This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHzwLF7EspmpdaxNed9njaRGk8PveTwCnfTE1AtxroLe/0/34352e352e3139322e302f32322d3332203d3e20323636313034.roa
File:                     34352e352e3139322e302f32322d3332203d3e20323636313034.roa (raw, json)
Hash identifier:          5utCuH+d7kXjt4qf8HdODaY1ApJgD3XHcZvj/vQQbBA=
Subject key identifier:   8B:E6:A2:2C:B3:36:99:D4:2A:99:F0:14:B9:4F:3C:1C:76:01:B5:6F
Certificate issuer:       /CN=5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8
Certificate serial:       38397FD50A41CAEA16DFFE414F57A32FDCF465E5
Authority key identifier: 5A:5C:15:05:E1:20:E2:F9:F3:6D:17:FD:29:B2:D0:9F:BF:F7:26:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHzwLF7EspmpdaxNed9njaRGk8PveTwCnfTE1AtxroLe/0/34352e352e3139322e302f32322d3332203d3e20323636313034.roa
Signing time:             Wed 12 Nov 2025 15:56:12 +0000
ROA not before:           Wed 12 Nov 2025 15:51:12 +0000
ROA not after:            Wed 11 Nov 2026 15:56:12 +0000
asID:                     266104
IP address blocks:        45.5.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHzwLF7EspmpdaxNed9njaRGk8PveTwCnfTE1AtxroLe/0/5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8.crl
                          rsync://rpki-repo.registro.br/repo/FHzwLF7EspmpdaxNed9njaRGk8PveTwCnfTE1AtxroLe/0/5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:39:7f:d5:0a:41:ca:ea:16:df:fe:41:4f:57:a3:2f:dc:f4:65:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8
        Validity
            Not Before: Nov 12 15:51:12 2025 GMT
            Not After : Nov 11 15:56:12 2026 GMT
        Subject: CN=8BE6A22CB33699D42A99F014B94F3C1C7601B56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:43:ec:70:9e:d0:f5:34:8d:9c:5f:f6:25:
                    3b:4f:51:2f:e7:bd:7b:b4:09:26:bc:e2:54:3d:26:
                    32:83:24:2f:a0:5d:c4:e8:9c:b3:f0:a0:76:6d:c0:
                    5f:f4:4c:bf:4f:79:dc:b7:a1:e1:31:18:96:b4:0c:
                    5e:ba:4a:80:4d:20:a0:cf:eb:51:d3:77:bc:73:26:
                    b6:c4:92:c1:69:c3:56:0e:7d:07:b9:6e:f8:82:57:
                    0e:28:d6:e5:ca:db:9d:3b:af:1b:e7:05:44:9a:49:
                    5e:ca:09:d9:5d:e3:2c:63:9f:42:cd:f8:b7:70:83:
                    d4:79:80:1a:1c:90:fc:d6:3a:ef:3a:55:5d:af:00:
                    bd:3a:ed:62:f0:8e:86:cd:96:a1:83:bb:1f:bb:49:
                    d0:90:eb:d7:4c:d1:31:81:a8:b3:cb:37:f0:7d:aa:
                    b7:5b:df:13:d3:21:e3:7d:0b:e5:09:37:e9:9b:c5:
                    57:74:e9:85:64:cb:c8:0e:73:74:c0:d0:4f:d5:60:
                    69:cc:7d:a5:98:29:53:aa:f1:03:06:b2:d1:41:86:
                    5e:93:81:62:08:16:6e:83:57:24:d9:f8:7d:e9:13:
                    08:45:a8:96:f7:aa:0c:76:d9:0c:31:84:82:83:74:
                    a3:d8:b3:75:18:f0:07:b1:34:95:2d:c3:9a:31:8a:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E6:A2:2C:B3:36:99:D4:2A:99:F0:14:B9:4F:3C:1C:76:01:B5:6F
            X509v3 Authority Key Identifier:
                keyid:5A:5C:15:05:E1:20:E2:F9:F3:6D:17:FD:29:B2:D0:9F:BF:F7:26:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHzwLF7EspmpdaxNed9njaRGk8PveTwCnfTE1AtxroLe/0/5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHzwLF7EspmpdaxNed9njaRGk8PveTwCnfTE1AtxroLe/0/34352e352e3139322e302f32322d3332203d3e20323636313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:db:fd:4c:87:39:00:bb:49:23:05:61:88:9c:22:e1:4e:a9:
         e0:44:f3:1a:c4:5a:7a:72:2c:b1:dd:4d:f1:c0:5a:d3:60:33:
         4c:82:d8:0a:64:1a:59:a7:c0:9d:15:35:94:22:ec:42:f3:55:
         9d:f5:06:aa:7b:fb:a5:ea:60:0f:01:49:37:18:f4:06:62:92:
         78:f7:7d:ff:a1:10:3b:43:df:02:e7:e0:4a:d6:fe:ba:a8:04:
         b7:b5:ab:4a:a9:ce:5a:ff:94:ba:61:c1:f3:b7:8d:5d:43:e9:
         04:47:bd:a9:4c:8e:ab:83:42:97:7c:a6:97:66:77:76:06:f8:
         ba:2d:84:0e:d2:e7:30:c7:6c:57:3f:23:42:b5:d9:4b:73:e1:
         09:36:b0:87:ca:b8:d2:aa:a3:ff:e3:5a:9e:c3:0c:1b:d0:b0:
         07:c5:48:f0:cf:f7:be:6c:d0:ff:7a:21:d7:52:64:11:c4:6f:
         9a:1f:0d:35:9b:27:c5:41:60:3a:b2:34:f7:34:e0:47:93:ad:
         ca:58:18:70:34:f3:b9:6b:8a:5d:3f:69:2e:ec:ee:2c:b0:7c:
         c1:d0:0f:aa:86:0c:e8:14:3d:32:42:0c:a7:d6:fe:50:ae:dd:
         ec:f1:11:ad:6b:5d:38:50:a5:0d:ea:37:a2:6b:7a:d5:18:70:
         11:25:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:37 2025 by rpki-client