This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136362e302f32332d3233203d3e20323639343434.roa
File:                     34352e3138362e3136362e302f32332d3233203d3e20323639343434.roa (raw, json)
Hash identifier:          Y3MklqqDjVo5vwDZxh9tYAFq1tEMaamaFHOoH2SZg+Y=
Subject key identifier:   E9:79:4E:73:37:75:D4:09:49:14:00:16:D0:47:29:41:8B:1E:E1:52
Certificate issuer:       /CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Certificate serial:       438A5443E457B9A9E33FEE8BE11055434CA7081D
Authority key identifier: F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136362e302f32332d3233203d3e20323639343434.roa
Signing time:             Tue 25 Nov 2025 20:15:16 +0000
ROA not before:           Tue 25 Nov 2025 20:10:16 +0000
ROA not after:            Tue 24 Nov 2026 20:15:16 +0000
asID:                     269444
IP address blocks:        45.186.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
                          rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8a:54:43:e4:57:b9:a9:e3:3f:ee:8b:e1:10:55:43:4c:a7:08:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
        Validity
            Not Before: Nov 25 20:10:16 2025 GMT
            Not After : Nov 24 20:15:16 2026 GMT
        Subject: CN=E9794E733775D40949140016D04729418B1EE152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:ba:5a:2b:bf:41:1d:53:c0:b2:d2:b5:09:
                    a4:cc:87:8b:ff:bf:74:1d:b7:4b:1e:14:d6:0f:9c:
                    17:45:18:9a:c6:db:3d:e8:19:39:42:79:74:d0:84:
                    dd:e9:94:cb:e4:58:d2:61:8a:62:91:6a:17:f6:65:
                    37:88:ea:20:9e:e0:3a:47:00:ed:89:d7:6f:a9:93:
                    cf:ec:93:b3:c9:c7:a5:ea:61:42:1f:fc:63:86:6f:
                    83:00:74:10:44:8b:03:91:5f:16:06:96:ad:f3:9c:
                    8b:4e:e4:15:04:dc:d6:d2:87:5b:e1:e1:7c:15:5e:
                    e7:cd:e7:01:c3:c6:15:b2:77:4c:18:6f:08:0d:e1:
                    27:81:a9:19:dc:a8:db:33:d3:81:44:f0:1f:c9:1f:
                    9d:70:9e:f3:3b:7e:d9:e7:3b:56:d3:26:b7:d5:86:
                    e5:0a:3b:02:05:03:0d:09:f5:71:27:f7:cd:20:b0:
                    aa:fa:66:a1:91:5a:48:62:bc:86:1a:9a:34:6d:d5:
                    ae:0a:cc:56:2f:37:38:e6:f6:ca:ba:ef:e3:e4:50:
                    65:d4:67:42:10:24:05:b7:d1:40:ec:56:29:1c:1c:
                    e6:fd:42:13:b8:95:dc:ed:4d:aa:dd:5d:a3:c6:c8:
                    b4:69:2b:36:48:52:66:18:65:d9:53:75:0c:b1:24:
                    00:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:79:4E:73:37:75:D4:09:49:14:00:16:D0:47:29:41:8B:1E:E1:52
            X509v3 Authority Key Identifier:
                keyid:F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136362e302f32332d3233203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:ca:27:76:48:03:4f:dd:3a:37:d1:56:5e:dc:33:e2:10:5b:
         21:af:66:e4:e7:d1:03:fa:f9:be:4d:b1:6b:df:11:a9:1e:40:
         db:5d:42:9c:7e:3d:d3:32:7b:df:9b:31:e9:d0:cd:c3:07:23:
         bd:36:0e:98:1f:92:c3:17:28:69:e8:59:70:6e:bd:4a:12:87:
         3d:2b:16:78:5b:11:42:6f:7b:9e:95:8c:e9:d4:b9:d2:21:da:
         a6:cd:a2:93:d9:ff:fb:dc:32:dd:3d:2b:ef:aa:d3:18:b7:3b:
         c0:16:14:c2:4e:40:81:fc:be:c5:42:38:0f:04:39:80:40:80:
         71:74:2b:b4:43:a0:22:19:e9:64:02:9e:9c:a9:93:da:c1:cd:
         37:f2:39:0f:f7:36:99:47:50:c7:2d:52:40:74:f8:00:61:f9:
         6c:99:17:20:ed:52:23:75:67:de:1d:4f:aa:54:9e:df:b6:ce:
         1f:4d:d1:76:25:71:aa:ff:8f:bf:e4:73:a3:af:99:55:89:d9:
         54:e5:d7:76:e8:a7:97:32:5d:7b:ea:23:06:64:9d:73:86:39:
         d7:5d:53:86:9d:5a:5b:d4:75:2e:30:f6:f3:67:f3:4b:f7:88:
         73:61:cd:df:eb:11:77:fc:93:59:a5:f7:5a:58:1e:10:4a:dd:
         28:06:6f:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ4pUQ+RXuanjP+6L4RBVQ0ynCB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkyOENDQzIzQjM3RjI5MUQ3OEYzQzg5OTFDRTlCRDNC
NUZFQkJEQzAeFw0yNTExMjUyMDEwMTZaFw0yNjExMjQyMDE1MTZaMDMxMTAvBgNV
BAMTKEU5Nzk0RTczMzc3NUQ0MDk0OTE0MDAxNkQwNDcyOTQxOEIxRUUxNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGarpaK79BHVPAstK1CaTMh4v/
v3Qdt0seFNYPnBdFGJrG2z3oGTlCeXTQhN3plMvkWNJhimKRahf2ZTeI6iCe4DpH
AO2J12+pk8/sk7PJx6XqYUIf/GOGb4MAdBBEiwORXxYGlq3znItO5BUE3NbSh1vh
4XwVXufN5wHDxhWyd0wYbwgN4SeBqRncqNsz04FE8B/JH51wnvM7ftnnO1bTJrfV
huUKOwIFAw0J9XEn980gsKr6ZqGRWkhivIYamjRt1a4KzFYvNzjm9sq67+PkUGXU
Z0IQJAW30UDsVikcHOb9QhO4ldztTardXaPGyLRpKzZIUmYYZdlTdQyxJACLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6XlOczd11AlJFAAW0EcpQYse4VIwHwYDVR0j
BBgwFoAU+SjMwjs38pHXjzyJkc6b07X+u9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3paM2VkTUFudzRnakpiVXBXaWVKbXhCMVJHY2lSOU03RXh4a2Jia05m
WmsvMC9GOTI4Q0NDMjNCMzdGMjkxRDc4RjNDODk5MUNFOUJEM0I1RkVCQkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5MjhDQ0MyM0IzN0YyOTFE
NzhGM0M4OTkxQ0U5QkQzQjVGRUJCREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6WjNlZE1Bbnc0Z2pKYlVwV2llSm14QjFSR2NpUjlNN0V4eGtiYmtOZlprLzAv
MzQzNTJlMzEzODM2MmUzMTM2MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuqYwDQYJKoZIhvcNAQELBQADggEBAMjKJ3ZI
A0/dOjfRVl7cM+IQWyGvZuTn0QP6+b5NsWvfEakeQNtdQpx+PdMye9+bMenQzcMH
I702DpgfksMXKGnoWXBuvUoShz0rFnhbEUJve56VjOnUudIh2qbNopPZ//vcMt09
K++q0xi3O8AWFMJOQIH8vsVCOA8EOYBAgHF0K7RDoCIZ6WQCnpypk9rBzTfyOQ/3
NplHUMctUkB0+ABh+WyZFyDtUiN1Z94dT6pUnt+2zh9N0XYlcar/j7/kc6OvmVWJ
2VTl13bop5cyXXvqIwZknXOGOdddU4adWlvUdS4w9vNn80v3iHNhzd/rEXf8k1ml
91pYHhBK3SgGb6U=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:42 2025 by rpki-client