This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/34352e3232342e3234382e302f32322d3332203d3e20323632353239.roa
File:                     34352e3232342e3234382e302f32322d3332203d3e20323632353239.roa (raw, json)
Hash identifier:          RTd0NorPZWKSCw8xNP7VXIg65ZOChPP8mV571TjPT5g=
Subject key identifier:   00:4B:E2:57:C9:27:2C:7C:17:63:4E:C2:47:51:45:62:B9:8F:9A:ED
Certificate issuer:       /CN=EFBFF18693AA724D3ACD35EE8D27150D4F9A897C
Certificate serial:       51503C72B6703D94608800B832A0DE70D57D6FB1
Authority key identifier: EF:BF:F1:86:93:AA:72:4D:3A:CD:35:EE:8D:27:15:0D:4F:9A:89:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/34352e3232342e3234382e302f32322d3332203d3e20323632353239.roa
Signing time:             Mon 01 Dec 2025 12:32:03 +0000
ROA not before:           Mon 01 Dec 2025 12:27:03 +0000
ROA not after:            Mon 30 Nov 2026 12:32:03 +0000
asID:                     262529
IP address blocks:        45.224.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.crl
                          rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:50:3c:72:b6:70:3d:94:60:88:00:b8:32:a0:de:70:d5:7d:6f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFBFF18693AA724D3ACD35EE8D27150D4F9A897C
        Validity
            Not Before: Dec  1 12:27:03 2025 GMT
            Not After : Nov 30 12:32:03 2026 GMT
        Subject: CN=004BE257C9272C7C17634EC247514562B98F9AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:e7:9c:e4:c5:db:5f:34:c7:d1:bd:3b:1e:
                    55:89:f2:27:79:5c:90:28:22:96:6f:79:5a:68:0d:
                    74:7c:ff:1f:19:84:07:3a:70:68:d7:60:60:10:e3:
                    2e:52:f9:04:7a:67:b7:10:eb:12:c7:03:53:bb:2c:
                    bc:35:46:11:6f:0d:b2:cd:51:57:c8:5e:89:57:ba:
                    36:a1:c7:d1:1c:fc:c3:d6:ec:86:74:32:e1:20:ad:
                    36:aa:a5:43:d2:08:b3:e7:0c:c4:02:67:be:14:56:
                    90:9e:90:53:2b:c1:3f:97:47:71:40:ef:ff:55:65:
                    2e:33:c2:16:f9:f2:1d:bf:33:e9:07:c6:68:6b:8c:
                    b4:63:60:33:3a:9b:c6:cd:ac:72:50:3e:ab:f4:d5:
                    88:93:e6:cb:f8:ae:07:12:ac:f9:31:5d:4a:3b:90:
                    b8:cb:17:5a:bb:1c:c9:e4:b7:5f:cc:dc:2d:2d:07:
                    ff:dc:75:bf:ef:b8:f5:26:e2:02:56:6f:c1:dd:90:
                    6b:0b:0a:d9:9b:58:a2:b8:cf:86:ce:07:8b:c9:20:
                    1d:24:1d:6d:3a:a8:98:7c:30:0e:b1:de:47:48:cf:
                    f1:14:82:8e:cc:9f:ef:4f:4c:00:17:7a:4e:ce:40:
                    f0:c0:3f:e9:1f:90:ce:07:ed:1b:72:e4:64:f6:ab:
                    93:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4B:E2:57:C9:27:2C:7C:17:63:4E:C2:47:51:45:62:B9:8F:9A:ED
            X509v3 Authority Key Identifier:
                keyid:EF:BF:F1:86:93:AA:72:4D:3A:CD:35:EE:8D:27:15:0D:4F:9A:89:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/34352e3232342e3234382e302f32322d3332203d3e20323632353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e0:88:e8:5a:d2:54:e4:15:e2:7e:a0:3a:b5:d4:ce:12:d0:ad:
         f4:49:59:12:26:45:ee:a9:d4:67:25:07:85:a4:7c:f3:9d:48:
         ce:a3:7a:a9:0d:50:27:a0:5f:0d:30:2a:60:0d:13:9f:fc:9f:
         91:09:b3:6d:7d:69:cd:b6:a7:80:51:fd:54:50:5f:84:88:38:
         74:19:79:27:8d:fd:59:a9:b6:3c:32:3c:3e:9f:d4:dc:e7:58:
         17:ff:d9:db:a0:94:26:dc:42:b7:58:01:d4:a5:c5:09:83:6a:
         b7:84:e5:97:8a:fc:38:55:2e:82:4a:7a:d2:ff:b2:94:f2:40:
         00:9c:d0:d5:0c:00:33:3f:86:5d:bc:e2:a5:87:70:4b:67:88:
         92:a8:b4:2f:e7:be:4c:27:10:35:73:42:b6:d8:48:db:9f:ce:
         9f:b2:2d:b9:ed:41:bb:c7:9b:24:ef:be:51:57:d6:36:e2:2c:
         1b:bd:bf:ab:ee:29:25:3d:a3:d2:bc:24:3d:b0:c4:06:47:7c:
         87:21:0e:0f:ae:0c:b4:f3:e8:74:bc:3e:d8:c5:82:01:87:70:
         f0:8b:45:96:49:cf:05:62:32:09:f6:39:4d:17:40:92:df:2d:
         c0:2c:ba:7b:66:9e:8b:45:a8:ca:f1:d2:bd:19:2c:91:a0:59:
         39:7e:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:08 2025 by rpki-client