This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e302e302f32322d3232203d3e20323632383735.roa
File:                     34352e362e302e302f32322d3232203d3e20323632383735.roa (raw, json)
Hash identifier:          BIEPUpJ5VWqcJMQTqYL4D+FyRZrLZ/ECnxh5/NsuQqo=
Subject key identifier:   30:A7:B2:73:0E:06:4B:20:8B:8A:44:E0:0B:D8:69:59:F3:3D:50:D0
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       5565AE0319212F9D831E08895790C091B13AC66F
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e302e302f32322d3232203d3e20323632383735.roa
Signing time:             Thu 04 Dec 2025 13:38:47 +0000
ROA not before:           Thu 04 Dec 2025 13:33:47 +0000
ROA not after:            Thu 03 Dec 2026 13:38:47 +0000
asID:                     262875
IP address blocks:        45.6.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:65:ae:03:19:21:2f:9d:83:1e:08:89:57:90:c0:91:b1:3a:c6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Dec  4 13:33:47 2025 GMT
            Not After : Dec  3 13:38:47 2026 GMT
        Subject: CN=30A7B2730E064B208B8A44E00BD86959F33D50D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:d4:37:07:d7:a5:e5:bb:80:9f:5c:db:94:
                    4e:13:1f:27:a1:3d:f9:da:21:d1:57:9b:e7:ec:8c:
                    92:11:f7:07:89:36:0e:d5:27:1e:62:57:39:45:45:
                    93:20:f9:75:da:7a:ed:05:3e:ae:5f:84:0e:25:ef:
                    a5:42:1f:a8:3d:0b:a4:db:c7:92:4a:a4:d9:2a:f5:
                    46:0a:2a:85:1f:65:41:a0:19:b4:ab:fe:d2:0b:42:
                    a5:f2:e6:cb:c5:44:75:3d:a4:7f:3b:1f:96:1f:a3:
                    08:81:25:72:0a:0e:d5:91:af:33:02:de:ef:69:b7:
                    60:1f:b4:f8:4d:5e:c2:98:dc:f7:5d:e0:da:51:d2:
                    4d:2e:a6:b4:bb:5c:ab:3d:df:cc:25:e2:c0:93:c3:
                    d9:06:a2:22:b4:3c:0b:55:09:03:1c:91:af:2e:62:
                    ad:3d:f5:1f:2d:02:38:c3:85:55:9d:31:22:e4:a7:
                    72:f5:2d:26:40:d4:74:a2:ed:e3:20:0a:d3:49:5f:
                    3b:2e:d0:7a:b5:2c:f2:e0:ce:cd:7e:19:5d:cb:e2:
                    41:01:fb:30:93:57:7d:e2:ad:07:f2:05:0a:4b:4a:
                    65:52:f7:dd:c7:34:b2:92:43:eb:da:ce:18:e3:1d:
                    37:5f:b2:48:59:85:55:27:73:92:08:fa:3d:3d:63:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A7:B2:73:0E:06:4B:20:8B:8A:44:E0:0B:D8:69:59:F3:3D:50:D0
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e302e302f32322d3232203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:9c:e7:56:77:3d:cb:ce:c7:28:d2:69:df:bc:e0:63:c4:cc:
         09:af:59:e8:ca:11:45:1d:d4:19:57:68:9a:f0:53:3d:71:ba:
         bc:e9:67:09:ae:c6:96:9e:5d:d8:bf:1b:81:9d:0c:28:ac:6e:
         d7:66:10:e7:f6:c0:22:af:af:be:f6:f5:03:4f:2a:c2:0e:a9:
         bb:76:1d:d7:8f:76:ec:ba:8a:71:06:2e:1d:d3:9d:1e:05:e8:
         b9:2e:0c:df:3c:33:d3:19:c4:cc:2e:33:2c:b2:18:77:77:6b:
         a5:b8:d2:c2:f7:e0:e3:85:67:4e:ee:30:c9:06:7a:3b:e5:b5:
         a1:03:b0:4c:a6:94:2e:8c:55:e7:5f:2b:b8:06:5a:ed:bf:83:
         6d:19:01:78:d8:a8:a6:09:31:15:20:02:1e:f9:b0:dc:ea:24:
         ee:1e:f3:97:e4:70:b4:8e:3e:57:e5:ce:e7:2e:b3:c2:50:e9:
         8b:bd:11:0f:29:52:b2:95:82:aa:6a:bf:fb:04:8e:e2:09:b5:
         f8:4a:0a:ba:7f:2e:a1:02:d7:4e:03:6d:e1:44:d1:b5:b5:40:
         da:1b:1d:bd:2c:69:fa:9c:ce:ee:8d:a6:d2:c8:6f:59:ed:24:
         3f:18:45:24:ce:23:ee:14:77:b4:e1:64:9b:51:77:1c:c9:6d:
         5a:a5:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:23 2025 by rpki-client