This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3232203d3e20323639353137.roa
File:                     34352e3138382e37322e302f32322d3232203d3e20323639353137.roa (raw, json)
Hash identifier:          8c1OAa/q44cRycXu4/gkJjw3CyIXr2K7QR9HVVySTFM=
Subject key identifier:   3F:2B:17:79:E8:28:C8:6F:5D:1E:BD:A2:F0:65:0C:EB:C8:32:B7:A6
Certificate issuer:       /CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Certificate serial:       7EE78636C26929E25350DF2E4769189EB9734D64
Authority key identifier: F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3232203d3e20323639353137.roa
Signing time:             Sun 18 Jan 2026 14:00:35 +0000
ROA not before:           Sun 18 Jan 2026 13:55:35 +0000
ROA not after:            Sun 17 Jan 2027 14:00:35 +0000
asID:                     269517
IP address blocks:        45.188.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e7:86:36:c2:69:29:e2:53:50:df:2e:47:69:18:9e:b9:73:4d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
        Validity
            Not Before: Jan 18 13:55:35 2026 GMT
            Not After : Jan 17 14:00:35 2027 GMT
        Subject: CN=3F2B1779E828C86F5D1EBDA2F0650CEBC832B7A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:e5:47:2b:61:d1:21:e4:2d:ce:03:13:aa:
                    eb:5b:37:c3:0b:ac:b5:13:8f:98:3d:20:f2:3a:9b:
                    e4:9e:46:8f:71:05:cb:24:3c:eb:b5:3e:f1:d1:80:
                    1f:e5:fb:b6:94:3e:57:eb:d3:bb:fb:c2:97:ae:e5:
                    ad:a2:e3:91:72:02:38:28:b7:7b:45:de:bb:cb:ff:
                    be:6a:fc:41:30:46:ca:4e:d2:3e:3c:6e:4e:27:29:
                    e3:d6:69:e9:dd:dc:35:93:a0:04:1b:6f:c3:1f:a3:
                    b7:ff:48:ee:17:aa:2b:27:55:86:83:89:12:fa:a2:
                    7e:4f:b8:40:1d:56:d3:bd:87:46:bc:e7:f7:7d:3b:
                    54:19:e8:5c:7a:29:b8:9c:0f:50:7e:d3:1e:86:b6:
                    3f:15:a3:12:a3:39:b5:db:bb:54:c2:0a:23:ec:e1:
                    7b:00:f0:db:3a:e2:2c:86:32:8f:1b:4e:8a:0c:44:
                    10:5a:c3:3e:46:24:30:02:a5:22:b8:04:e3:0a:e3:
                    d8:d3:87:21:34:8e:6d:d5:8a:d2:eb:9f:67:73:12:
                    eb:48:cc:b1:f1:84:32:12:a2:65:8e:a8:d5:de:16:
                    d2:30:d4:9c:84:c9:8f:f4:5c:ac:13:b8:24:f1:e7:
                    cc:d5:35:4e:79:89:2d:0c:0b:45:d5:df:cf:a4:42:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2B:17:79:E8:28:C8:6F:5D:1E:BD:A2:F0:65:0C:EB:C8:32:B7:A6
            X509v3 Authority Key Identifier:
                keyid:F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3232203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d0:7e:ca:b0:11:34:e9:84:38:76:60:d6:41:3a:a8:0a:5b:
         bb:e3:15:d6:10:56:a6:a7:30:bb:af:da:ba:c3:0e:f5:92:2b:
         4a:b8:0d:98:80:a0:4c:80:89:09:25:9b:a8:36:e0:60:6c:7a:
         23:cd:89:3a:c6:23:23:b1:a5:49:32:44:26:9f:00:52:7c:20:
         c0:75:ba:74:94:0e:17:8d:54:df:73:a8:c3:9f:dd:51:f2:ee:
         51:4b:b5:24:84:f3:9e:11:37:01:10:3c:f9:94:71:f3:d2:d6:
         32:a2:2c:c5:72:34:fd:f9:c8:9c:e1:b3:f2:e0:63:2d:c3:52:
         d4:2c:73:90:6a:be:09:11:3d:6e:49:49:b0:0b:2c:71:ba:43:
         16:96:24:70:18:8a:15:f7:6d:c9:31:ff:cf:4f:72:4a:b3:91:
         98:28:12:06:e5:4b:0a:ff:b7:fd:07:7d:3b:04:cd:78:83:c0:
         e8:c3:75:8e:05:6c:f9:54:3a:5b:a4:59:52:3c:f4:1e:9d:14:
         e9:ae:fe:42:e3:31:a9:8a:75:2a:06:a9:39:6a:04:48:06:f2:
         5a:90:38:b6:91:ab:a7:d0:d6:00:6b:3d:7a:3e:eb:df:58:ab:
         54:6f:88:79:09:36:ab:81:2b:93:19:cd:b6:26:07:c1:77:22:
         e2:2b:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:48:46 2026 by rpki-client