This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa
File:                     34352e37302e322e302f32342d3234203d3e20323637353536.roa (raw, json)
Hash identifier:          mkaTeUCYnnSnZsNAaexmQ8mcCOxSQMVeo7TWJ5FBXfM=
Subject key identifier:   4F:1B:61:92:D9:79:00:84:E6:A9:4E:E2:C3:DF:0E:43:FC:59:03:1C
Certificate issuer:       /CN=D43FCCC0D93682A8E6D24F681773AE282248828D
Certificate serial:       2630D1CC2ECA56CBE7F2A5DE78AFEA70BC51F8EB
Authority key identifier: D4:3F:CC:C0:D9:36:82:A8:E6:D2:4F:68:17:73:AE:28:22:48:82:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43FCCC0D93682A8E6D24F681773AE282248828D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa
Signing time:             Fri 09 Jan 2026 00:53:41 +0000
ROA not before:           Fri 09 Jan 2026 00:48:41 +0000
ROA not after:            Fri 08 Jan 2027 00:53:41 +0000
asID:                     267556
IP address blocks:        45.70.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/D43FCCC0D93682A8E6D24F681773AE282248828D.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/D43FCCC0D93682A8E6D24F681773AE282248828D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43FCCC0D93682A8E6D24F681773AE282248828D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:30:d1:cc:2e:ca:56:cb:e7:f2:a5:de:78:af:ea:70:bc:51:f8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43FCCC0D93682A8E6D24F681773AE282248828D
        Validity
            Not Before: Jan  9 00:48:41 2026 GMT
            Not After : Jan  8 00:53:41 2027 GMT
        Subject: CN=4F1B6192D9790084E6A94EE2C3DF0E43FC59031C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:91:72:12:03:3c:99:cf:91:d1:2d:9c:8b:a7:
                    fc:13:47:b4:2a:8e:3c:f5:c7:18:5c:27:12:5e:fa:
                    d9:89:c7:fe:07:e5:dc:d6:e0:74:eb:88:07:2a:42:
                    4d:7b:3f:b8:9e:b5:d0:f4:e6:a4:53:fc:df:8f:37:
                    ac:b4:b0:60:f7:35:e0:11:30:37:20:24:57:c4:e9:
                    32:36:3f:c2:3e:53:56:1b:10:67:2e:81:50:28:31:
                    90:11:9b:96:3f:9a:3b:3e:9d:e1:60:7f:3c:89:83:
                    50:d7:73:89:e2:75:25:5a:73:8d:b8:77:a9:39:59:
                    ee:56:23:50:87:a7:cf:f3:5c:11:51:67:79:51:90:
                    e5:ef:eb:1c:96:8b:b3:9b:b8:fb:a4:2d:c3:84:b7:
                    3f:6c:44:1f:90:b1:39:e9:4c:0d:4b:32:e0:6b:83:
                    d2:db:28:9d:87:65:82:0b:d6:6a:9e:bb:f3:2e:22:
                    61:d1:de:21:1f:34:2d:0c:4d:39:17:06:d4:95:79:
                    09:69:f0:f2:a2:54:1e:9b:f6:df:0c:74:e4:d2:e5:
                    66:d1:5a:df:7c:bf:9c:75:17:8f:c0:05:f0:b7:a2:
                    c4:23:4b:38:a9:26:54:06:e0:d5:15:4e:31:2c:27:
                    7f:36:47:68:1e:3a:11:c0:47:ad:7e:75:8d:63:88:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1B:61:92:D9:79:00:84:E6:A9:4E:E2:C3:DF:0E:43:FC:59:03:1C
            X509v3 Authority Key Identifier:
                keyid:D4:3F:CC:C0:D9:36:82:A8:E6:D2:4F:68:17:73:AE:28:22:48:82:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/D43FCCC0D93682A8E6D24F681773AE282248828D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43FCCC0D93682A8E6D24F681773AE282248828D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e322e302f32342d3234203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:74:74:18:8c:37:d7:3a:d1:d0:ac:76:cc:29:1e:f9:4c:
         26:1a:91:80:55:62:56:e3:2e:6f:09:f2:c6:a1:2b:78:d2:62:
         29:20:f6:38:a2:f1:79:e5:a8:e6:c1:39:51:78:6e:63:11:19:
         ee:db:ae:36:df:be:43:6a:8a:ba:a5:37:3d:a2:29:81:c3:b5:
         30:72:3f:59:7d:f4:d0:c7:cb:5b:ed:b7:a7:52:66:c2:b6:84:
         6b:31:4f:9f:5c:8e:5c:ab:e4:89:75:39:2e:a7:c5:51:38:6f:
         aa:96:a4:c4:ab:29:d9:e9:c2:59:0c:df:84:e0:d7:0f:cb:b1:
         25:6b:fb:07:91:b5:17:16:d1:a8:ac:d7:1c:3f:a8:e5:ba:7e:
         64:76:51:8e:34:63:4c:d4:21:dd:5a:4e:dd:9f:46:0a:41:66:
         e0:dd:09:b7:56:13:aa:d9:2b:54:3a:fe:db:ed:a9:63:7d:a7:
         d0:68:8d:b8:2c:28:ce:94:84:20:79:dd:b5:a4:42:7e:0a:89:
         84:ad:d1:88:e1:91:cc:70:5f:d3:80:da:1d:a4:7f:00:5e:69:
         d6:27:40:da:85:fe:d9:4f:f1:86:9a:a7:d0:a5:09:9e:a9:3a:
         91:e4:95:4a:d3:53:66:6b:f7:f2:e7:f7:d6:ca:99:02:fc:23:
         65:c3:45:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:22:30 2026 by rpki-client