This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139322e302f32332d3233203d3e20323638333830.roa
File:                     34352e3233392e3139322e302f32332d3233203d3e20323638333830.roa (raw, json)
Hash identifier:          JiHAYRyWry8w8clNDLfVWfa4nZryFQrS8uEtEN5/gBw=
Subject key identifier:   1F:86:6D:03:2A:62:61:2B:DA:79:35:94:5B:66:D9:96:CB:51:38:94
Certificate issuer:       /CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Certificate serial:       67DDEE7767EA5FED232B44AC1DD50830D8D15D2D
Authority key identifier: 9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139322e302f32332d3233203d3e20323638333830.roa
Signing time:             Tue 09 Dec 2025 03:17:10 +0000
ROA not before:           Tue 09 Dec 2025 03:12:10 +0000
ROA not after:            Tue 08 Dec 2026 03:17:10 +0000
asID:                     268380
IP address blocks:        45.239.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
                          rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 11:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:dd:ee:77:67:ea:5f:ed:23:2b:44:ac:1d:d5:08:30:d8:d1:5d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
        Validity
            Not Before: Dec  9 03:12:10 2025 GMT
            Not After : Dec  8 03:17:10 2026 GMT
        Subject: CN=1F866D032A62612BDA7935945B66D996CB513894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:af:5c:57:7c:fb:b3:a8:8c:89:24:36:fe:
                    e9:77:24:cb:5a:30:73:4b:7a:1e:4c:6f:e3:b0:0b:
                    e6:a0:a9:73:a8:06:6e:88:79:44:47:18:08:f5:9d:
                    f4:84:06:66:ab:4e:2f:0f:a8:e6:7f:8b:63:ba:ae:
                    d5:41:d9:ca:82:43:a9:f1:f7:9c:cd:e4:87:bc:33:
                    03:04:2b:c7:18:5a:c0:21:5e:98:dc:15:df:80:66:
                    39:1a:12:b6:b5:ad:e4:d9:a6:7e:41:9f:d5:f5:76:
                    d6:9d:db:1f:74:40:b8:a8:4b:63:88:73:4d:59:ca:
                    47:91:49:34:c0:c3:34:9f:7e:75:0f:57:50:62:ca:
                    7b:68:c4:5c:3b:94:ff:ef:b0:6e:55:08:af:e8:47:
                    28:39:2e:f6:60:a0:07:9d:9a:62:f3:8e:a5:33:c6:
                    5f:a9:e8:93:fc:68:db:93:f8:e8:aa:1e:80:df:00:
                    c9:d8:53:f9:49:3c:86:0b:cd:f7:7a:64:70:b4:60:
                    82:fd:cf:14:50:0a:92:aa:12:87:7d:dc:a5:3a:0a:
                    63:d6:01:43:60:b3:dd:52:3c:ee:38:1a:5f:61:b5:
                    02:ba:1f:82:54:78:37:3d:7f:f0:cb:71:19:ff:dc:
                    de:ab:69:44:47:18:77:f2:02:56:a0:32:27:d7:4d:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:86:6D:03:2A:62:61:2B:DA:79:35:94:5B:66:D9:96:CB:51:38:94
            X509v3 Authority Key Identifier:
                keyid:9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139322e302f32332d3233203d3e20323638333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:45:f5:55:77:26:8f:77:60:f8:1e:f5:2c:f6:11:54:b6:18:
         60:d8:e6:b4:33:18:58:70:32:6e:76:f0:37:97:44:47:78:26:
         77:3c:c8:ed:a0:c5:be:7d:3c:e2:2b:81:3d:d9:dc:a6:65:d2:
         41:ff:5e:98:27:83:db:39:43:0d:9c:14:8c:da:b2:45:c0:c6:
         f7:ce:1b:a4:7f:4c:ba:3b:a2:49:9a:93:a6:41:9c:ed:4f:f7:
         13:63:1f:c3:aa:43:31:66:ea:0e:44:c5:d5:c1:7b:b3:b6:97:
         32:f7:38:96:bc:8c:ff:22:19:f8:81:f2:68:40:7a:c4:88:6d:
         99:72:92:e9:37:73:fa:6e:3f:bc:4a:11:a8:6f:f9:73:b9:38:
         f3:c0:f7:18:ed:2e:8e:63:a7:99:d4:3b:1f:24:b8:de:31:de:
         d5:c4:12:3d:79:c9:53:ac:f7:05:0e:8d:be:2c:a2:87:02:83:
         1f:f9:ce:51:d6:09:3d:b9:25:11:ea:43:e6:9e:55:21:3e:b4:
         c2:73:bb:47:cb:00:26:d7:6b:cf:8c:cc:56:f8:1b:77:f5:00:
         fe:b2:35:72:26:0d:30:22:e2:5a:06:79:75:fd:bc:25:57:26:
         f8:9c:5c:77:dc:82:92:17:0d:2a:a8:e2:6c:ba:50:c6:93:01:
         26:cb:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:18:36 2025 by rpki-client