 GMT
        Subject: CN=51481EC92F2E9B62714D5EDA759CF8F6F2664452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:6c:bf:0b:13:c7:75:de:82:6b:87:30:44:
                    60:b0:15:f7:09:16:26:44:61:02:d4:d1:e5:59:4e:
                    3b:f0:d6:de:08:44:be:72:3a:d7:34:29:a4:99:1b:
                    12:9f:93:5c:24:63:44:7d:e5:45:32:bb:9d:30:f7:
                    68:29:1a:99:9d:fe:19:c2:8d:5a:85:e7:3e:45:8e:
                    c7:b1:3a:40:e2:15:ca:7a:4a:bb:28:07:77:5e:9c:
                    5f:4e:a2:03:21:8c:89:5d:b7:16:1d:b4:8a:bf:2e:
                    76:70:d4:69:cf:26:99:8b:56:ba:41:37:29:5f:fa:
                    5d:f1:1f:04:85:c8:90:f7:e8:f4:38:8b:d4:81:e0:
                    a6:88:fe:bf:c5:3a:d7:bf:02:88:e1:60:8e:31:d1:
                    68:9d:c7:35:6c:38:67:c2:bb:d0:9b:8b:39:13:27:
                    6d:1b:d0:55:f8:ac:f0:a7:43:d1:59:b6:27:20:d3:
                    1d:26:c0:a0:98:f4:9d:10:21:49:ee:37:1d:b3:51:
                    82:3f:4f:72:07:c8:4a:3b:b8:c1:43:ba:7c:c4:30:
                    f1:32:fc:67:a6:35:07:22:d2:26:0b:c2:39:e3:f8:
                    ed:6d:97:b7:a9:dc:1d:1e:39:cd:c3:4d:03:8f:d4:
                    9a:16:a8:e3:fe:4e:65:80:58:09:fb:c1:93:43:ec:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:48:1E:C9:2F:2E:9B:62:71:4D:5E:DA:75:9C:F8:F6:F2:66:44:52
            X509v3 Authority Key Identifier:
                keyid:CA:FB:3F:D5:BF:98:78:D8:18:3A:B3:AD:06:18:B5:AE:D2:3F:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/34352e3138342e3131342e302f32332d3233203d3e20323639333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:b6:f1:b3:98:31:9a:78:b2:a4:ef:d0:4f:a9:0a:3d:dd:05:
         6a:9f:06:3a:b6:d5:6d:85:d5:01:85:35:c6:ec:bb:6b:be:e9:
         19:65:7e:3c:5c:08:0c:60:b1:71:05:68:9b:d6:1c:1a:9a:e6:
         a2:82:ad:b6:5a:f8:21:db:02:ea:35:fa:51:f1:a3:72:1c:05:
         c0:d2:c4:d2:1f:8f:60:19:81:28:fd:b7:db:97:02:0c:48:d7:
         fc:1c:14:aa:7b:ec:eb:28:a4:93:35:e8:c9:45:82:64:4d:35:
         37:d6:8e:ef:76:ab:4a:65:03:11:84:1c:ef:1d:6d:fe:56:4b:
         11:ff:bb:df:ec:2b:d0:d7:76:bd:a1:52:ee:32:b2:0d:88:4c:
         f5:cd:94:bb:62:26:e5:c6:21:3b:91:0c:bf:f1:8d:63:e2:b1:
         80:50:3c:15:b0:5b:ae:8a:64:bd:0e:da:f4:a4:05:9b:fc:7f:
         a9:8b:20:57:fe:f4:50:74:ce:25:0c:23:43:77:be:f5:6d:66:
         0f:bc:86:e7:56:63:18:64:27:4a:f9:4f:f1:b8:da:37:10:33:
         45:fa:29:26:02:23:b9:f2:ba:b5:61:54:41:e2:b4:e3:9f:bd:
         f5:6a:2a:aa:33:dd:a7:6e:f4:fd:06:2b:2c:b4:32:a7:3e:60:
         b8:58:33:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR0SVmGGkGEGqjVxrS79U+QxJfc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGQjNGRDVCRjk4NzhEODE4M0FCM0FEMDYxOEI1QUVE
MjNGRENGNDAeFw0yNTEyMDMxODEzNTdaFw0yNjEyMDIxODE4NTdaMDMxMTAvBgNV
BAMTKDUxNDgxRUM5MkYyRTlCNjI3MTRENUVEQTc1OUNGOEY2RjI2NjQ0NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFD2y/CxPHdd6Ca4cwRGCwFfcJ
FiZEYQLU0eVZTjvw1t4IRL5yOtc0KaSZGxKfk1wkY0R95UUyu50w92gpGpmd/hnC
jVqF5z5FjsexOkDiFcp6SrsoB3denF9OogMhjIldtxYdtIq/LnZw1GnPJpmLVrpB
Nylf+l3xHwSFyJD36PQ4i9SB4KaI/r/FOte/AojhYI4x0WidxzVsOGfCu9CbizkT
J20b0FX4rPCnQ9FZticg0x0mwKCY9J0QIUnuNx2zUYI/T3IHyEo7uMFDunzEMPEy
/GemNQci0iYLwjnj+O1tl7ep3B0eOc3DTQOP1JoWqOP+TmWAWAn7wZND7Hr7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUUgeyS8um2JxTV7adZz49vJmRFIwHwYDVR0j
BBgwFoAUyvs/1b+YeNgYOrOtBhi1rtI/3PQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTc1RUFoc2lIdGgyWVQ5R1ZpTGlzMW5CZTY2QWVjUFlRZGIxU0p5NEtK
alYvMC9DQUZCM0ZENUJGOTg3OEQ4MTgzQUIzQUQwNjE4QjVBRUQyM0ZEQ0Y0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRkIzRkQ1QkY5ODc4RDgx
ODNBQjNBRDA2MThCNUFFRDIzRkRDRjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U3NUVBaHNpSHRoMllUOUdWaUxpczFuQmU2NkFlY1BZUWRiMVNKeTRLSmpWLzAv
MzQzNTJlMzEzODM0MmUzMTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuHIwDQYJKoZIhvcNAQELBQADggEBAEK28bOY
MZp4sqTv0E+pCj3dBWqfBjq21W2F1QGFNcbsu2u+6RllfjxcCAxgsXEFaJvWHBqa
5qKCrbZa+CHbAuo1+lHxo3IcBcDSxNIfj2AZgSj9t9uXAgxI1/wcFKp77OsopJM1
6MlFgmRNNTfWju92q0plAxGEHO8dbf5WSxH/u9/sK9DXdr2hUu4ysg2ITPXNlLti
JuXGITuRDL/xjWPisYBQPBWwW66KZL0O2vSkBZv8f6mLIFf+9FB0ziUMI0N3vvVt
Zg+8hudWYxhkJ0r5T/G42jcQM0X6KSYCI7nyurVhVEHitOOfvfVqKqoz3adu9P0G
Kyy0Mqc+YLhYMzg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:49:44 2025 by rpki-client