This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32342d3234203d3e20323638343532.roa
File:                     34352e3136302e3234342e302f32342d3234203d3e20323638343532.roa (raw, json)
Hash identifier:          ut8i0jZpnlCMPCB3CJfpQb73ZvU4CADMgCaGjWV1rME=
Subject key identifier:   69:0A:AB:27:56:2B:D5:65:CC:36:C9:38:E9:C5:6E:D3:07:14:79:5C
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       298798774E218D1608F362731C9FC0E85150BCB5
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32342d3234203d3e20323638343532.roa
Signing time:             Wed 26 Nov 2025 18:29:56 +0000
ROA not before:           Wed 26 Nov 2025 18:24:56 +0000
ROA not after:            Wed 25 Nov 2026 18:29:56 +0000
asID:                     268452
IP address blocks:        45.160.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:87:98:77:4e:21:8d:16:08:f3:62:73:1c:9f:c0:e8:51:50:bc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Nov 26 18:24:56 2025 GMT
            Not After : Nov 25 18:29:56 2026 GMT
        Subject: CN=690AAB27562BD565CC36C938E9C56ED30714795C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:e5:66:ee:e4:a6:80:65:7f:8f:a6:fb:84:
                    5e:70:7b:2d:13:1f:c9:a6:df:cc:02:a7:98:95:fe:
                    2a:c6:59:de:ed:fa:16:c4:3e:7c:0e:28:68:28:eb:
                    d0:e9:8f:f2:4b:bf:99:00:8b:86:00:90:5a:ed:ea:
                    ba:b6:26:f7:09:ea:60:5b:e6:8c:2c:a1:ae:b0:24:
                    28:8b:69:5a:b3:9f:a6:cb:b3:6e:ec:94:b2:59:6e:
                    98:fb:d8:e1:62:e9:61:69:23:8b:27:84:32:23:51:
                    16:0e:fd:41:fb:96:4f:24:d7:cc:09:ae:87:bc:2b:
                    9d:60:12:53:95:70:90:ca:76:c8:47:c3:8f:a0:89:
                    64:5e:c0:da:ea:f3:32:35:e3:41:37:a9:73:89:92:
                    0b:fd:d4:80:3c:d4:b3:1a:2d:ed:5b:b7:a8:7d:4a:
                    c5:2e:7b:4a:52:c1:ac:02:7b:aa:90:c4:e8:95:df:
                    3a:6f:b9:f4:ca:a6:1a:2f:bb:60:5c:9e:ad:a8:e2:
                    9f:3e:d6:5e:70:13:cc:b6:11:a1:ec:ac:4d:cd:3f:
                    d6:d2:00:7f:a5:ec:6e:14:e7:46:e3:e2:42:de:60:
                    0d:19:c4:1d:9f:03:fb:cf:98:37:37:21:c9:52:ec:
                    0b:35:17:b6:55:1c:a3:e4:6c:37:25:6b:11:68:17:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0A:AB:27:56:2B:D5:65:CC:36:C9:38:E9:C5:6E:D3:07:14:79:5C
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234342e302f32342d3234203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:65:96:84:57:e0:33:cc:ee:eb:88:f6:af:79:ab:69:37:
         9a:aa:5b:11:07:4f:01:a5:9c:59:b2:82:4a:cd:ed:93:d1:e9:
         c7:2c:03:59:4e:c4:cf:bf:b3:9b:90:62:fd:b7:f7:bb:c9:1b:
         00:d9:a9:6a:01:9f:69:e6:38:5b:c8:0d:c5:76:79:98:ac:2d:
         67:4a:2f:38:44:84:10:09:b3:e9:1f:00:b8:b2:69:47:49:51:
         7d:da:cf:ff:a6:8b:07:07:c2:ef:c9:79:6d:f6:b0:35:bd:11:
         42:f4:27:04:34:27:2a:01:c7:a2:5f:36:44:d9:91:8a:9d:b8:
         b7:62:ee:98:04:19:4d:2b:c2:47:f7:d4:85:16:96:45:3e:d8:
         57:1d:6b:dd:e5:9e:b7:81:aa:92:f7:77:b1:24:ab:ec:0f:60:
         2b:d7:67:2a:56:5e:a9:38:0c:ce:41:e4:48:9e:f7:ca:a1:dd:
         ed:56:2e:ea:d1:be:f7:26:db:ff:6c:17:72:d3:79:cc:3a:89:
         0b:ef:8d:6e:ab:69:d5:bf:74:df:94:5f:78:74:41:27:47:17:
         0e:a8:aa:ed:cd:1b:a1:c9:86:f3:48:9b:31:8d:d0:f1:d8:31:
         e9:0c:13:ba:44:e4:c7:09:75:52:f6:89:0c:5e:22:b3:f6:b6:
         1f:ed:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:19:56 2025 by rpki-client