This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138352e302f32342d3234203d3e20323638373236.roa
File:                     34352e3137312e3138352e302f32342d3234203d3e20323638373236.roa (raw, json)
Hash identifier:          YYYOMywEYcay0LYupt9aPlYhkWzsMohFDaG/3Z2OgPk=
Subject key identifier:   2F:91:7C:62:03:ED:1D:17:6B:BD:77:82:F5:13:82:85:FC:4F:02:FF
Certificate issuer:       /CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
Certificate serial:       314F66FFB50C30443B0147E231406A6D96F448
Authority key identifier: 08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138352e302f32342d3234203d3e20323638373236.roa
Signing time:             Thu 04 Dec 2025 17:13:07 +0000
ROA not before:           Thu 04 Dec 2025 17:08:07 +0000
ROA not after:            Thu 03 Dec 2026 17:13:07 +0000
asID:                     268726
IP address blocks:        45.171.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4f:66:ff:b5:0c:30:44:3b:01:47:e2:31:40:6a:6d:96:f4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
        Validity
            Not Before: Dec  4 17:08:07 2025 GMT
            Not After : Dec  3 17:13:07 2026 GMT
        Subject: CN=2F917C6203ED1D176BBD7782F5138285FC4F02FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:03:9d:7e:db:7b:52:0a:99:84:cc:ad:c2:
                    d3:66:76:7a:62:c0:0d:30:09:d0:27:1e:bd:8e:b7:
                    ea:50:fc:fb:b4:1b:ee:5b:f2:c9:8b:a6:66:88:7b:
                    4e:12:38:2d:cc:4b:50:cf:b6:8c:64:7f:2c:6d:b1:
                    44:cf:aa:1e:3d:9e:f4:11:f8:c7:a4:38:86:39:94:
                    1f:ec:6a:76:95:92:85:f0:12:7c:47:e9:9b:2e:21:
                    95:f7:15:54:18:79:cf:40:a1:6b:fd:05:0a:0b:02:
                    9f:e7:6d:b5:66:02:e1:9b:9b:81:27:7b:bf:26:f8:
                    4c:63:0d:89:2f:b1:b4:b4:51:b3:b6:63:79:54:f3:
                    d5:a8:29:20:8f:8c:4f:0f:b2:bb:13:08:98:c9:2a:
                    62:26:dd:7a:a8:e4:87:a0:c5:7a:5b:5b:3a:c8:5b:
                    a1:0a:73:0f:cd:40:7e:13:f6:9c:9e:2d:71:70:c8:
                    e2:fc:a9:5f:f6:28:ad:9c:2a:ac:95:72:3c:64:68:
                    69:a3:3d:39:30:ad:f1:e3:ed:95:06:f6:b1:67:91:
                    39:04:82:a0:a0:c5:94:5e:62:c5:6f:c8:12:00:dc:
                    41:a9:4f:b6:40:09:bf:cf:5f:57:32:d3:34:7a:db:
                    b5:2d:ed:6e:9a:16:f3:65:83:47:ad:b1:23:c5:55:
                    5c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:91:7C:62:03:ED:1D:17:6B:BD:77:82:F5:13:82:85:FC:4F:02:FF
            X509v3 Authority Key Identifier:
                keyid:08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138352e302f32342d3234203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:69:9e:a9:91:16:05:54:20:d9:2e:01:09:18:a6:08:1e:
         44:f0:28:39:30:47:e5:2f:24:1e:4c:f7:60:f9:44:1b:41:6c:
         f1:09:e4:b7:c4:73:cc:44:46:e8:16:12:a5:44:35:02:45:42:
         cf:92:79:f6:06:6b:e5:03:ce:66:ea:47:23:37:6a:bf:68:a3:
         1f:c3:5c:f0:55:93:38:54:85:f6:a0:3b:b6:ac:a3:28:9d:aa:
         6f:7e:bb:7f:39:76:84:47:b5:10:77:85:5b:08:c8:74:5c:70:
         69:6a:2d:92:af:6d:32:98:57:c4:f7:28:27:fd:67:85:f7:49:
         eb:e3:90:ff:0e:9c:b6:00:b4:63:18:ce:14:65:ff:2d:25:48:
         8a:a3:14:3a:77:c5:7c:fc:6f:7d:ea:34:7c:bc:ba:e8:12:a2:
         11:32:5f:4e:49:98:21:ac:3c:08:80:63:6a:1e:97:af:23:fb:
         e0:42:34:b3:2b:c2:90:dc:f4:2e:66:a9:b3:fe:4f:ae:c3:c1:
         c3:97:03:3d:15:fc:38:80:9c:18:23:41:10:ec:63:35:f4:d0:
         0f:1b:52:99:b7:d4:72:d2:f4:af:b8:a5:8d:ee:fb:47:0d:88:
         dc:9f:f6:4a:eb:4e:ad:f5:c9:f4:23:a5:c6:98:c7:7f:6d:e5:
         c3:18:69:5f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITMU9m/7UMMEQ7AUfiMUBqbZb0SDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygwODhCQkI0QjIxRTY1NDdEOTIyNDA2RkM0QjBFOEQ1QjY0
NTJBMDFCMB4XDTI1MTIwNDE3MDgwN1oXDTI2MTIwMzE3MTMwN1owMzExMC8GA1UE
AxMoMkY5MTdDNjIwM0VEMUQxNzZCQkQ3NzgyRjUxMzgyODVGQzRGMDJGRjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKfDA51+23tSCpmEzK3C02Z2emLA
DTAJ0CcevY636lD8+7Qb7lvyyYumZoh7ThI4LcxLUM+2jGR/LG2xRM+qHj2e9BH4
x6Q4hjmUH+xqdpWShfASfEfpmy4hlfcVVBh5z0Cha/0FCgsCn+dttWYC4ZubgSd7
vyb4TGMNiS+xtLRRs7ZjeVTz1agpII+MTw+yuxMImMkqYibdeqjkh6DFeltbOshb
oQpzD81AfhP2nJ4tcXDI4vypX/YorZwqrJVyPGRoaaM9OTCt8ePtlQb2sWeROQSC
oKDFlF5ixW/IEgDcQalPtkAJv89fVzLTNHrbtS3tbpoW82WDR62xI8VVXCECAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBQvkXxiA+0dF2u9d4L1E4KF/E8C/zAfBgNVHSME
GDAWgBQIi7tLIeZUfZIkBvxLDo1bZFKgGzAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FWHRiZFhlZVJ6a2ZHOWhrTkZkMnZxZGRRd1Q0UmR2b0Z3bTdadkh0YXUy
QS8wLzA4OEJCQjRCMjFFNjU0N0Q5MjI0MDZGQzRCMEU4RDVCNjQ1MkEwMUIuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMDg4QkJCNEIyMUU2NTQ3RDky
MjQwNkZDNEIwRThENUI2NDUyQTAxQi5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVh0YmRYZWVSemtmRzloa05GZDJ2cWRkUXdUNFJkdm9Gd203WnZIdGF1MkEvMC8z
NDM1MmUzMTM3MzEyZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
ODM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAC2ruTANBgkqhkiG9w0BAQsFAAOCAQEAGv5pnqmR
FgVUINkuAQkYpggeRPAoOTBH5S8kHkz3YPlEG0Fs8Qnkt8RzzERG6BYSpUQ1AkVC
z5J59gZr5QPOZupHIzdqv2ijH8Nc8FWTOFSF9qA7tqyjKJ2qb367fzl2hEe1EHeF
WwjIdFxwaWotkq9tMphXxPcoJ/1nhfdJ6+OQ/w6ctgC0YxjOFGX/LSVIiqMUOnfF
fPxvfeo0fLy66BKiETJfTkmYIaw8CIBjah6XryP74EI0syvCkNz0Lmaps/5PrsPB
w5cDPRX8OICcGCNBEOxjNfTQDxtSmbfUctL0r7ilje77Rw2I3J/2SutOrfXJ9COl
xpjHf23lwxhpXw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:54 2025 by rpki-client