This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa
File:                     34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (raw, json)
Hash identifier:          JSrN2QrOp4mvWs4tfdMlhACA5kJW39lUGtJvvCvm+W0=
Subject key identifier:   B8:9F:BD:29:7B:BF:05:45:18:49:B2:6A:91:8E:C9:BA:55:90:B5:D1
Certificate issuer:       /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Certificate serial:       3E0B5FB58EE0A7B1CFA21D64DDCEF8B524BD0D13
Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa
Signing time:             Thu 20 Nov 2025 20:20:45 +0000
ROA not before:           Thu 20 Nov 2025 20:15:45 +0000
ROA not after:            Thu 19 Nov 2026 20:20:45 +0000
asID:                     268239
IP address blocks:        45.236.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
                          rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0b:5f:b5:8e:e0:a7:b1:cf:a2:1d:64:dd:ce:f8:b5:24:bd:0d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
        Validity
            Not Before: Nov 20 20:15:45 2025 GMT
            Not After : Nov 19 20:20:45 2026 GMT
        Subject: CN=B89FBD297BBF05451849B26A918EC9BA5590B5D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:30:94:84:e1:7f:ce:e4:83:67:6c:3f:c5:c4:
                    de:64:62:df:4b:02:28:48:f3:74:a5:e2:50:a4:a7:
                    96:cf:cb:7d:69:75:2a:28:bc:c1:3e:fe:d5:2a:a5:
                    4e:b7:3e:eb:75:8a:92:28:8e:1b:bf:4a:f3:46:f4:
                    17:97:8e:87:f2:b4:84:85:83:a4:d7:6e:e2:58:ca:
                    3f:51:4e:11:a7:10:fc:8b:b2:82:54:8c:d7:bc:1e:
                    c3:b4:18:67:f5:f0:f5:a6:ba:13:cb:0a:da:35:a4:
                    ba:c5:07:1a:05:a2:11:ed:40:54:2b:87:dd:8d:4b:
                    dd:b0:18:7a:e5:e2:2a:24:fc:6a:09:04:d6:62:c3:
                    8d:bf:58:3b:6f:11:ee:f6:fa:c1:f2:6b:3c:6f:e9:
                    6b:8c:28:aa:46:78:df:a3:ab:2d:dc:ab:4e:fd:c8:
                    b9:f8:2d:55:5a:b7:f7:f9:af:35:79:e8:e7:9e:e2:
                    6b:e6:34:95:02:36:ac:7d:6b:db:f9:55:49:28:7f:
                    a8:7a:76:92:03:10:1c:dc:01:e8:e6:7e:73:5d:22:
                    1d:4f:2a:e5:cc:d5:73:05:46:d1:01:6b:2a:63:7c:
                    bd:8e:01:0d:f7:f0:16:38:fe:93:bc:39:fc:f1:35:
                    c4:cc:27:e6:e7:b3:26:74:2c:e9:88:5e:c3:c0:0f:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9F:BD:29:7B:BF:05:45:18:49:B2:6A:91:8E:C9:BA:55:90:B5:D1
            X509v3 Authority Key Identifier:
                keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:d8:c9:ca:b6:c5:bd:5f:a9:70:cb:db:e3:cb:df:1c:0d:7a:
         be:53:83:59:4d:15:1f:7b:c5:a6:6d:78:5e:82:89:0b:79:72:
         5e:c3:6d:3c:15:1c:58:81:00:c3:9b:17:54:ea:5f:74:86:cf:
         f9:2b:3d:9a:5e:78:c8:1b:33:78:49:7c:d7:19:20:94:45:5e:
         b6:0d:a1:76:a1:a5:bd:29:66:87:2c:c2:24:28:60:88:40:4d:
         ca:8e:d5:dd:94:cb:d0:c5:63:d2:b6:8a:b3:87:60:16:22:6e:
         74:81:bd:3a:9a:d8:a9:a2:64:35:d1:23:fc:ab:fe:69:48:4d:
         4d:c8:24:5f:4e:e4:e6:14:99:b6:9f:a3:b3:20:38:eb:a0:f8:
         a0:a0:cb:5c:51:14:8a:ab:e8:f6:17:33:3e:4d:67:a1:88:da:
         5c:20:0c:74:e8:13:6d:76:73:3e:5c:61:64:c0:24:0c:d7:c2:
         60:53:25:31:11:4b:91:40:94:cc:63:93:38:9e:06:2f:30:7d:
         a5:d5:4c:c8:26:50:90:9a:b9:67:9f:0f:19:28:f0:56:98:0d:
         b5:4a:19:74:e8:40:ba:46:c1:e3:a8:05:0b:97:91:db:97:16:
         8c:3b:9a:4d:03:79:57:09:bd:65:0a:83:18:d9:94:7b:c9:a1:
         2a:04:4f:ae
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPgtftY7gp7HPoh1k3c74tSS9DRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIwQUZFQ0Y3MjdDRTg4QTQ1OUZDQkMxN0Q2OTQ1MDdD
RTlBREUyMjAeFw0yNTExMjAyMDE1NDVaFw0yNjExMTkyMDIwNDVaMDMxMTAvBgNV
BAMTKEI4OUZCRDI5N0JCRjA1NDUxODQ5QjI2QTkxOEVDOUJBNTU5MEI1RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtMJSE4X/O5INnbD/FxN5kYt9L
AihI83Sl4lCkp5bPy31pdSoovME+/tUqpU63Put1ipIojhu/SvNG9BeXjofytISF
g6TXbuJYyj9RThGnEPyLsoJUjNe8HsO0GGf18PWmuhPLCto1pLrFBxoFohHtQFQr
h92NS92wGHrl4iok/GoJBNZiw42/WDtvEe72+sHyazxv6WuMKKpGeN+jqy3cq079
yLn4LVVat/f5rzV56Oee4mvmNJUCNqx9a9v5VUkof6h6dpIDEBzcAejmfnNdIh1P
KuXM1XMFRtEBaypjfL2OAQ338BY4/pO8OfzxNcTMJ+bnsyZ0LOmIXsPAD2x/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuJ+9KXu/BUUYSbJqkY7JulWQtdEwHwYDVR0j
BBgwFoAUAgr+z3J86IpFn8vBfWlFB86a3iIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURnOFdHWlA0R0JzeGJZVTI1TnBIb3EyTkE0RzJ0Nlh5QjN6YjJDZWdu
YUYvMC8wMjBBRkVDRjcyN0NFODhBNDU5RkNCQzE3RDY5NDUwN0NFOUFERTIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyMEFGRUNGNzI3Q0U4OEE0
NTlGQ0JDMTdENjk0NTA3Q0U5QURFMjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEZzhXR1pQNEdCc3hiWVUyNU5wSG9xMk5BNEcydDZYeUIzemIyQ2VnbmFGLzAv
MzQzNTJlMzIzMzM2MmUzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzIzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLewkMA0GCSqGSIb3DQEBCwUAA4IBAQCn2MnKtsW9
X6lwy9vjy98cDXq+U4NZTRUfe8WmbXhegokLeXJew208FRxYgQDDmxdU6l90hs/5
Kz2aXnjIGzN4SXzXGSCURV62DaF2oaW9KWaHLMIkKGCIQE3KjtXdlMvQxWPStoqz
h2AWIm50gb06mtipomQ10SP8q/5pSE1NyCRfTuTmFJm2n6OzIDjroPigoMtcURSK
q+j2FzM+TWehiNpcIAx06BNtdnM+XGFkwCQM18JgUyUxEUuRQJTMY5M4ngYvMH2l
1UzIJlCQmrlnnw8ZKPBWmA21Shl06EC6RsHjqAULl5HblxaMO5pNA3lXCb1lCoMY
2ZR7yaEqBE+u
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:59 2025 by rpki-client