This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa
File:                     34352e3138382e37342e302f32342d3234203d3e20323639353137.roa (raw, json)
Hash identifier:          AiI1mI3ygnnYVUPMsHSwu4TGkjiTpj3+oVnjAdgF1uM=
Subject key identifier:   10:56:72:FD:E7:19:CE:FA:E1:25:4C:7B:D4:1C:E8:57:D9:63:71:4D
Certificate issuer:       /CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Certificate serial:       31C1C2B42BA15A4E47FECE0177D371C30FFCAF68
Authority key identifier: F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa
Signing time:             Sun 18 Jan 2026 14:00:33 +0000
ROA not before:           Sun 18 Jan 2026 13:55:33 +0000
ROA not after:            Sun 17 Jan 2027 14:00:33 +0000
asID:                     269517
IP address blocks:        45.188.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c1:c2:b4:2b:a1:5a:4e:47:fe:ce:01:77:d3:71:c3:0f:fc:af:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
        Validity
            Not Before: Jan 18 13:55:33 2026 GMT
            Not After : Jan 17 14:00:33 2027 GMT
        Subject: CN=105672FDE719CEFAE1254C7BD41CE857D963714D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:40:3d:1a:a3:77:4a:d4:e8:77:e6:3c:8d:
                    b3:32:6e:67:9f:44:1c:d1:59:34:1f:b3:93:66:48:
                    1d:db:bc:6c:99:bc:ce:13:76:63:2f:34:75:bb:05:
                    14:15:87:29:25:f1:e9:f5:18:41:79:5a:31:5a:4c:
                    ad:cd:5f:e9:2d:69:08:46:ee:8c:32:07:73:3d:36:
                    4d:97:5b:1c:7c:a6:20:a7:da:6f:8f:ae:b4:91:1a:
                    6a:78:4f:5b:2d:ca:a8:42:12:a0:7f:62:de:92:c9:
                    3d:8e:d6:e7:08:a7:28:45:40:cd:70:15:df:8d:18:
                    02:91:61:d7:89:59:5b:a8:8a:1c:44:d5:b9:c0:04:
                    1f:07:67:60:ca:d6:c7:9d:b3:d6:8b:6d:a7:85:ea:
                    8c:0d:7c:7f:1c:c2:67:a8:1c:c8:b4:90:25:59:0f:
                    2d:f1:27:66:c4:89:50:59:dc:68:a5:8c:c2:a3:5d:
                    e6:a1:34:7e:9a:41:15:dd:e3:4f:7f:b0:13:09:99:
                    9d:41:8f:88:82:07:5a:a1:48:8b:02:a7:71:59:4a:
                    5f:ce:c9:2b:b7:e1:4c:39:56:80:77:5c:ce:8c:f7:
                    07:fc:d6:cc:86:c9:9b:3f:39:7c:9e:85:8e:08:a1:
                    e4:50:c5:3e:f8:74:0b:51:f8:31:8e:1b:78:88:b8:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:56:72:FD:E7:19:CE:FA:E1:25:4C:7B:D4:1C:E8:57:D9:63:71:4D
            X509v3 Authority Key Identifier:
                keyid:F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:1f:da:0d:80:49:65:83:93:a0:03:0d:8d:1b:f8:85:de:69:
         ba:a3:0f:f4:3e:46:9c:13:29:50:ad:90:3c:9e:57:4c:15:8b:
         ef:c3:bc:12:fd:12:5e:06:8d:75:05:c4:79:da:ec:f4:53:c7:
         94:44:61:6b:55:b4:c8:3b:da:72:e3:a7:d1:b7:19:c7:b7:89:
         c5:1d:d2:2e:1e:f8:ab:19:ab:8c:c1:f2:d0:63:66:32:f6:0b:
         2d:03:5a:9e:f5:44:bc:07:dc:fb:07:43:bd:f4:60:cf:ae:b3:
         cc:1e:b2:a2:4d:12:f9:7f:b0:f2:aa:df:be:da:fc:7c:ae:7d:
         02:8f:f5:26:42:a3:8c:4e:e5:8c:1c:c2:3a:21:24:f0:f9:b3:
         59:91:65:9e:d8:f4:95:7d:e5:cf:23:ae:bb:f2:f7:43:14:d4:
         d3:d8:27:a8:9a:5d:1d:47:d5:57:b8:2f:02:98:12:83:4f:8a:
         49:ba:af:50:d1:2e:9b:df:00:14:4e:d1:c9:7a:05:d3:72:01:
         7f:51:22:40:d0:3e:4b:b8:27:dd:bb:15:c2:0f:9b:ce:6c:fc:
         10:74:17:8b:b4:dd:09:a1:56:53:03:3f:af:24:bd:21:9b:27:
         9c:e6:a2:d5:c5:6a:d3:11:a7:fc:f6:6c:bd:9a:dd:49:91:32:
         9b:2d:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:54:53 2026 by rpki-client