This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e322e302f32342d3234203d3e20323632383735.roa
File:                     34352e362e322e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          kbsr+dck0dql+tp0eFPYS+uCSGNWtCsEFIb6WIADUNU=
Subject key identifier:   60:D5:3A:F9:38:70:04:6A:5C:85:34:B1:5D:79:3A:68:F0:ED:E1:60
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       2BBF59A49239BC8000D641E6A7A8C911451E63FB
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e322e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 04 Dec 2025 13:38:47 +0000
ROA not before:           Thu 04 Dec 2025 13:33:47 +0000
ROA not after:            Thu 03 Dec 2026 13:38:47 +0000
asID:                     262875
IP address blocks:        45.6.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bf:59:a4:92:39:bc:80:00:d6:41:e6:a7:a8:c9:11:45:1e:63:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Dec  4 13:33:47 2025 GMT
            Not After : Dec  3 13:38:47 2026 GMT
        Subject: CN=60D53AF93870046A5C8534B15D793A68F0EDE160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:7e:a8:1d:08:48:34:d1:53:70:09:e6:31:
                    bf:d8:fa:6d:d2:31:b9:64:98:f9:0d:b1:c1:fd:9f:
                    67:f7:39:0d:10:33:b3:86:a1:74:9e:f0:25:de:bf:
                    29:0c:57:55:ee:da:ea:6d:1f:9f:78:b8:de:8b:38:
                    e3:dd:db:fc:96:aa:44:b4:ea:38:cb:cf:2b:ff:53:
                    3a:08:c2:92:3e:42:43:f0:52:c0:ac:98:32:86:2c:
                    b2:e5:3a:cb:37:68:0f:d7:d5:46:97:d3:d9:0c:73:
                    86:e3:1f:c5:12:53:6b:7e:48:73:4a:ed:82:59:5c:
                    9e:90:c3:20:22:69:55:38:91:19:da:52:c2:a4:29:
                    61:56:65:92:6d:5d:6a:a7:3c:c9:f6:af:68:30:f5:
                    df:ae:9d:17:0d:b2:3c:69:7f:40:d3:08:84:8e:10:
                    db:56:cb:e8:31:ce:27:18:b4:a9:c0:e6:cc:e7:3c:
                    40:55:93:3c:ab:8a:a2:8d:d4:01:1a:fa:e5:a0:5e:
                    f6:80:1c:d5:5c:0c:d6:8e:3a:f0:e7:73:b4:28:8d:
                    4b:15:a2:35:5f:53:16:45:6d:cc:4e:e3:71:46:26:
                    ab:8e:93:a2:24:4d:71:ff:c7:9d:ae:6c:93:d2:2d:
                    a8:1a:5e:e4:a2:9e:8d:91:de:c7:92:9d:b9:6a:d9:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D5:3A:F9:38:70:04:6A:5C:85:34:B1:5D:79:3A:68:F0:ED:E1:60
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e322e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:50:8e:b6:a7:90:e4:b2:56:b2:a1:cd:c9:f1:16:69:2b:37:
         bb:69:6d:43:28:40:7d:c6:e0:b0:34:97:e1:4d:e8:76:c8:05:
         da:0f:b8:8e:06:c0:3f:3e:47:9c:9e:37:23:c6:be:fb:39:1e:
         91:2b:ba:cd:79:61:8d:43:2c:d0:91:3f:57:7d:08:c7:f0:9b:
         6f:b1:d9:4a:b9:f7:c4:d0:63:6d:51:08:32:b1:07:e3:7a:61:
         fc:a2:7a:ec:34:17:75:53:90:df:ca:ba:c8:0c:0f:fc:e2:04:
         46:29:6d:c8:df:44:f1:28:85:dd:f9:e8:a6:0f:74:b2:07:5d:
         3c:6a:48:11:f8:1b:2a:69:9e:15:0e:29:99:f9:8c:97:fa:b9:
         f1:ca:eb:94:18:8c:7e:f5:61:aa:bb:ea:21:3a:69:c5:54:31:
         35:8c:25:e3:ad:90:84:16:60:99:b7:61:3e:a4:b1:ed:51:c6:
         46:80:c9:93:d9:c1:67:b2:db:80:4a:63:c4:3f:e1:f2:74:ab:
         8c:bc:c7:3b:37:c8:75:64:c8:31:57:eb:73:99:4d:63:cc:eb:
         e7:45:cf:ba:e4:f8:c8:7d:c4:92:e9:be:2f:3d:80:ea:0e:30:
         8a:f9:7f:c6:13:a2:08:f7:19:3b:32:2a:31:a2:c0:5e:d0:e9:
         79:d1:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:00 2025 by rpki-client