This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139332e302f32342d3234203d3e20323638333830.roa
File:                     34352e3233392e3139332e302f32342d3234203d3e20323638333830.roa (raw, json)
Hash identifier:          QayzGinhBb9bTo0zTJa47kcBcwAPWVx1mucWulImQMU=
Subject key identifier:   10:3B:5B:95:2B:E3:7A:AA:01:AC:5A:E8:47:CC:67:6E:AF:4A:CE:BF
Certificate issuer:       /CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Certificate serial:       76B03102DCFB04BD4797E30378427891D7FD924D
Authority key identifier: 9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139332e302f32342d3234203d3e20323638333830.roa
Signing time:             Tue 09 Dec 2025 03:19:16 +0000
ROA not before:           Tue 09 Dec 2025 03:14:16 +0000
ROA not after:            Tue 08 Dec 2026 03:19:16 +0000
asID:                     268380
IP address blocks:        45.239.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
                          rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 11:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b0:31:02:dc:fb:04:bd:47:97:e3:03:78:42:78:91:d7:fd:92:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
        Validity
            Not Before: Dec  9 03:14:16 2025 GMT
            Not After : Dec  8 03:19:16 2026 GMT
        Subject: CN=103B5B952BE37AAA01AC5AE847CC676EAF4ACEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:7c:53:58:0c:c1:8b:b2:26:26:79:48:e1:
                    6b:12:5a:86:17:46:4d:25:01:53:f8:d4:4c:f4:ec:
                    c3:f0:df:64:45:5c:b5:14:73:f0:cd:e2:fb:c7:04:
                    43:ef:a4:30:66:fa:ea:a7:a7:57:e0:75:45:90:ea:
                    61:e4:b5:93:43:df:8d:59:a6:e6:3e:3c:e5:3a:0d:
                    26:b2:4c:f8:f4:84:68:08:b1:99:3e:86:85:e5:2a:
                    8f:d8:45:b4:de:ac:87:cc:11:2b:bc:f1:d0:03:b5:
                    09:7a:3e:82:90:4d:f2:54:ca:44:90:93:16:a7:ff:
                    e4:e4:4d:0b:7b:af:d9:61:6e:a3:32:6e:ad:a5:9e:
                    64:9e:6c:be:f2:67:e2:32:6f:a4:27:dc:70:6b:ae:
                    aa:6a:f7:11:cd:cc:8c:05:be:09:13:4d:17:92:b7:
                    70:cf:05:22:b0:d2:55:3e:fe:11:87:46:d6:68:bb:
                    74:8a:ff:3e:85:56:8d:d5:4a:47:eb:4f:6b:69:7d:
                    d4:87:58:3d:88:3d:3b:2e:a8:8a:07:97:51:7b:fd:
                    2a:a7:e6:c6:6d:fc:18:96:69:8f:06:4f:3e:93:54:
                    18:ac:08:40:97:b0:2e:41:3b:35:87:be:df:be:00:
                    a3:b0:fb:e3:85:f4:e7:60:8d:9a:e5:2a:6d:2b:0f:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3B:5B:95:2B:E3:7A:AA:01:AC:5A:E8:47:CC:67:6E:AF:4A:CE:BF
            X509v3 Authority Key Identifier:
                keyid:9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139332e302f32342d3234203d3e20323638333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:a9:1d:96:2b:e2:e8:2a:90:e8:5d:4c:85:c7:e1:93:4c:b5:
         cc:67:b8:08:24:1f:81:50:f6:a4:b2:ff:ef:2e:2b:0e:2a:2d:
         1d:ed:2c:d1:06:5c:8a:b4:ca:d1:9d:79:38:f7:b4:21:f6:0a:
         d8:17:23:3a:fc:4a:6d:3d:a9:aa:eb:0c:f4:44:cd:27:bc:ba:
         c8:21:36:93:dc:6d:3d:39:f6:c0:63:96:d1:c5:e1:d2:ab:90:
         22:18:25:b2:04:a1:9d:67:d5:93:a7:5d:f6:cf:ae:8f:a7:b0:
         86:55:d8:61:ad:b4:59:06:e8:50:e3:cf:6f:cd:db:2f:d0:af:
         db:15:5f:79:4b:b3:21:c3:60:3b:9f:a5:15:dd:52:19:49:04:
         7a:b5:47:16:cc:d3:a2:c3:98:f1:7a:26:6c:12:79:32:ef:cf:
         bf:93:2f:c2:ac:f0:23:53:fe:64:f7:ab:87:d2:62:93:16:a9:
         c0:98:e1:70:aa:99:cd:5d:0f:59:8f:99:4f:8b:37:8d:50:0d:
         02:98:2d:d4:f7:40:cf:ec:79:31:01:6b:16:e8:ff:59:48:6a:
         22:92:47:74:8e:9a:47:22:2f:8f:03:91:aa:20:a6:11:71:54:
         e8:90:a4:cc:f0:76:fd:db:c2:b0:69:d2:02:24:1c:b2:bc:4d:
         a8:ac:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:18:33 2025 by rpki-client