This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134382e34302f32392d3239203d3e20323639303036.roa
File:                     34352e3137362e3134382e34302f32392d3239203d3e20323639303036.roa (raw, json)
Hash identifier:          PejEKYI7WEgmv58+fgSvcMo3VufP6jEzSMq8X1JxYrU=
Subject key identifier:   B2:2F:B7:3E:2C:F2:74:2F:C2:2D:A7:F9:D9:C2:10:36:45:8A:91:31
Certificate issuer:       /CN=549361119DAB7AFBB8C831A94FB1A75D9BF73EA8
Certificate serial:       2F6FEA94BF79B8C8D2A383F56812383A7F8DC683
Authority key identifier: 54:93:61:11:9D:AB:7A:FB:B8:C8:31:A9:4F:B1:A7:5D:9B:F7:3E:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134382e34302f32392d3239203d3e20323639303036.roa
Signing time:             Wed 21 Jan 2026 21:38:01 +0000
ROA not before:           Wed 21 Jan 2026 21:33:01 +0000
ROA not after:            Wed 20 Jan 2027 21:38:01 +0000
asID:                     269006
IP address blocks:        45.176.148.40/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6f:ea:94:bf:79:b8:c8:d2:a3:83:f5:68:12:38:3a:7f:8d:c6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=549361119DAB7AFBB8C831A94FB1A75D9BF73EA8
        Validity
            Not Before: Jan 21 21:33:01 2026 GMT
            Not After : Jan 20 21:38:01 2027 GMT
        Subject: CN=B22FB73E2CF2742FC22DA7F9D9C21036458A9131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:33:88:9a:d9:bc:5d:28:8b:f1:33:5f:ee:
                    e6:99:c5:cd:bf:2b:c1:e1:6c:79:3d:47:6c:aa:f8:
                    ef:65:fc:ce:35:53:1b:a8:cb:e3:e4:72:59:c9:08:
                    f6:91:3a:08:6a:99:f3:5c:c7:67:fb:1b:40:ed:55:
                    ac:1e:44:2d:07:20:2b:0b:52:89:44:9f:c4:96:51:
                    03:03:c9:1a:b4:c8:94:8f:7f:df:ce:b6:7d:aa:5d:
                    d7:a0:25:2c:09:35:c3:fd:e9:58:ff:fd:4a:0a:31:
                    8a:44:b9:a5:72:7b:07:51:c4:43:6b:09:d6:98:4f:
                    eb:0a:6b:b9:e7:2c:0d:3d:5e:b3:7e:9d:20:27:f2:
                    b0:66:e5:6d:02:3f:58:69:88:ab:48:c6:1f:c0:40:
                    96:d9:eb:83:90:08:30:17:0e:62:5d:a8:1f:0d:47:
                    6c:c5:4f:75:fe:4a:d3:f7:f7:c7:aa:40:2f:14:4c:
                    e7:09:ec:d8:0b:97:5b:d5:10:97:c0:5e:ba:db:e6:
                    9b:8a:6d:b8:df:42:9c:de:83:b2:fd:9b:ab:a0:b5:
                    d1:68:34:55:ce:18:bd:ff:54:78:0b:63:8b:57:56:
                    25:13:7f:93:1f:fa:09:9d:f3:69:84:03:9e:13:95:
                    17:01:e9:00:df:fe:99:4c:61:18:93:52:dc:a5:4d:
                    44:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2F:B7:3E:2C:F2:74:2F:C2:2D:A7:F9:D9:C2:10:36:45:8A:91:31
            X509v3 Authority Key Identifier:
                keyid:54:93:61:11:9D:AB:7A:FB:B8:C8:31:A9:4F:B1:A7:5D:9B:F7:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134382e34302f32392d3239203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.148.40/29

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:73:ef:0d:a4:80:57:15:02:85:15:00:c4:a6:09:ab:f9:
         43:75:f1:96:6c:09:c2:bf:e6:17:86:f0:e2:7e:47:ab:69:47:
         d9:b5:21:9a:ee:2e:de:00:02:df:65:9e:d1:15:9f:e6:64:6d:
         d6:d4:a3:8d:aa:b3:04:fc:43:3b:a2:02:07:65:bb:0d:c0:bd:
         a4:70:32:28:6e:bf:dc:3c:dd:9b:e1:1d:33:c8:81:d8:7f:c1:
         ae:91:a9:78:64:f8:8a:a0:e5:ee:a6:5b:cf:a4:5a:4f:2a:1f:
         07:a2:d7:ef:61:f8:c3:08:fc:18:ad:bf:5f:8b:15:b7:c9:82:
         07:28:54:c2:6d:09:44:79:a3:f8:e5:4f:45:a3:70:ab:7d:b8:
         20:1c:9f:14:87:f7:24:96:d7:53:0a:c1:35:4a:76:a3:7c:75:
         a8:1a:b7:da:a8:3a:c6:81:f2:a5:b2:23:f6:c3:e3:ef:70:52:
         56:5e:02:53:04:87:22:cd:88:47:6f:40:36:10:ad:e5:88:27:
         c6:4b:2b:88:ca:32:ec:5c:46:f0:5d:e8:98:d4:78:70:7e:9d:
         fb:54:99:c8:0e:e0:b1:68:f3:30:08:c8:f3:06:4d:ce:54:3f:
         f0:04:75:b1:34:6e:13:73:dc:0a:29:1b:ac:fb:09:85:c3:22:
         1f:4d:57:e7
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUL2/qlL95uMjSo4P1aBI4On+NxoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ5MzYxMTE5REFCN0FGQkI4QzgzMUE5NEZCMUE3NUQ5
QkY3M0VBODAeFw0yNjAxMjEyMTMzMDFaFw0yNzAxMjAyMTM4MDFaMDMxMTAvBgNV
BAMTKEIyMkZCNzNFMkNGMjc0MkZDMjJEQTdGOUQ5QzIxMDM2NDU4QTkxMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVDOImtm8XSiL8TNf7uaZxc2/
K8HhbHk9R2yq+O9l/M41Uxuoy+PkclnJCPaROghqmfNcx2f7G0DtVaweRC0HICsL
UolEn8SWUQMDyRq0yJSPf9/Otn2qXdegJSwJNcP96Vj//UoKMYpEuaVyewdRxENr
CdaYT+sKa7nnLA09XrN+nSAn8rBm5W0CP1hpiKtIxh/AQJbZ64OQCDAXDmJdqB8N
R2zFT3X+StP398eqQC8UTOcJ7NgLl1vVEJfAXrrb5puKbbjfQpzeg7L9m6ugtdFo
NFXOGL3/VHgLY4tXViUTf5Mf+gmd82mEA54TlRcB6QDf/plMYRiTUtylTUQTAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUsi+3PizydC/CLaf52cIQNkWKkTEwHwYDVR0j
BBgwFoAUVJNhEZ2revu4yDGpT7GnXZv3PqgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pTZjdSRll2VkZ6UDg3V25WUHVUaFd2RnlqMXBCY21QaWs2a1BIRVZQ
N1EvMC81NDkzNjExMTlEQUI3QUZCQjhDODMxQTk0RkIxQTc1RDlCRjczRUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0OTM2MTExOURBQjdBRkJC
OEM4MzFBOTRGQjFBNzVEOUJGNzNFQTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daU2Y3UkZZdlZGelA4N1duVlB1VGhXdkZ5ajFwQmNtUGlrNmtQSEVWUDdRLzAv
MzQzNTJlMzEzNzM2MmUzMTM0MzgyZTM0MzAyZjMyMzkyZDMyMzkyMDNkM2UyMDMy
MzYzOTMwMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAEwBwMFAy2wlCgwDQYJKoZIhvcNAQELBQADggEBAFjK
c+8NpIBXFQKFFQDEpgmr+UN18ZZsCcK/5heG8OJ+R6tpR9m1IZruLt4AAt9lntEV
n+ZkbdbUo42qswT8QzuiAgdluw3AvaRwMihuv9w83ZvhHTPIgdh/wa6RqXhk+Iqg
5e6mW8+kWk8qHwei1+9h+MMI/Bitv1+LFbfJggcoVMJtCUR5o/jlT0WjcKt9uCAc
nxSH9ySW11MKwTVKdqN8dagat9qoOsaB8qWyI/bD4+9wUlZeAlMEhyLNiEdvQDYQ
reWIJ8ZLK4jKMuxcRvBd6JjUeHB+nftUmcgO4LFo8zAIyPMGTc5UP/AEdbE0bhNz
3AopG6z7CYXDIh9NV+c=
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:21:37 2026 by rpki-client