This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa
File:                     34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa (raw, json)
Hash identifier:          yYTs542XDszRQnrOJZg5Ju0Rho4fe6+0jq0dugA/zus=
Subject key identifier:   AF:9B:FA:35:11:47:66:4B:11:70:18:19:2C:1C:BF:72:B6:1D:51:25
Certificate issuer:       /CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
Certificate serial:       1D88EC6433C84D48E6150A7145ACA3C4751C65B2
Authority key identifier: 08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa
Signing time:             Thu 04 Dec 2025 17:13:05 +0000
ROA not before:           Thu 04 Dec 2025 17:08:05 +0000
ROA not after:            Thu 03 Dec 2026 17:13:05 +0000
asID:                     268726
IP address blocks:        45.171.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:88:ec:64:33:c8:4d:48:e6:15:0a:71:45:ac:a3:c4:75:1c:65:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
        Validity
            Not Before: Dec  4 17:08:05 2025 GMT
            Not After : Dec  3 17:13:05 2026 GMT
        Subject: CN=AF9BFA351147664B117018192C1CBF72B61D5125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:a8:3f:7a:05:88:8b:e1:4a:79:4c:a9:6f:
                    e4:6b:78:6b:3d:bd:a1:cf:fd:f1:d3:ac:1f:8b:2c:
                    ee:40:f2:cf:4f:64:dd:de:1a:25:4c:b2:52:38:25:
                    00:41:a8:92:ab:3c:1d:84:15:8f:8a:f3:e6:fa:89:
                    57:7d:cf:a5:82:6b:e0:82:6e:35:6c:8e:da:d5:f0:
                    0a:e7:74:67:44:e6:fc:66:41:b8:56:a9:f5:38:24:
                    0c:d3:81:10:bf:87:24:b9:79:83:4c:86:08:ba:c3:
                    8a:cd:c4:83:eb:79:35:6d:67:6d:98:40:91:b4:88:
                    d9:49:2d:f9:70:c0:3e:35:14:1a:ef:79:0c:bc:18:
                    67:a5:94:c5:22:55:d8:7a:56:bb:04:bc:15:ae:88:
                    02:58:e3:56:01:f9:25:a1:d2:bb:5e:2f:25:e5:4a:
                    7a:6d:5d:d8:45:72:08:0b:98:59:a3:2a:34:0a:77:
                    32:6b:6e:51:3f:36:ec:6b:fc:ed:05:76:90:18:7d:
                    8d:27:33:aa:a1:57:b6:ab:f2:4a:a6:1f:95:e0:81:
                    cb:32:ac:3a:af:d8:cb:d8:6d:48:a1:d7:35:37:e8:
                    a1:d3:2e:e6:c3:9b:2b:10:2d:05:ea:6e:9f:56:40:
                    9c:6f:0b:94:8d:9e:55:5e:f3:5a:8c:4d:ff:96:70:
                    65:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9B:FA:35:11:47:66:4B:11:70:18:19:2C:1C:BF:72:B6:1D:51:25
            X509v3 Authority Key Identifier:
                keyid:08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:5d:ca:3f:0c:4c:dd:b6:1e:c5:79:12:a5:e0:3e:a0:70:
         24:20:1a:ba:53:a5:8d:84:5b:6e:83:96:22:c5:96:76:a0:25:
         02:5c:ce:5b:6c:e2:6a:c5:4f:0f:2b:bf:04:8e:86:12:1b:01:
         34:60:20:aa:8a:15:f7:75:e5:1d:be:8e:16:37:7d:a4:bd:21:
         e6:7a:f8:0d:60:b4:be:de:1b:69:18:ea:c0:ac:8e:58:b7:34:
         75:b1:f1:c3:8e:14:9d:87:49:68:c8:45:1e:af:ec:a8:c3:8a:
         be:de:dc:00:c9:51:bf:c7:ad:2b:89:88:a1:e4:ae:09:5d:f0:
         e3:3d:a0:8b:4c:b5:1b:53:58:ac:b4:41:c7:cc:5d:43:29:75:
         a6:e6:6b:49:43:bf:15:9e:82:d5:53:e7:7e:23:89:0a:24:4d:
         ef:54:f4:2f:fe:3a:d9:46:82:cf:4a:0b:f8:d9:a1:b2:f0:b7:
         c5:d4:bc:a8:11:09:15:22:ef:d6:63:d3:f1:2a:b3:87:e2:ac:
         4c:ee:3e:80:6c:59:74:58:e3:49:92:ea:78:1f:31:e4:a0:58:
         99:44:bd:e5:d2:1b:f7:ee:28:07:d7:b6:31:59:12:59:78:37:
         44:65:df:ca:16:6b:85:73:ae:2c:70:b2:71:3c:5a:f8:c9:ed:
         1d:9d:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:20:14 2025 by rpki-client