This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3233352e3139322e302f32322d3234203d3e20323632373737.roa
File:                     34352e3233352e3139322e302f32322d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          Pdd50TT3VkKSMpx8f5UjJ1bl7yPN0o1oyxSTAFiATVM=
Subject key identifier:   2C:99:26:73:CC:BC:D5:78:DE:19:BB:E4:15:AB:C5:BB:54:B6:A8:6E
Certificate issuer:       /CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Certificate serial:       46863100D8C80A0A0996592E4698716E9E539FB6
Authority key identifier: 46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3233352e3139322e302f32322d3234203d3e20323632373737.roa
Signing time:             Thu 13 Nov 2025 15:58:39 +0000
ROA not before:           Thu 13 Nov 2025 15:53:39 +0000
ROA not after:            Thu 12 Nov 2026 15:58:39 +0000
asID:                     262777
IP address blocks:        45.235.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:86:31:00:d8:c8:0a:0a:09:96:59:2e:46:98:71:6e:9e:53:9f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
        Validity
            Not Before: Nov 13 15:53:39 2025 GMT
            Not After : Nov 12 15:58:39 2026 GMT
        Subject: CN=2C992673CCBCD578DE19BBE415ABC5BB54B6A86E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:af:32:6e:14:b6:4b:25:0f:63:2e:07:62:
                    04:6f:a4:05:0e:83:a2:14:38:f6:7c:dc:a9:c3:27:
                    45:d0:62:61:7e:66:ed:fc:fc:30:db:90:cf:8e:d4:
                    ea:e7:2b:64:1f:ba:42:fc:11:09:5e:a3:8c:7b:66:
                    b5:e1:ba:89:4e:a4:34:c1:34:67:6b:e5:c6:e0:ac:
                    c4:b6:7c:b5:2c:12:90:f9:e4:fd:85:03:12:ce:f6:
                    aa:ef:e2:12:08:7e:86:3e:43:9b:b5:88:e1:0d:6c:
                    85:54:90:bc:6d:1e:c7:ac:e1:ad:11:ca:3d:6f:11:
                    c1:3a:55:06:3b:4e:ca:b1:ae:11:65:80:0a:f6:14:
                    37:87:72:02:94:03:63:2e:59:23:51:65:01:11:b2:
                    1d:1f:22:4c:11:07:78:79:58:42:38:58:75:bc:82:
                    56:f2:8d:6b:51:1b:2a:8b:d2:85:f0:1a:ba:ac:fe:
                    99:af:34:aa:0c:ac:66:3c:04:6c:9c:8f:2d:02:c4:
                    e2:e6:1f:dc:6d:84:9d:73:f1:c5:e6:56:00:79:29:
                    5b:8a:2c:ff:3f:b7:74:7a:5c:ae:b1:2a:a3:78:85:
                    fc:e8:da:8a:99:09:4b:e0:2a:7d:fc:fd:1b:27:d8:
                    03:5a:97:f0:dc:31:03:71:13:30:91:66:78:62:af:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:99:26:73:CC:BC:D5:78:DE:19:BB:E4:15:AB:C5:BB:54:B6:A8:6E
            X509v3 Authority Key Identifier:
                keyid:46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3233352e3139322e302f32322d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:ce:49:9b:71:40:41:78:ff:bd:17:51:57:cb:ce:f9:9b:34:
         2f:49:f3:43:2b:db:4b:bf:65:f3:30:eb:e5:12:7b:07:1e:ac:
         6b:20:b1:f4:83:08:45:88:3b:6c:89:10:62:3a:58:90:d8:3f:
         8a:f6:59:3e:30:d3:eb:a6:fe:ef:5f:50:2a:a9:92:e5:20:ed:
         5f:7c:0d:f6:4a:35:bc:b5:e1:42:12:3a:b1:97:84:d8:67:8b:
         41:cf:94:79:7c:ff:24:25:51:4c:fb:67:7f:00:86:88:de:8c:
         d9:75:6b:09:b8:72:16:6a:71:7e:c6:c5:c8:8f:08:64:48:b5:
         50:82:0c:fd:c3:40:6b:67:fe:3f:1c:1c:67:e8:f0:31:ad:ab:
         24:2f:2d:60:86:be:63:8c:f5:41:92:9e:e0:d4:3a:5b:4f:88:
         91:ba:83:da:f3:29:86:98:35:60:48:6f:5a:28:2d:72:d7:5f:
         2b:6b:e0:15:d1:27:ac:a5:0d:c0:03:c7:6f:8d:a1:84:aa:a1:
         f0:f1:0b:da:e8:5f:41:bb:92:aa:46:70:80:fa:a2:19:80:99:
         9a:23:5f:c0:40:d8:62:93:e8:3a:ca:87:94:3b:42:38:2a:b2:
         c2:7c:6d:28:66:c2:ff:8d:b3:b1:30:cf:cd:57:34:40:34:44:
         13:24:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:30:34 2025 by rpki-client