This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32322d3332203d3e20323638383538.roa
File:                     34352e3137342e3136302e302f32322d3332203d3e20323638383538.roa (raw, json)
Hash identifier:          fyEmhLpQH5xJvUEU2KHn+clO8ik+DGx+iiD7uabEJIE=
Subject key identifier:   B3:3D:DD:1A:1E:CA:B1:F6:C7:60:1C:EF:49:E5:7A:0F:D3:91:34:82
Certificate issuer:       /CN=C486B4374F6ECFC1091D85F260D92DE07C062714
Certificate serial:       01A5478810D2A5604E42842BA3F3BD8E5C03FFAF
Authority key identifier: C4:86:B4:37:4F:6E:CF:C1:09:1D:85:F2:60:D9:2D:E0:7C:06:27:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C486B4374F6ECFC1091D85F260D92DE07C062714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32322d3332203d3e20323638383538.roa
Signing time:             Thu 27 Nov 2025 14:52:09 +0000
ROA not before:           Thu 27 Nov 2025 14:47:09 +0000
ROA not after:            Thu 26 Nov 2026 14:52:09 +0000
asID:                     268858
IP address blocks:        45.174.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C486B4374F6ECFC1091D85F260D92DE07C062714.crl
                          rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C486B4374F6ECFC1091D85F260D92DE07C062714.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C486B4374F6ECFC1091D85F260D92DE07C062714.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a5:47:88:10:d2:a5:60:4e:42:84:2b:a3:f3:bd:8e:5c:03:ff:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C486B4374F6ECFC1091D85F260D92DE07C062714
        Validity
            Not Before: Nov 27 14:47:09 2025 GMT
            Not After : Nov 26 14:52:09 2026 GMT
        Subject: CN=B33DDD1A1ECAB1F6C7601CEF49E57A0FD3913482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:f5:76:8d:a2:a6:85:31:3b:32:cb:6a:ec:
                    a4:06:d8:e3:9e:59:4c:4a:1f:3a:13:f1:2b:7f:0e:
                    52:70:bb:7f:40:4c:96:57:10:ae:24:fc:bd:6d:19:
                    04:3f:ed:b3:68:32:c4:69:54:53:43:da:11:a1:fd:
                    ff:b4:0b:2f:21:bd:81:36:fd:26:3f:74:d4:be:01:
                    ed:3e:46:f9:3b:51:6a:d3:f5:ba:1e:09:2e:eb:e6:
                    7f:be:56:a0:de:ad:50:32:8a:ad:b4:07:74:e5:8e:
                    9a:9e:3b:8f:06:33:01:8c:5b:4f:77:14:19:1a:15:
                    67:e7:23:d6:09:33:8e:0d:a6:d4:25:2a:08:90:ff:
                    37:e4:e6:5e:53:54:bd:58:82:90:4e:97:81:ca:50:
                    bd:7c:40:a7:b0:f3:f5:02:bb:f3:29:3e:03:f8:e6:
                    e1:d1:bd:b1:4e:3b:d9:83:0d:bf:d1:f4:ed:86:7b:
                    a5:c7:04:f7:d4:db:d9:a4:d7:46:8a:4d:f9:a4:00:
                    46:a8:c3:1c:d5:18:06:97:80:3b:d9:fa:58:3f:b6:
                    e2:fb:2e:d3:40:c6:47:85:2e:25:42:cb:2d:41:34:
                    14:01:7f:ce:5a:40:85:61:29:b5:fb:9c:07:7a:8a:
                    1e:96:1a:31:e9:eb:78:f8:07:46:ae:41:e2:b1:ed:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3D:DD:1A:1E:CA:B1:F6:C7:60:1C:EF:49:E5:7A:0F:D3:91:34:82
            X509v3 Authority Key Identifier:
                keyid:C4:86:B4:37:4F:6E:CF:C1:09:1D:85:F2:60:D9:2D:E0:7C:06:27:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C486B4374F6ECFC1091D85F260D92DE07C062714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C486B4374F6ECFC1091D85F260D92DE07C062714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32322d3332203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:f4:d2:7f:1c:b7:5d:29:a8:87:a7:62:40:ec:55:f3:c0:44:
         1f:41:ef:f8:4c:ac:cb:4e:ed:7c:24:6f:33:13:a5:03:f0:e4:
         f3:7a:e4:32:af:dc:2c:4c:29:11:2a:52:aa:eb:76:7d:c8:b5:
         8b:78:cb:61:43:b7:30:56:74:f4:ef:cc:03:c1:a0:11:3e:4b:
         d5:a8:3c:e7:bd:17:65:cb:df:0e:d3:72:84:9b:87:ba:67:7d:
         a8:bc:d6:28:ef:9c:83:71:b6:12:82:69:b6:b8:01:e3:67:0a:
         b5:3f:b0:a5:fe:6e:04:5e:d7:ac:97:65:f1:8b:5f:e6:80:da:
         25:82:48:c2:7f:79:5a:d6:87:9c:fc:eb:f4:34:88:60:d5:fd:
         68:9d:0f:e5:9c:a8:e7:2a:a7:f1:83:9f:5b:92:f8:85:57:7f:
         d5:0a:fe:a4:9a:0f:cb:60:f0:17:c1:5d:8b:d1:c8:86:2c:10:
         86:9b:0a:13:b7:ea:34:8d:3d:58:09:c4:a6:c3:b6:9e:67:03:
         29:c6:6b:b7:3a:eb:c2:14:25:4e:20:4c:cf:cd:ce:8e:be:b5:
         ec:56:86:99:0e:c4:f4:65:41:75:3c:4e:c0:b5:64:2d:d5:04:
         70:9c:05:b2:a0:fe:87:92:ae:63:ee:56:54:49:e5:cd:71:31:
         46:ca:f1:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAaVHiBDSpWBOQoQro/O9jlwD/68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4NkI0Mzc0RjZFQ0ZDMTA5MUQ4NUYyNjBEOTJERTA3
QzA2MjcxNDAeFw0yNTExMjcxNDQ3MDlaFw0yNjExMjYxNDUyMDlaMDMxMTAvBgNV
BAMTKEIzM0RERDFBMUVDQUIxRjZDNzYwMUNFRjQ5RTU3QTBGRDM5MTM0ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4/V2jaKmhTE7Mstq7KQG2OOe
WUxKHzoT8St/DlJwu39ATJZXEK4k/L1tGQQ/7bNoMsRpVFND2hGh/f+0Cy8hvYE2
/SY/dNS+Ae0+Rvk7UWrT9boeCS7r5n++VqDerVAyiq20B3TljpqeO48GMwGMW093
FBkaFWfnI9YJM44NptQlKgiQ/zfk5l5TVL1YgpBOl4HKUL18QKew8/UCu/MpPgP4
5uHRvbFOO9mDDb/R9O2Ge6XHBPfU29mk10aKTfmkAEaowxzVGAaXgDvZ+lg/tuL7
LtNAxkeFLiVCyy1BNBQBf85aQIVhKbX7nAd6ih6WGjHp63j4B0auQeKx7TN/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsz3dGh7KsfbHYBzvSeV6D9ORNIIwHwYDVR0j
BBgwFoAUxIa0N09uz8EJHYXyYNkt4HwGJxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NtM2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdh
QnkvMC9DNDg2QjQzNzRGNkVDRkMxMDkxRDg1RjI2MEQ5MkRFMDdDMDYyNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0ODZCNDM3NEY2RUNGQzEw
OTFEODVGMjYwRDkyREUwN0MwNjI3MTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djbTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzAv
MzQzNTJlMzEzNzM0MmUzMTM2MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzODM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrqAwDQYJKoZIhvcNAQELBQADggEBABv00n8c
t10pqIenYkDsVfPARB9B7/hMrMtO7XwkbzMTpQPw5PN65DKv3CxMKREqUqrrdn3I
tYt4y2FDtzBWdPTvzAPBoBE+S9WoPOe9F2XL3w7TcoSbh7pnfai81ijvnINxthKC
aba4AeNnCrU/sKX+bgRe16yXZfGLX+aA2iWCSMJ/eVrWh5z86/Q0iGDV/WidD+Wc
qOcqp/GDn1uS+IVXf9UK/qSaD8tg8BfBXYvRyIYsEIabChO36jSNPVgJxKbDtp5n
AynGa7c668IUJU4gTM/Nzo6+texWhpkOxPRlQXU8TsC1ZC3VBHCcBbKg/oeSrmPu
VlRJ5c1xMUbK8fY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:19 2025 by rpki-client