This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37352e302f32342d3234203d3e20323639353137.roa
File:                     34352e3138382e37352e302f32342d3234203d3e20323639353137.roa (raw, json)
Hash identifier:          3TLq5nInqduR9HmAK3ZSqthW8BNjmJ/GbMV3nGVaDwE=
Subject key identifier:   EF:36:85:D3:04:F4:5E:39:36:A6:4D:6A:3E:88:76:EB:DE:E2:75:00
Certificate issuer:       /CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Certificate serial:       0CAF171D79A19807ABDC5A31B8B05B25BC721EA9
Authority key identifier: F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37352e302f32342d3234203d3e20323639353137.roa
Signing time:             Sun 18 Jan 2026 14:00:35 +0000
ROA not before:           Sun 18 Jan 2026 13:55:35 +0000
ROA not after:            Sun 17 Jan 2027 14:00:35 +0000
asID:                     269517
IP address blocks:        45.188.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:af:17:1d:79:a1:98:07:ab:dc:5a:31:b8:b0:5b:25:bc:72:1e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
        Validity
            Not Before: Jan 18 13:55:35 2026 GMT
            Not After : Jan 17 14:00:35 2027 GMT
        Subject: CN=EF3685D304F45E3936A64D6A3E8876EBDEE27500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:e9:ea:2d:26:b3:13:9c:ea:db:c9:bd:b8:
                    a4:21:e0:9c:ca:1f:75:9f:85:a0:64:c5:15:3d:52:
                    b2:22:91:02:9d:26:dc:cc:1b:bc:94:3c:e6:63:2f:
                    43:63:e6:35:7b:32:a5:12:74:55:82:fb:ae:1e:09:
                    e9:22:52:68:0d:78:96:74:39:61:77:58:41:c9:a9:
                    d1:22:20:cc:6b:be:c1:ef:d6:da:ef:19:af:80:26:
                    7d:83:7e:1a:39:da:22:48:c8:00:ee:d3:41:7f:1a:
                    03:d9:9d:20:45:58:5b:56:6a:4b:c3:ef:1e:d0:9c:
                    90:d2:9f:c8:6c:da:a4:25:63:68:27:fb:d4:15:e1:
                    dc:3a:b3:dd:88:78:1f:69:e7:b4:24:f4:a3:9d:26:
                    34:b2:91:cc:51:a4:fc:0f:e2:9d:37:e7:9e:60:c1:
                    5a:a6:16:79:97:83:8b:5e:6f:69:e4:8a:52:e6:1e:
                    4c:1b:98:24:a8:d2:9a:39:01:28:60:2b:f7:fa:e3:
                    3e:2c:a4:90:7d:b3:9f:8f:fa:a1:a7:be:e6:dc:5a:
                    da:54:05:2a:ee:35:d9:5d:f5:17:b3:33:0f:f1:15:
                    1a:31:94:56:d0:b9:28:e0:c8:9b:f6:b7:09:38:8b:
                    3f:32:d4:66:83:25:06:82:ac:72:54:13:ee:04:de:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:36:85:D3:04:F4:5E:39:36:A6:4D:6A:3E:88:76:EB:DE:E2:75:00
            X509v3 Authority Key Identifier:
                keyid:F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37352e302f32342d3234203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a8:29:e7:52:27:95:38:e6:1e:9c:51:98:e1:61:40:e2:98:
         fb:10:a2:ff:a2:34:8f:32:d5:cd:9d:0d:62:46:2e:3b:3c:8f:
         1f:c0:88:c7:7f:dd:b3:24:e3:4e:19:24:39:f5:8c:7b:53:7e:
         ce:86:04:14:58:e1:5d:63:65:c2:bd:6d:0a:14:09:65:c6:ad:
         df:a9:ee:b4:22:4a:27:f0:c6:f2:72:2a:d4:c5:37:61:7d:ab:
         2d:4a:c2:f5:68:c5:ea:5c:84:a4:75:2c:a3:3f:f4:f9:18:a4:
         8e:88:51:54:b4:7c:07:0d:cd:6b:ff:f4:a5:4e:04:22:40:6c:
         88:07:bb:4e:c0:04:3a:2d:51:d4:08:9d:b2:04:cc:e7:51:f9:
         cf:58:34:84:a8:21:47:68:f8:6b:2d:2e:e0:ad:4a:2e:25:e9:
         b0:56:ac:19:ba:4c:0f:74:69:1d:b3:39:eb:6b:a5:51:a5:ff:
         71:74:06:b8:91:65:15:43:30:0c:15:47:5e:11:2f:e4:22:9f:
         27:31:a2:ad:df:ce:7a:d0:24:fc:ef:e0:58:e8:14:aa:58:01:
         d8:b1:40:9d:2f:2e:1b:4f:76:c9:2f:90:08:ff:f5:9b:f7:5b:
         e0:aa:c4:24:f3:c4:b0:3f:6d:7a:87:71:2b:31:1a:fa:90:93:
         d9:a4:60:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:32 2026 by rpki-client