This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3234382e302f32342d3234203d3e20323733373734.roa
File:                     34352e3137372e3234382e302f32342d3234203d3e20323733373734.roa (raw, json)
Hash identifier:          myODzoW81+i6N0eOTurCog/WhppJwNpF/ndRcjLjXW4=
Subject key identifier:   3F:5B:63:79:43:1D:49:B5:78:DF:4A:14:11:62:B7:56:10:61:64:17
Certificate issuer:       /CN=C7304639F9F3AB50BA218929634A7AE49A8A9A0D
Certificate serial:       1E5C3BED362D09ADED867DDF72574B46E141F824
Authority key identifier: C7:30:46:39:F9:F3:AB:50:BA:21:89:29:63:4A:7A:E4:9A:8A:9A:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3234382e302f32342d3234203d3e20323733373734.roa
Signing time:             Fri 14 Nov 2025 18:40:28 +0000
ROA not before:           Fri 14 Nov 2025 18:35:28 +0000
ROA not after:            Fri 13 Nov 2026 18:40:28 +0000
asID:                     273774
IP address blocks:        45.177.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.crl
                          rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 19:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5c:3b:ed:36:2d:09:ad:ed:86:7d:df:72:57:4b:46:e1:41:f8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7304639F9F3AB50BA218929634A7AE49A8A9A0D
        Validity
            Not Before: Nov 14 18:35:28 2025 GMT
            Not After : Nov 13 18:40:28 2026 GMT
        Subject: CN=3F5B6379431D49B578DF4A141162B75610616417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:64:fc:86:bf:81:7e:7e:8d:a4:57:b1:c2:
                    ca:56:07:5e:fa:3c:c9:77:6c:0f:a0:ec:68:ce:d2:
                    ec:0c:90:f4:38:c7:18:ac:a0:a7:d1:b8:fa:58:eb:
                    bf:ae:d3:e4:e9:5d:0b:4e:c6:7e:dd:05:47:ab:00:
                    5a:8c:f5:73:43:5a:7a:de:97:0f:c5:21:b4:11:da:
                    d8:ab:68:8c:e8:29:62:8f:66:80:f6:2f:05:6a:84:
                    63:0c:60:5b:86:0f:c7:24:dd:e3:bf:b9:03:82:c1:
                    54:0f:c0:0c:da:e9:4f:88:ae:d7:4c:20:f6:1f:34:
                    a3:73:b6:56:b4:25:42:af:39:43:9a:72:f9:54:eb:
                    46:82:9c:d0:82:7b:97:50:e6:0d:f3:a9:4b:69:b9:
                    36:f0:24:5e:77:75:4d:f5:63:40:53:bf:fa:58:f2:
                    4a:73:79:d0:d9:56:f2:b3:3c:ea:fb:f3:d8:05:07:
                    25:ec:03:69:77:85:6b:62:63:b2:30:11:94:a6:d0:
                    ae:a4:67:11:a0:5a:68:42:42:03:4f:7d:03:97:4d:
                    53:77:07:cf:c4:a1:cd:36:44:fd:b5:8a:d3:63:3d:
                    4b:5b:bc:d9:e7:e8:eb:df:04:ca:1a:79:a1:5d:7e:
                    31:fd:52:d4:83:b6:79:e0:63:73:1e:01:a3:98:da:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5B:63:79:43:1D:49:B5:78:DF:4A:14:11:62:B7:56:10:61:64:17
            X509v3 Authority Key Identifier:
                keyid:C7:30:46:39:F9:F3:AB:50:BA:21:89:29:63:4A:7A:E4:9A:8A:9A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3234382e302f32342d3234203d3e20323733373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:01:5c:92:16:ba:a1:67:52:8a:84:e9:bd:e3:66:09:8a:45:
         7b:8b:9b:b1:65:fc:39:4d:ee:02:54:c0:4a:23:c0:d3:e9:43:
         e1:62:f9:2e:b5:40:f1:45:5e:68:45:65:28:a3:82:b1:15:ea:
         9e:89:c7:31:ca:06:89:19:34:99:ed:48:2d:5f:9e:53:53:93:
         8c:35:40:5a:b1:f8:15:50:c5:e0:8a:bf:27:a5:3d:6c:2c:e3:
         8f:df:1b:ce:90:2b:dd:35:aa:5a:44:38:79:2e:17:4a:55:e7:
         da:ad:91:30:23:19:6c:5b:30:7e:2c:1f:60:e4:f2:ef:65:b3:
         7c:3e:4e:f7:64:86:fc:2f:a8:a2:c5:ae:0b:3f:7b:03:d6:79:
         1f:6d:03:a2:c8:d8:8e:0d:53:77:29:ef:bb:8b:7d:92:5d:ce:
         61:64:8d:dc:fb:ba:e0:76:c8:e5:26:44:94:8a:ad:28:c9:bb:
         f5:7e:9b:80:73:c9:dd:4b:98:1b:89:6f:d6:6f:d6:b6:35:b4:
         28:33:07:d5:d1:bb:4e:a3:83:41:c6:94:fa:44:0a:06:c4:a4:
         4f:c6:61:60:90:8e:87:f1:40:90:71:4d:d9:e6:2f:25:a8:a8:
         28:36:9e:9a:b4:1d:3e:34:e4:0a:6d:f7:e7:5a:82:78:0a:20:
         89:4f:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:10:04 2025 by rpki-client