This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa
File:                     34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa (raw, json)
Hash identifier:          4xAWigplWwsyWFriYDLWGATSGlxRV6Tp31xu+nc9W7Y=
Subject key identifier:   37:BB:8F:69:8B:C3:82:E1:C3:CB:54:8E:BC:B3:99:C0:D1:51:08:92
Certificate issuer:       /CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
Certificate serial:       16F104913712A0EA58FEA7F316DD68608941F752
Authority key identifier: 08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa
Signing time:             Thu 04 Dec 2025 17:13:08 +0000
ROA not before:           Thu 04 Dec 2025 17:08:08 +0000
ROA not after:            Thu 03 Dec 2026 17:13:08 +0000
asID:                     268726
IP address blocks:        45.171.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f1:04:91:37:12:a0:ea:58:fe:a7:f3:16:dd:68:60:89:41:f7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
        Validity
            Not Before: Dec  4 17:08:08 2025 GMT
            Not After : Dec  3 17:13:08 2026 GMT
        Subject: CN=37BB8F698BC382E1C3CB548EBCB399C0D1510892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:e8:f4:51:26:3b:c5:6b:1f:d4:a9:36:fb:
                    48:a8:64:ab:c6:8f:1f:12:82:92:3e:e2:41:f9:c0:
                    ea:ff:3c:b3:a2:89:40:d4:db:b2:6f:cc:ea:7d:d1:
                    8d:c1:01:72:8f:6e:f6:7d:9b:91:d3:0d:bf:6e:12:
                    86:1c:85:83:fe:d0:de:49:b7:9d:f4:7d:5d:a4:da:
                    1a:51:22:94:7d:76:d3:d8:c9:9e:9f:bf:3f:fe:97:
                    ab:98:10:d4:ed:8d:b7:2f:e0:02:f6:11:bd:4d:cb:
                    83:6b:cd:c0:cc:83:09:42:1e:36:96:57:e2:67:13:
                    18:d1:13:b9:11:fc:dc:ff:ef:5c:c9:ef:32:d2:4e:
                    97:5a:c6:d7:b4:fd:a9:01:04:f6:32:99:0f:7e:aa:
                    eb:de:be:25:24:7a:9f:5f:07:33:72:6b:8e:54:bb:
                    35:9f:34:a6:e9:fd:2b:1c:4e:4e:58:d3:70:c0:a0:
                    5e:d5:4d:3b:b4:30:9e:83:c9:0e:a7:95:1e:d3:7a:
                    1a:31:3b:58:d8:ef:01:77:e0:75:bb:51:29:6f:bd:
                    78:13:c1:dc:1d:fc:e3:cd:82:51:21:6f:14:a6:35:
                    2f:4b:73:b0:21:d4:38:6e:03:67:57:34:02:c7:a7:
                    7d:ec:81:ca:4b:1e:67:79:9a:ef:25:ba:44:de:4e:
                    60:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BB:8F:69:8B:C3:82:E1:C3:CB:54:8E:BC:B3:99:C0:D1:51:08:92
            X509v3 Authority Key Identifier:
                keyid:08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32342d3234203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:b6:20:34:1f:e1:e6:7d:74:8f:3f:46:76:c1:b0:41:55:e8:
         4e:38:73:c6:7c:28:9f:a1:19:6b:8f:c9:e2:83:e9:e0:d2:3c:
         90:02:cb:19:39:e8:21:1e:90:ab:f1:1c:3f:06:cf:8a:4c:f7:
         67:c3:3a:29:8e:05:59:c0:e9:df:bf:85:6c:4b:b9:9e:a9:f2:
         6f:3c:d4:59:e4:4a:4f:a5:df:3b:d7:4c:be:57:9a:2a:c1:8b:
         a6:f7:2b:5e:da:17:3e:b7:0c:0b:c9:d8:10:21:15:78:32:05:
         cd:d8:0e:a6:f1:7c:b4:84:94:d1:71:ea:2e:d6:5f:b4:ed:27:
         48:af:34:b1:b5:9a:91:4c:71:45:d9:f1:90:25:aa:3d:6f:24:
         45:b3:cb:31:56:cb:7e:43:3f:67:8a:2e:9d:7a:5d:b2:bd:4a:
         13:ab:65:7a:9d:75:2a:ab:67:a7:64:53:be:87:ae:c9:43:f4:
         f4:a8:00:a2:4f:83:d6:ce:c1:fb:2d:4e:ed:db:4c:9d:50:7d:
         f0:7b:08:f8:48:c7:68:21:c4:f8:08:12:fb:74:e0:5a:6a:7c:
         37:a1:6a:d3:cf:6f:3d:52:1a:df:fd:dc:71:ac:e9:6d:2f:6f:
         e2:f3:db:d0:29:3b:f0:17:b8:4f:9e:42:49:44:01:ca:02:69:
         f9:e5:9b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:29:23 2025 by rpki-client