This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa
File:                     34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa (raw, json)
Hash identifier:          qn4ZhXNrRWfRAhNQcNbGHphFXUf9h/pBkj8wsmH01gk=
Subject key identifier:   48:DE:03:1C:C0:32:14:F6:A7:1F:A3:51:59:4A:08:0A:EE:53:6D:1D
Certificate issuer:       /CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
Certificate serial:       E7FF40527BAFDA22962AD2205BCC0F28312309
Authority key identifier: 08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa
Signing time:             Thu 04 Dec 2025 17:13:06 +0000
ROA not before:           Thu 04 Dec 2025 17:08:06 +0000
ROA not after:            Thu 03 Dec 2026 17:13:06 +0000
asID:                     268726
IP address blocks:        45.171.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e7:ff:40:52:7b:af:da:22:96:2a:d2:20:5b:cc:0f:28:31:23:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
        Validity
            Not Before: Dec  4 17:08:06 2025 GMT
            Not After : Dec  3 17:13:06 2026 GMT
        Subject: CN=48DE031CC03214F6A71FA351594A080AEE536D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:25:d6:9c:ab:eb:6a:5c:2f:91:92:a5:4c:
                    14:74:ec:e5:1b:52:5a:ff:0f:17:1c:d8:0c:db:99:
                    b7:a7:b0:75:29:aa:f8:13:1e:84:82:25:bc:77:48:
                    34:5c:b7:ca:ad:53:aa:c0:1c:a0:ea:12:4e:29:b8:
                    b9:3f:60:4e:3a:5f:fe:0e:05:17:e1:df:81:9a:f0:
                    8d:c4:6d:e8:71:83:b8:89:17:0f:62:dc:c4:27:c4:
                    a9:73:10:68:56:cd:9f:8a:b7:eb:ed:72:d0:7b:92:
                    56:74:30:98:13:89:f3:a4:80:50:c8:33:91:7e:e1:
                    3b:90:ba:0b:09:e7:4b:51:8b:82:5d:27:5c:13:a3:
                    2c:70:24:e4:96:22:8d:7e:12:f0:6c:a7:70:a7:20:
                    b0:b0:21:f1:8f:4a:a3:30:2c:1b:c9:80:16:62:05:
                    ee:89:5b:2c:ed:3f:f6:2a:19:88:95:6c:04:ea:73:
                    75:18:28:40:68:b7:32:c1:a3:64:88:43:3e:0f:c9:
                    07:af:1b:35:98:e3:9d:09:2c:1f:37:da:3a:00:dc:
                    e6:30:50:20:cc:ee:46:4d:ef:10:fb:85:36:64:ad:
                    29:15:a4:6a:6c:fd:5d:c8:27:2d:f6:81:fa:e0:cc:
                    14:6a:ed:3f:c0:ba:ee:be:45:3f:77:9f:4e:df:61:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DE:03:1C:C0:32:14:F6:A7:1F:A3:51:59:4A:08:0A:EE:53:6D:1D
            X509v3 Authority Key Identifier:
                keyid:08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f8:4d:31:db:08:d9:9e:b3:91:3f:8c:81:f6:c2:36:87:e6:
         b6:79:94:1c:36:58:64:67:7d:90:7f:c0:e0:3c:76:31:a7:03:
         82:ab:4b:77:8f:7b:73:15:b2:82:56:51:b1:d8:d1:bc:30:5b:
         2b:7e:c4:24:ec:b7:a8:6b:5c:87:0b:a3:bc:1f:be:c6:4f:1f:
         10:7f:9b:5f:f2:a1:ac:f8:05:c2:4c:f8:89:4d:52:7e:e7:87:
         f4:aa:cc:03:f6:5c:48:8c:5f:fe:e9:95:a7:8d:14:d0:15:af:
         51:b1:c1:c0:10:41:cc:86:79:0d:6b:b4:7f:45:9d:a6:75:c7:
         0c:35:a6:26:35:bd:ae:71:de:6e:d7:3b:f3:e4:40:05:9f:89:
         66:53:68:e9:83:c4:23:fa:5d:44:53:e5:ce:59:1a:ad:0d:8e:
         b0:1b:ee:a7:3e:46:4c:bc:87:95:6e:ba:2a:49:29:06:17:36:
         1a:c7:0e:37:ac:f3:6a:2b:58:74:53:8e:81:fb:6e:27:45:da:
         0e:92:d4:54:a2:8a:61:c4:58:44:13:51:9c:15:99:93:f0:de:
         d6:e1:e3:24:d4:f3:6f:59:65:7b:f2:c4:40:2a:77:b6:33:23:
         34:b3:23:9e:76:f1:b3:31:67:d6:fa:19:90:e7:d1:9f:76:e4:
         97:ca:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:22:12 2025 by rpki-client