This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32332d3233203d3e20323639343434.roa
File:                     34352e3138362e3136342e302f32332d3233203d3e20323639343434.roa (raw, json)
Hash identifier:          e0VDWuUuQUXBAgektx0uESLz5NGVVsC1UNvDE4BpMIM=
Subject key identifier:   2A:C1:70:68:ED:57:38:59:C1:A3:10:46:35:8A:C4:B4:AA:E5:72:99
Certificate issuer:       /CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Certificate serial:       4C65A0D7547B88938B6D9C5B00F6B7CFFBF97976
Authority key identifier: F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32332d3233203d3e20323639343434.roa
Signing time:             Tue 25 Nov 2025 20:15:15 +0000
ROA not before:           Tue 25 Nov 2025 20:10:15 +0000
ROA not after:            Tue 24 Nov 2026 20:15:15 +0000
asID:                     269444
IP address blocks:        45.186.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
                          rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:65:a0:d7:54:7b:88:93:8b:6d:9c:5b:00:f6:b7:cf:fb:f9:79:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
        Validity
            Not Before: Nov 25 20:10:15 2025 GMT
            Not After : Nov 24 20:15:15 2026 GMT
        Subject: CN=2AC17068ED573859C1A31046358AC4B4AAE57299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:d5:f4:3d:e8:6e:e8:0e:c2:84:1e:c3:cb:
                    da:6c:ba:41:4a:8f:22:14:6e:9e:ea:a2:b5:99:c2:
                    d8:6d:35:f4:94:3d:9a:30:be:1c:ea:5c:47:28:60:
                    b6:94:50:f0:03:33:f9:2e:0b:ca:56:78:d2:ac:d6:
                    5b:21:d9:17:38:af:a9:f0:59:58:a0:b8:4e:6e:03:
                    9f:01:20:93:94:ee:1f:dd:d9:28:51:c5:57:cc:ea:
                    42:05:24:2e:0e:90:bf:4a:95:c8:a5:da:37:81:d2:
                    26:a4:88:3c:4e:64:f7:dd:5f:9e:cd:11:fb:d4:27:
                    c2:1f:52:02:b5:f1:54:9a:28:d9:2f:12:41:5a:53:
                    74:0a:14:c3:6a:fb:b4:7a:f2:e7:12:19:f3:d1:49:
                    8a:a8:37:0e:0e:c4:27:7a:cd:51:c9:c5:22:ee:00:
                    15:2a:21:cf:7f:b6:e8:99:92:31:6c:5a:8b:5a:b2:
                    61:f0:a4:10:0e:f3:d9:d7:0a:49:b5:36:65:b3:37:
                    eb:49:81:d6:29:f0:1d:6a:7f:2e:f9:16:83:b4:b3:
                    a1:9b:d7:57:82:ac:50:ff:5f:f4:a8:85:bc:8f:b8:
                    97:d3:88:49:d1:b3:03:d8:8b:20:82:33:fe:30:84:
                    99:3a:a5:1a:1e:78:49:0f:14:5d:46:d9:c9:5b:4e:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C1:70:68:ED:57:38:59:C1:A3:10:46:35:8A:C4:B4:AA:E5:72:99
            X509v3 Authority Key Identifier:
                keyid:F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32332d3233203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:14:64:f9:76:93:58:66:2f:33:5b:16:3b:b1:7a:ca:97:79:
         d7:d2:ec:ca:69:28:b4:28:b0:bb:b7:7f:3c:f9:bf:aa:2a:48:
         42:ae:90:fd:e6:0f:c7:20:d7:66:ee:0f:55:e7:4c:2a:f0:4a:
         2b:b8:65:86:92:b7:9c:cf:9b:59:14:92:03:f6:3a:9e:c0:44:
         b0:53:12:33:4c:c6:b6:88:18:e8:6b:3e:4a:79:0d:33:93:49:
         f2:c9:52:ec:9f:3e:93:87:55:73:3c:b0:90:31:10:a9:84:de:
         0b:16:b5:46:fe:21:2d:6c:3d:00:bf:e3:28:11:67:73:76:b0:
         bb:72:f0:16:de:96:5e:80:40:54:99:7c:22:94:c4:d6:04:26:
         d0:d2:ef:6b:21:2f:c7:45:c1:53:d5:d1:6f:ed:64:24:a8:22:
         9e:1c:42:df:c8:3c:60:d4:4f:00:ec:af:09:4c:15:71:76:83:
         65:dd:80:a1:19:8b:7a:9c:3d:b0:b0:11:98:62:48:39:26:9b:
         33:b1:2e:07:89:2a:e0:c8:37:b6:92:9c:74:ae:72:07:04:99:
         e9:04:0b:d8:31:2e:3b:88:20:f3:63:04:81:e2:4c:8a:fa:91:
         3d:98:8a:62:f1:aa:3d:af:02:73:d7:57:92:35:78:c2:a4:a2:
         fa:3e:0e:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTGWg11R7iJOLbZxbAPa3z/v5eXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkyOENDQzIzQjM3RjI5MUQ3OEYzQzg5OTFDRTlCRDNC
NUZFQkJEQzAeFw0yNTExMjUyMDEwMTVaFw0yNjExMjQyMDE1MTVaMDMxMTAvBgNV
BAMTKDJBQzE3MDY4RUQ1NzM4NTlDMUEzMTA0NjM1OEFDNEI0QUFFNTcyOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxNX0Pehu6A7ChB7Dy9psukFK
jyIUbp7qorWZwthtNfSUPZowvhzqXEcoYLaUUPADM/kuC8pWeNKs1lsh2Rc4r6nw
WViguE5uA58BIJOU7h/d2ShRxVfM6kIFJC4OkL9Klcil2jeB0iakiDxOZPfdX57N
EfvUJ8IfUgK18VSaKNkvEkFaU3QKFMNq+7R68ucSGfPRSYqoNw4OxCd6zVHJxSLu
ABUqIc9/tuiZkjFsWotasmHwpBAO89nXCkm1NmWzN+tJgdYp8B1qfy75FoO0s6Gb
11eCrFD/X/SohbyPuJfTiEnRswPYiyCCM/4whJk6pRoeeEkPFF1G2clbTkj7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKsFwaO1XOFnBoxBGNYrEtKrlcpkwHwYDVR0j
BBgwFoAU+SjMwjs38pHXjzyJkc6b07X+u9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3paM2VkTUFudzRnakpiVXBXaWVKbXhCMVJHY2lSOU03RXh4a2Jia05m
WmsvMC9GOTI4Q0NDMjNCMzdGMjkxRDc4RjNDODk5MUNFOUJEM0I1RkVCQkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5MjhDQ0MyM0IzN0YyOTFE
NzhGM0M4OTkxQ0U5QkQzQjVGRUJCREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6WjNlZE1Bbnc0Z2pKYlVwV2llSm14QjFSR2NpUjlNN0V4eGtiYmtOZlprLzAv
MzQzNTJlMzEzODM2MmUzMTM2MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuqQwDQYJKoZIhvcNAQELBQADggEBALgUZPl2
k1hmLzNbFjuxesqXedfS7MppKLQosLu3fzz5v6oqSEKukP3mD8cg12buD1XnTCrw
Siu4ZYaSt5zPm1kUkgP2Op7ARLBTEjNMxraIGOhrPkp5DTOTSfLJUuyfPpOHVXM8
sJAxEKmE3gsWtUb+IS1sPQC/4ygRZ3N2sLty8Bbell6AQFSZfCKUxNYEJtDS72sh
L8dFwVPV0W/tZCSoIp4cQt/IPGDUTwDsrwlMFXF2g2XdgKEZi3qcPbCwEZhiSDkm
mzOxLgeJKuDIN7aSnHSucgcEmekEC9gxLjuIIPNjBIHiTIr6kT2YimLxqj2vAnPX
V5I1eMKkovo+Ds4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:53:38 2025 by rpki-client