This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135302e302f32332d3233203d3e20323638333732.roa
File:                     34352e3233392e3135302e302f32332d3233203d3e20323638333732.roa (raw, json)
Hash identifier:          /z18wK6ssmUX9L/o6MkMXDBUZiJOeck6DSpuqBVJvks=
Subject key identifier:   2A:DE:2E:05:11:49:80:AA:F8:2E:75:9C:C4:7A:70:19:DC:97:41:D8
Certificate issuer:       /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial:       3C1556C0E0D699AAF5EB24AB65E17FE59E639823
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135302e302f32332d3233203d3e20323638333732.roa
Signing time:             Tue 11 Nov 2025 12:59:51 +0000
ROA not before:           Tue 11 Nov 2025 12:54:51 +0000
ROA not after:            Tue 10 Nov 2026 12:59:51 +0000
asID:                     268372
IP address blocks:        45.239.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
                          rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:15:56:c0:e0:d6:99:aa:f5:eb:24:ab:65:e1:7f:e5:9e:63:98:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
        Validity
            Not Before: Nov 11 12:54:51 2025 GMT
            Not After : Nov 10 12:59:51 2026 GMT
        Subject: CN=2ADE2E05114980AAF82E759CC47A7019DC9741D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:bb:67:fd:ce:62:16:b2:6e:c3:f8:b2:b5:
                    ba:36:e1:b8:8c:0b:46:48:c8:b4:8a:07:7c:6f:3f:
                    15:2b:b4:bd:ee:85:57:d3:4c:a5:0a:e1:9e:71:df:
                    16:ae:d7:f7:c3:60:03:cb:8f:35:c4:49:a5:0b:ca:
                    03:d7:f8:17:d6:65:8d:a5:a0:3a:a9:04:bf:6c:da:
                    19:f8:a1:cc:ce:25:28:b6:3e:1a:80:bb:0b:24:61:
                    c5:7a:2a:65:f4:75:94:9a:7b:a0:39:b3:c9:7c:a8:
                    c3:01:33:b6:0e:2d:56:86:72:08:b2:82:1f:88:1e:
                    2c:3b:b1:0e:5a:c4:6a:29:df:15:cf:b8:21:ef:e9:
                    cd:cc:21:cc:f3:60:5d:2c:15:35:8a:8a:85:c5:1c:
                    9c:db:77:bb:74:c2:68:21:ee:64:18:4c:08:94:80:
                    a9:c8:4d:52:39:e0:0a:15:c0:b0:07:b8:14:38:99:
                    79:6e:2b:35:27:a4:e1:cf:7f:ac:4d:4d:56:b9:c2:
                    55:c0:32:52:bb:3d:95:76:94:d7:6e:2f:79:58:f1:
                    f4:dc:dd:12:16:6a:6f:0e:a9:d2:50:22:aa:40:7c:
                    21:e4:bd:65:17:b2:32:af:f2:4c:64:32:78:ca:5e:
                    45:ea:a2:3e:b3:df:c6:26:4a:0b:0a:7a:d4:a2:5e:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DE:2E:05:11:49:80:AA:F8:2E:75:9C:C4:7A:70:19:DC:97:41:D8
            X509v3 Authority Key Identifier:
                keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135302e302f32332d3233203d3e20323638333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:01:56:18:d6:60:91:8f:58:c6:12:a4:bd:d3:d4:5d:cc:5d:
         12:c9:4f:74:4d:e9:3a:a5:37:7c:51:04:91:49:b4:34:e6:28:
         91:e1:47:24:8b:01:c2:28:49:d3:6c:67:a2:03:e9:61:53:cc:
         a2:29:a2:3d:24:17:fd:87:2c:2c:b9:99:0e:20:a3:0a:e6:30:
         de:cc:65:56:b6:11:84:89:b6:0f:93:e2:ec:d0:26:4e:6f:7e:
         98:d6:b0:db:a6:c8:b1:cf:48:03:ee:49:68:6c:51:34:49:46:
         75:97:7a:63:87:87:3a:c6:e1:a7:09:49:4e:a4:90:28:1f:af:
         89:c7:68:97:44:13:cc:45:63:b9:2d:e4:95:0e:89:ea:5d:2c:
         42:9e:2d:94:39:9e:33:d6:e3:55:7e:63:74:f6:13:23:7a:7c:
         e3:1d:43:f5:23:f4:b2:e9:c8:a4:25:63:06:91:8b:f6:b7:4f:
         ae:46:14:be:44:95:73:da:df:f1:b7:59:60:bc:90:2e:be:2b:
         b2:85:29:75:8d:8d:03:9a:73:7e:16:b1:d9:e5:69:81:d7:a0:
         c6:05:0d:ed:9b:90:f4:a4:6d:04:15:14:35:c4:72:d7:e4:61:
         4e:55:2c:a3:02:e3:5e:f5:75:65:59:af:91:54:65:ff:69:88:
         fc:a0:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:06:03 2025 by rpki-client