This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa
File:                     34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa (raw, json)
Hash identifier:          L3sYY9p1fE5f3HazukJJUtz4v3pRRnMs8mbL25Mp17Q=
Subject key identifier:   6C:A2:5C:32:6B:8E:70:01:EB:C3:CC:01:A7:48:CE:0D:44:BF:A5:75
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       0B74FC805B9AD4E4A6E9284F0B060BCCD9A85A27
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa
Signing time:             Mon 05 Jan 2026 13:07:31 +0000
ROA not before:           Mon 05 Jan 2026 13:02:31 +0000
ROA not after:            Mon 04 Jan 2027 13:07:31 +0000
asID:                     267963
IP address blocks:        45.166.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:74:fc:80:5b:9a:d4:e4:a6:e9:28:4f:0b:06:0b:cc:d9:a8:5a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Jan  5 13:02:31 2026 GMT
            Not After : Jan  4 13:07:31 2027 GMT
        Subject: CN=6CA25C326B8E7001EBC3CC01A748CE0D44BFA575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b0:97:d0:66:a5:c7:19:dd:7d:78:ec:c4:50:
                    34:41:d4:af:3c:8f:db:b0:e8:cc:2a:6d:83:de:92:
                    c4:fa:20:72:4a:e0:12:d7:0e:67:6b:3b:a8:2d:e8:
                    05:cf:d5:b2:4e:14:b3:db:c7:57:13:ed:43:07:3f:
                    68:f5:40:e7:7c:88:71:39:98:d9:bc:a2:5a:49:b1:
                    44:39:81:e0:76:99:50:6d:49:29:4e:65:6e:12:3d:
                    70:69:2b:46:83:89:19:12:ae:a2:04:d9:a3:90:f5:
                    7b:9e:26:86:ac:27:29:33:53:d2:3b:4e:ba:3d:ac:
                    9c:7f:19:0b:a2:7f:18:a9:7a:af:78:7f:99:73:06:
                    a8:da:3e:52:d2:60:7d:fd:bf:fd:bc:c4:fd:29:bf:
                    ac:34:75:36:6a:8f:2a:69:a4:1c:3c:ad:6b:c5:8c:
                    36:64:19:ca:d4:42:36:71:d8:10:96:b9:76:dc:06:
                    56:4e:69:61:a4:fc:5b:ee:b0:00:22:51:27:a1:7b:
                    be:03:39:45:c1:05:83:e7:6a:06:ff:12:5e:4e:b8:
                    72:8e:2a:ac:2e:fc:d8:e2:8f:21:fb:3f:ea:ce:29:
                    d2:4a:1d:06:49:a3:6b:88:27:d8:f5:0d:9e:f2:23:
                    c0:d0:64:c3:e6:75:cf:94:86:ae:35:53:5c:6d:a5:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A2:5C:32:6B:8E:70:01:EB:C3:CC:01:A7:48:CE:0D:44:BF:A5:75
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3135302e302f32332d3233203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:1b:ff:76:54:dc:1d:22:c2:4a:f8:71:40:2c:cb:98:d9:b9:
         f0:c5:b4:59:57:bc:c3:d3:67:a2:87:da:cc:c1:48:77:25:89:
         6e:f4:c4:04:37:da:5d:e3:ad:25:c1:2a:9b:a1:dc:5a:eb:83:
         5b:39:5f:7e:66:2a:8c:39:1a:a3:ce:af:b5:27:cd:d0:7a:ee:
         53:cf:e4:76:20:2d:36:2a:a0:22:ac:a5:0f:a3:b1:c5:50:7b:
         78:5c:ed:88:84:cd:39:ef:71:18:08:f7:d4:e9:02:1b:4c:89:
         cf:8b:45:67:7d:9b:6e:8b:aa:16:ec:60:c9:0a:e0:96:e8:b7:
         1b:be:8e:0d:33:90:1a:53:90:23:97:ad:bd:4f:9d:da:ae:b5:
         e7:49:bc:e3:8b:c3:4b:6f:04:05:37:62:2c:8c:31:8f:8d:eb:
         47:6f:f4:b7:d9:f6:b4:0d:4d:15:f3:69:22:96:d2:6a:12:02:
         68:46:d5:a7:04:97:86:d6:f0:88:fb:ef:79:7c:4f:44:b0:2a:
         a6:36:aa:fd:71:66:72:8c:15:75:0e:8a:c0:94:3c:c9:d9:d0:
         78:cd:fc:a9:8e:22:dc:1c:16:00:72:c5:db:99:cc:2f:7c:dd:
         36:a3:8e:d1:75:05:f5:aa:55:52:25:d1:62:fa:fa:e6:1b:22:
         89:ca:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:02:51 2026 by rpki-client