This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3137352e3131362e302f32322d3234203d3e20323632373737.roa
File:                     34352e3137352e3131362e302f32322d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          FZSPgSKYFNdLlB8EOd554N45aHvgT/5cPoDhvh24uik=
Subject key identifier:   20:D2:12:6F:46:4D:BD:C9:DF:D8:BA:A6:F9:3C:F2:C0:28:13:B1:6F
Certificate issuer:       /CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Certificate serial:       5A8AE162F0BBB2A1B06C5DC796B39D795D29665C
Authority key identifier: 46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3137352e3131362e302f32322d3234203d3e20323632373737.roa
Signing time:             Thu 13 Nov 2025 15:58:39 +0000
ROA not before:           Thu 13 Nov 2025 15:53:39 +0000
ROA not after:            Thu 12 Nov 2026 15:58:39 +0000
asID:                     262777
IP address blocks:        45.175.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8a:e1:62:f0:bb:b2:a1:b0:6c:5d:c7:96:b3:9d:79:5d:29:66:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
        Validity
            Not Before: Nov 13 15:53:39 2025 GMT
            Not After : Nov 12 15:58:39 2026 GMT
        Subject: CN=20D2126F464DBDC9DFD8BAA6F93CF2C02813B16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:1d:b5:49:0f:ad:b3:a6:81:32:da:6d:86:
                    e1:94:cc:01:46:ad:75:1a:8b:14:11:05:45:b7:4c:
                    38:c1:21:ee:1b:ae:2c:fc:1d:a3:50:b6:f0:35:50:
                    a7:fe:78:b8:85:cf:c8:9f:75:87:a5:48:b9:05:e4:
                    c6:7e:41:3b:81:59:f2:f7:e3:d0:b2:10:ad:1b:d5:
                    a0:9d:45:5e:ab:c8:d3:33:2f:3b:7f:d1:61:df:ce:
                    4d:5c:37:16:e9:e4:e0:32:8e:eb:de:7f:d5:19:b5:
                    09:d5:8a:17:36:b5:f0:02:12:68:91:51:49:40:f1:
                    41:75:75:cf:4f:21:0a:fa:46:c9:13:50:15:d4:1d:
                    5b:62:8e:07:e4:fc:7e:e8:84:54:44:5a:82:61:9e:
                    3c:8e:5d:28:09:2b:b6:83:06:7b:52:ad:d0:df:cd:
                    26:1c:b4:bb:ee:c1:8f:45:5c:9f:d0:46:c3:99:4a:
                    ac:36:49:19:a9:6c:7f:21:29:8d:bb:41:de:2e:3a:
                    34:bb:20:6a:55:61:58:e5:6e:13:ef:38:3f:18:bf:
                    4f:c6:85:ac:20:81:97:7a:1e:bf:d7:82:b9:b0:ee:
                    2d:2c:a9:f8:02:a5:0e:4c:a0:a8:e5:af:82:24:93:
                    4a:76:54:eb:44:11:72:4e:dc:11:97:6d:db:23:d7:
                    d3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D2:12:6F:46:4D:BD:C9:DF:D8:BA:A6:F9:3C:F2:C0:28:13:B1:6F
            X509v3 Authority Key Identifier:
                keyid:46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3137352e3131362e302f32322d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:79:31:ec:4e:2c:a5:5b:75:aa:a1:2a:a5:f9:61:0d:37:e9:
         eb:55:27:de:24:f8:e4:5c:ce:5f:67:38:24:23:bb:37:9f:e7:
         52:4d:2f:8d:4a:06:44:54:2d:8c:76:be:2c:b8:13:92:2c:70:
         b3:0f:50:1e:11:e0:90:68:45:a8:bb:a6:34:44:57:ae:94:e6:
         75:c7:3c:39:e3:68:ba:cf:a1:a4:ad:8c:37:c9:8b:ee:a8:ed:
         93:fc:04:e2:af:88:6b:ab:41:32:03:72:dc:4b:59:c3:73:7b:
         99:4d:7b:52:1d:11:11:03:96:d6:bb:4f:bf:b3:3c:26:a3:2a:
         b1:9e:e2:86:df:99:7a:55:8e:26:4d:c8:59:5a:a0:cf:e3:1c:
         e2:7f:9b:ba:6d:56:f8:76:a8:77:27:74:63:51:0c:dd:80:ae:
         10:af:9a:90:6d:ae:c1:a8:1d:bc:df:ae:ed:fa:6d:73:14:86:
         f8:91:1f:3a:fd:32:b9:45:89:37:34:f7:aa:27:79:52:44:39:
         08:b2:e6:c2:9b:95:14:cc:83:2d:3d:fd:e9:bf:d5:2a:2c:1e:
         78:f0:e8:cf:ba:2f:c7:eb:0d:70:d8:44:ae:f1:03:73:2f:3f:
         0e:b5:6c:52:9c:67:04:18:15:39:b9:56:8e:57:2a:e2:48:52:
         66:1f:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:04 2025 by rpki-client