This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e302f32332d3233203d3e20323639303036.roa
File:                     34352e3137362e3135302e302f32332d3233203d3e20323639303036.roa (raw, json)
Hash identifier:          f3K64nAm1vPKliOC6aOYKoKsDn81NleuxWYqzNH87rY=
Subject key identifier:   1C:26:46:46:B4:50:B1:31:34:9F:C6:D8:DB:17:73:37:72:3B:0C:8A
Certificate issuer:       /CN=549361119DAB7AFBB8C831A94FB1A75D9BF73EA8
Certificate serial:       2BA1AFE36BFA4AE8FFA4B401B315AA43DC377418
Authority key identifier: 54:93:61:11:9D:AB:7A:FB:B8:C8:31:A9:4F:B1:A7:5D:9B:F7:3E:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e302f32332d3233203d3e20323639303036.roa
Signing time:             Wed 21 Jan 2026 18:52:09 +0000
ROA not before:           Wed 21 Jan 2026 18:47:09 +0000
ROA not after:            Wed 20 Jan 2027 18:52:09 +0000
asID:                     269006
IP address blocks:        45.176.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a1:af:e3:6b:fa:4a:e8:ff:a4:b4:01:b3:15:aa:43:dc:37:74:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=549361119DAB7AFBB8C831A94FB1A75D9BF73EA8
        Validity
            Not Before: Jan 21 18:47:09 2026 GMT
            Not After : Jan 20 18:52:09 2027 GMT
        Subject: CN=1C264646B450B131349FC6D8DB177337723B0C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:91:ca:91:e3:06:07:b7:a5:ba:00:46:43:
                    90:d0:37:d5:00:4a:ad:41:84:f1:f7:13:9d:5c:8c:
                    3a:fe:c6:f6:3a:31:b6:1e:b0:8c:a3:9d:73:22:1b:
                    64:ca:69:f2:1f:f5:97:29:e1:c8:1b:73:e7:41:46:
                    50:3f:20:ee:83:f1:a6:35:f5:dc:a6:d0:3a:58:b3:
                    a5:96:de:37:05:af:40:e2:76:cf:ef:fd:97:f1:08:
                    fb:5c:b8:42:cf:01:20:d1:4a:54:a2:60:9e:3f:f6:
                    05:15:56:a3:5e:74:bd:0c:e7:4e:2d:bc:c4:c1:4d:
                    f9:fb:45:97:bd:56:22:0c:b7:15:86:91:cc:db:20:
                    f8:6e:15:46:67:20:e6:cb:c2:86:9c:56:65:74:62:
                    5d:77:e5:aa:5d:a4:e4:c0:9f:5e:82:3f:fd:11:8e:
                    b6:ca:68:83:f5:d0:a9:ba:07:36:e6:30:49:9d:39:
                    5d:70:a0:b2:45:43:2b:85:49:94:72:7a:9f:cf:38:
                    d1:98:dd:5e:d5:68:ed:df:60:37:9b:1b:51:67:45:
                    7b:31:f6:25:2f:8c:24:c7:73:09:2d:35:f8:94:6b:
                    49:76:d9:80:3a:06:f9:4b:4d:5f:ce:50:54:41:f7:
                    57:b4:b8:55:af:76:d8:05:27:95:8a:9b:ae:d0:50:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:26:46:46:B4:50:B1:31:34:9F:C6:D8:DB:17:73:37:72:3B:0C:8A
            X509v3 Authority Key Identifier:
                keyid:54:93:61:11:9D:AB:7A:FB:B8:C8:31:A9:4F:B1:A7:5D:9B:F7:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/549361119DAB7AFBB8C831A94FB1A75D9BF73EA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e302f32332d3233203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:df:f7:a0:8c:bc:f0:a3:dc:8a:ea:3c:74:5d:02:98:85:
         eb:b2:4e:50:fb:20:aa:b8:fa:0f:a8:5d:f4:dd:02:40:77:b0:
         c7:32:b8:95:11:0e:6a:df:38:97:ae:a8:7b:fb:3d:be:ed:0a:
         e0:d3:e5:e2:2d:fa:8c:4f:a1:a4:da:17:bb:e3:94:68:7c:23:
         b9:ac:2d:27:05:88:3c:af:e6:98:0a:92:f1:67:5a:55:ba:2f:
         33:89:01:9f:b0:42:bf:b4:ed:da:27:ef:97:7b:2f:c4:73:0a:
         f6:71:0e:71:8c:c4:8e:dc:53:86:fe:8e:38:b0:4b:cf:82:67:
         51:2f:ab:7b:1b:14:a2:7d:3e:e0:25:be:06:e1:a1:77:77:81:
         69:0f:01:62:de:df:a3:be:f6:d7:81:c5:1c:d1:7f:42:07:6a:
         52:b9:55:85:72:75:a4:f7:64:18:63:d3:eb:3f:35:8d:4b:1e:
         6c:fc:cf:5a:18:69:3c:36:0c:83:d0:e1:c9:c0:33:9b:65:85:
         5d:ac:f6:03:78:c7:ad:13:b2:f3:b1:2d:b0:0a:07:19:63:18:
         16:39:3f:eb:f7:44:e9:51:3d:1a:6a:62:1e:8b:8b:a3:26:1e:
         57:16:41:c0:39:43:e0:f1:3f:ff:ed:a7:bb:a2:6e:e1:82:d5:
         3c:56:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:18 2026 by rpki-client