This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39392e302f32342d3234203d3e20323638343633.roa
File:                     34352e3136312e39392e302f32342d3234203d3e20323638343633.roa (raw, json)
Hash identifier:          h5YOs1Qw6Njaz92DrKd0faMks4dIWduYfCEB56lIwAY=
Subject key identifier:   F6:C5:5A:CA:96:05:5A:66:2C:B2:03:F3:AE:18:E6:64:09:E9:90:4C
Certificate issuer:       /CN=A0E5732D5CB2354F7128E1B6A750407464415454
Certificate serial:       38BE87DC36095CF3A58E3EE4977395AE88257841
Authority key identifier: A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39392e302f32342d3234203d3e20323638343633.roa
Signing time:             Mon 17 Nov 2025 13:37:07 +0000
ROA not before:           Mon 17 Nov 2025 13:32:07 +0000
ROA not after:            Mon 16 Nov 2026 13:37:07 +0000
asID:                     268463
IP address blocks:        45.161.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:be:87:dc:36:09:5c:f3:a5:8e:3e:e4:97:73:95:ae:88:25:78:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0E5732D5CB2354F7128E1B6A750407464415454
        Validity
            Not Before: Nov 17 13:32:07 2025 GMT
            Not After : Nov 16 13:37:07 2026 GMT
        Subject: CN=F6C55ACA96055A662CB203F3AE18E66409E9904C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e9:70:7f:fb:bc:82:03:6c:68:b4:08:9d:ad:
                    64:0c:7c:17:14:58:88:1c:3a:f9:d9:6c:24:c5:26:
                    07:15:06:6a:1b:22:f7:70:bf:be:94:4c:87:b1:67:
                    73:5d:f3:81:b1:77:2b:2b:d7:10:d7:5d:ef:80:73:
                    93:d6:25:a2:a6:71:15:21:9f:b6:76:3a:fa:44:80:
                    e8:35:4e:cf:56:7b:3b:59:ad:7e:5f:d2:9c:62:f4:
                    c8:55:38:82:bc:57:7c:79:18:37:79:e6:cf:da:de:
                    27:0c:fc:5f:b4:81:04:01:ff:f3:fd:9d:3c:d7:42:
                    65:fa:d2:7f:2f:ca:68:4b:66:28:1c:3c:7b:56:98:
                    f7:14:70:fa:a5:d3:12:09:9f:68:2b:81:08:82:ce:
                    69:81:e2:a2:e8:02:73:2f:16:ef:3f:11:ba:a2:5b:
                    0f:57:44:01:3e:97:21:71:7b:64:0a:4c:2a:d5:3b:
                    ec:a7:fd:4a:e1:a7:5c:29:48:30:12:43:47:44:e6:
                    d6:38:f4:7e:9f:89:c2:7b:f7:50:75:45:f6:7e:2e:
                    e7:2e:70:fc:e0:18:51:37:54:33:7c:d5:d0:4d:92:
                    26:0b:30:be:7b:25:1b:15:23:a5:b1:6a:dd:56:f3:
                    76:7d:cc:3c:1a:7d:62:cc:bf:86:6b:08:2a:e2:ad:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C5:5A:CA:96:05:5A:66:2C:B2:03:F3:AE:18:E6:64:09:E9:90:4C
            X509v3 Authority Key Identifier:
                keyid:A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39392e302f32342d3234203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:f5:10:a1:4b:32:d8:4e:8b:19:8e:6f:f4:29:98:53:5b:
         78:ae:95:1b:c7:17:ec:57:78:9a:4f:75:51:91:cc:48:56:84:
         8e:75:96:97:b3:a8:bb:fc:96:a7:4d:06:5a:07:2b:56:8e:1a:
         97:3d:56:b9:06:5a:db:d1:b4:ad:ba:73:b8:04:3d:79:41:02:
         30:a7:f2:69:a3:e0:d8:b4:ef:d0:e5:19:c2:cc:df:41:4a:f3:
         8e:70:9e:9a:4e:8c:a9:4d:4b:05:cf:ad:95:29:8d:55:98:fc:
         55:98:24:2b:91:61:65:ba:7d:56:ac:61:aa:04:20:6a:35:de:
         bd:b4:db:d7:b3:fc:58:64:1c:2b:2a:58:a9:f3:46:8a:8a:9c:
         ec:34:42:08:e3:02:af:02:8d:e4:83:21:da:02:f2:34:46:cc:
         0f:db:7c:19:31:36:0e:f8:17:07:99:9a:52:98:70:ca:25:fc:
         8e:2a:8b:b2:bd:eb:27:22:af:44:72:a2:30:a2:43:40:89:73:
         72:6f:60:73:19:c4:42:15:6d:c7:e1:b1:8e:72:52:76:9b:66:
         76:5f:a7:98:b8:df:4b:31:56:80:ef:b5:fb:1d:6d:36:2c:38:
         6b:9c:ce:d8:70:f0:ae:49:89:d3:5c:d4:fc:18:13:cb:45:29:
         b7:d7:c8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:36:58 2025 by rpki-client