This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e332e302f32342d3234203d3e20323637353536.roa
File:                     34352e37302e332e302f32342d3234203d3e20323637353536.roa (raw, json)
Hash identifier:          SXrtIq26a58AJ6vC+Poz9MLtVQUqXZSThwce0Nk9ZQ4=
Subject key identifier:   AB:73:45:28:E6:98:9E:DC:19:F2:0A:1C:CD:9E:8C:57:24:EF:7E:58
Certificate issuer:       /CN=D43FCCC0D93682A8E6D24F681773AE282248828D
Certificate serial:       26A74DF870116C79DB517E41F5474409E00CD585
Authority key identifier: D4:3F:CC:C0:D9:36:82:A8:E6:D2:4F:68:17:73:AE:28:22:48:82:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43FCCC0D93682A8E6D24F681773AE282248828D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e332e302f32342d3234203d3e20323637353536.roa
Signing time:             Fri 09 Jan 2026 00:53:42 +0000
ROA not before:           Fri 09 Jan 2026 00:48:42 +0000
ROA not after:            Fri 08 Jan 2027 00:53:42 +0000
asID:                     267556
IP address blocks:        45.70.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/D43FCCC0D93682A8E6D24F681773AE282248828D.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/D43FCCC0D93682A8E6D24F681773AE282248828D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43FCCC0D93682A8E6D24F681773AE282248828D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a7:4d:f8:70:11:6c:79:db:51:7e:41:f5:47:44:09:e0:0c:d5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43FCCC0D93682A8E6D24F681773AE282248828D
        Validity
            Not Before: Jan  9 00:48:42 2026 GMT
            Not After : Jan  8 00:53:42 2027 GMT
        Subject: CN=AB734528E6989EDC19F20A1CCD9E8C5724EF7E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:fc:ee:a9:ff:5a:eb:5c:88:41:ae:59:1c:
                    19:ae:27:15:c4:83:68:67:7f:46:47:d0:93:a2:ec:
                    ae:34:55:00:10:0a:63:ac:c2:f3:58:36:87:d3:d9:
                    0d:6b:bd:49:90:d9:e2:83:5d:5b:19:a4:3c:d4:a7:
                    af:c8:fb:f5:9d:25:52:59:76:19:64:79:c0:a5:a3:
                    9e:5d:fd:b6:86:86:b4:8d:59:9b:45:24:31:7f:ae:
                    f1:5f:13:89:aa:26:13:be:80:8a:44:8f:cd:a2:ec:
                    2a:80:5a:ad:6b:cb:1c:93:9a:65:27:92:d7:52:9f:
                    76:87:69:5e:9c:04:76:53:1f:06:ff:cb:7e:5e:91:
                    76:55:fe:13:cd:05:9b:68:c7:af:32:ae:29:7b:5c:
                    7f:ee:d6:f3:30:30:06:05:aa:f5:c3:ca:f8:1f:89:
                    44:60:da:c3:18:22:59:a4:75:8c:09:49:aa:d7:33:
                    f5:51:41:4f:78:10:3a:aa:e4:91:d8:52:9c:bd:67:
                    81:6c:8a:03:56:25:e1:19:fc:6d:7e:bc:e6:b7:05:
                    cd:67:ff:a5:ec:63:4e:8b:50:db:4e:93:32:8c:f7:
                    cd:0d:3b:4d:f6:45:f5:48:55:59:e4:91:41:db:c0:
                    28:8b:cc:b0:98:1f:7a:df:2c:41:a5:4b:4d:bb:97:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:73:45:28:E6:98:9E:DC:19:F2:0A:1C:CD:9E:8C:57:24:EF:7E:58
            X509v3 Authority Key Identifier:
                keyid:D4:3F:CC:C0:D9:36:82:A8:E6:D2:4F:68:17:73:AE:28:22:48:82:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/D43FCCC0D93682A8E6D24F681773AE282248828D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43FCCC0D93682A8E6D24F681773AE282248828D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e332e302f32342d3234203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:16:74:99:9e:e5:b9:1d:80:34:4b:93:8d:7a:fd:8a:37:
         a9:22:97:31:02:2f:73:11:05:2f:a8:5e:33:73:da:d2:13:bc:
         cc:af:85:4c:c9:16:b9:83:5a:1a:0d:18:ca:66:bd:4c:c7:3a:
         c0:f0:10:2c:6b:02:6e:97:ae:34:f7:49:08:25:4a:18:7c:10:
         53:ad:bb:c3:a9:eb:cc:f1:86:72:00:50:9d:cd:f0:5e:5b:6f:
         31:d6:8a:df:e0:cc:a4:f1:12:df:99:25:cb:ea:1a:6d:c5:bf:
         05:c1:fb:ce:ad:5b:65:12:04:6d:84:99:03:17:0d:36:fd:88:
         5b:36:9c:38:12:92:b6:f8:97:b6:0d:59:4d:6e:18:b1:cd:84:
         91:c6:88:04:05:40:11:c0:ba:7e:58:e3:ed:71:c8:96:86:33:
         3c:00:dc:00:fd:66:13:0c:85:6e:e6:07:6b:9e:66:ee:3c:14:
         1d:b3:94:78:81:b4:d1:c5:12:62:bd:26:b0:38:85:24:d5:58:
         73:8e:1d:78:2d:c9:85:b3:85:87:f2:3d:fd:65:66:3d:77:c9:
         15:5b:85:2e:ac:c5:af:62:40:c0:10:0c:1a:c1:31:cf:73:bd:
         ed:c3:ed:94:37:d8:d3:46:62:14:ac:89:dd:04:f6:ad:05:30:
         71:27:bd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:22:34 2026 by rpki-client