This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/34352e3138322e35362e302f32322d3332203d3e20323639323637.roa
File:                     34352e3138322e35362e302f32322d3332203d3e20323639323637.roa (raw, json)
Hash identifier:          qrWtiVv+c6qBlMT9VV1GTG4rnzQV42mhWKnxdwh1i0k=
Subject key identifier:   CE:A8:03:1D:06:59:36:B1:1E:54:80:FF:F5:55:37:EC:62:78:CA:83
Certificate issuer:       /CN=E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834
Certificate serial:       463A6F5143BFCB7A6324A193A48F6471F2818CC1
Authority key identifier: E9:C1:CD:FE:92:29:50:B0:B7:5B:4B:EA:6E:AD:69:69:F1:C9:48:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/34352e3138322e35362e302f32322d3332203d3e20323639323637.roa
Signing time:             Mon 17 Nov 2025 18:05:16 +0000
ROA not before:           Mon 17 Nov 2025 18:00:16 +0000
ROA not after:            Mon 16 Nov 2026 18:05:16 +0000
asID:                     269267
IP address blocks:        45.182.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.crl
                          rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3a:6f:51:43:bf:cb:7a:63:24:a1:93:a4:8f:64:71:f2:81:8c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834
        Validity
            Not Before: Nov 17 18:00:16 2025 GMT
            Not After : Nov 16 18:05:16 2026 GMT
        Subject: CN=CEA8031D065936B11E5480FFF55537EC6278CA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:f4:df:58:df:ce:85:02:62:af:95:ca:94:
                    15:6d:f0:c6:94:48:79:94:a6:5c:44:d2:30:75:fe:
                    b0:cf:0a:b4:db:fd:18:3e:40:f5:0d:ef:79:99:78:
                    ff:6d:3f:7f:4a:f2:22:2d:d4:8f:af:7e:5b:44:ba:
                    27:cf:66:8d:33:37:62:ab:06:2f:6c:f2:a9:4f:cd:
                    27:91:2c:17:17:d8:8d:d0:8e:fd:ac:a2:61:8b:d8:
                    40:1d:d5:36:e9:02:ce:40:1a:61:44:cd:7d:a9:58:
                    04:19:86:e3:ef:b2:a2:02:fc:ee:62:5f:59:d6:b5:
                    b6:bd:a0:a0:fc:60:38:ca:9e:01:61:82:84:d7:2f:
                    0b:5b:b5:57:93:a4:ea:99:39:69:9c:d2:f2:9a:51:
                    da:6e:e3:e5:7a:05:71:4c:1f:2f:ef:fb:0d:3f:1f:
                    5b:a9:f8:d1:ea:60:ff:b5:6c:1e:f5:6a:8c:27:6d:
                    60:43:de:20:4e:4a:cf:52:36:82:37:7d:b8:32:f6:
                    3e:40:9f:da:6e:d1:7e:cf:5a:58:c9:5a:94:ab:c4:
                    cf:1d:74:64:2a:07:91:d1:95:44:f8:8f:06:b9:1a:
                    f0:42:35:c4:c1:a5:69:ce:77:c4:77:7b:30:f9:23:
                    eb:d3:75:44:63:29:8a:b2:8a:72:3d:71:8e:10:da:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A8:03:1D:06:59:36:B1:1E:54:80:FF:F5:55:37:EC:62:78:CA:83
            X509v3 Authority Key Identifier:
                keyid:E9:C1:CD:FE:92:29:50:B0:B7:5B:4B:EA:6E:AD:69:69:F1:C9:48:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/34352e3138322e35362e302f32322d3332203d3e20323639323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:ae:52:50:5f:3d:b7:90:c7:23:53:84:82:5c:90:0a:1d:
         62:f9:06:4a:d9:85:74:6f:a2:a8:22:e4:95:92:08:89:34:09:
         42:fa:ac:46:e0:f1:11:4c:c4:82:bc:55:0d:92:0c:f2:35:bc:
         4c:78:37:49:44:72:65:bf:55:5d:12:59:09:9f:c5:7a:1c:98:
         55:f0:3a:15:ce:d4:d0:0e:75:7a:0f:45:d5:9c:36:81:04:c6:
         58:b0:ec:c7:19:69:ec:34:5a:03:44:d7:6d:7a:c9:02:19:40:
         48:3e:4e:2b:d4:81:2a:14:2c:3c:6e:b4:7f:af:aa:53:ee:a5:
         b3:23:ea:bc:a3:b7:a8:60:78:a4:b5:5b:bb:a5:9b:d9:cf:dd:
         20:1b:9e:9e:94:34:fc:17:7b:5c:c3:4e:09:24:34:43:18:0a:
         d5:3c:4b:18:03:52:24:bc:14:9f:f2:34:c9:fc:74:cc:56:18:
         fe:69:57:d7:d7:5e:95:22:ea:bb:11:1e:bf:95:ec:73:f2:d8:
         02:96:65:b6:34:17:70:3f:e5:23:96:87:d1:66:ef:ac:2c:5e:
         be:d9:00:c6:4c:87:37:2f:bc:96:84:60:e8:72:3c:35:7d:f1:
         93:0b:7b:4e:7d:64:f6:7c:5b:59:56:b3:d5:d0:ca:d6:83:86:
         57:b1:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:19:02 2025 by rpki-client