This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e332e302f32342d3234203d3e20323632383735.roa
File:                     34352e362e332e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          qAlVQK8u2u8tvApA0CRQ7gEAqRpE6R9eQ/eplI6wgy0=
Subject key identifier:   BD:8C:AC:3D:81:9C:67:3A:38:15:1D:A4:50:73:13:CA:F3:58:EB:E0
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       4F8C310754C5447EAB503AD1A61439A3FF980191
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e332e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 04 Dec 2025 13:38:46 +0000
ROA not before:           Thu 04 Dec 2025 13:33:46 +0000
ROA not after:            Thu 03 Dec 2026 13:38:46 +0000
asID:                     262875
IP address blocks:        45.6.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8c:31:07:54:c5:44:7e:ab:50:3a:d1:a6:14:39:a3:ff:98:01:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Dec  4 13:33:46 2025 GMT
            Not After : Dec  3 13:38:46 2026 GMT
        Subject: CN=BD8CAC3D819C673A38151DA4507313CAF358EBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:24:8e:67:ab:e6:97:8f:62:a3:1b:28:b0:
                    44:1b:29:ca:57:24:8d:1c:47:9c:b9:40:e2:ab:21:
                    c6:7d:c4:6f:1f:f0:1e:ea:4a:d7:90:02:c0:03:16:
                    70:db:93:dd:82:a2:f7:83:52:b8:7f:28:3b:ff:c8:
                    48:3f:fb:8c:58:a5:d8:0f:28:56:e6:1d:21:08:2d:
                    3b:66:75:59:98:53:3c:82:ea:fa:e3:eb:d3:98:08:
                    a7:b0:11:69:9f:30:bc:4a:54:39:59:40:0f:28:58:
                    aa:54:53:01:53:55:6e:a1:9b:82:88:80:e5:d7:b5:
                    5d:9e:b5:d6:c5:e4:ce:1f:21:78:45:b2:18:38:59:
                    c9:36:58:ee:3c:5b:e3:02:30:79:a1:24:94:6a:e3:
                    de:9f:97:da:13:52:fe:9b:53:e4:4a:77:91:e1:fe:
                    21:4d:e8:3f:b8:e3:b6:1d:47:7f:a2:51:73:88:71:
                    70:a6:6f:36:7a:2f:ce:26:26:44:f8:dc:5b:4d:5f:
                    54:7b:77:58:88:71:23:0f:d0:53:3e:68:a2:6e:c3:
                    6d:9e:61:5b:d0:50:95:bb:79:13:28:2f:03:6b:d8:
                    74:f8:53:f5:15:39:4b:8b:ca:22:41:e2:c5:07:d4:
                    bb:db:38:c6:41:a6:b1:88:8e:19:97:40:71:91:fc:
                    13:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8C:AC:3D:81:9C:67:3A:38:15:1D:A4:50:73:13:CA:F3:58:EB:E0
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e332e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ff:75:de:ff:d8:48:4b:96:3c:97:cb:3a:f5:3e:45:e9:83:
         a1:1b:b2:fa:30:75:9d:42:05:7a:da:72:83:1e:a7:cf:cc:5e:
         42:41:4e:42:19:c1:7d:98:97:18:2f:0c:ee:c4:c2:2a:2e:d5:
         54:c3:e7:6d:93:08:20:d8:5a:e9:9a:2b:2e:6a:1e:c2:32:ed:
         09:97:b5:18:78:67:cc:1f:4e:77:15:68:3e:3b:19:75:78:e6:
         74:83:f7:5d:52:28:4f:12:1f:46:31:69:1b:9d:aa:5c:4e:4d:
         ad:21:b3:16:31:35:a6:f4:32:42:32:7c:d4:34:e1:9b:d5:2a:
         dd:89:fa:4d:e2:a0:16:2f:3c:b7:64:5c:f1:c3:1e:7c:90:fc:
         88:85:52:b9:a9:02:93:e9:5e:6c:9e:49:9d:75:a0:c5:a2:61:
         e8:da:ce:26:ba:3b:18:4c:2d:77:82:e1:e4:73:00:b2:b2:ec:
         48:7f:fd:da:db:f2:7f:7d:87:59:4c:db:82:98:0d:df:ef:2a:
         22:1a:db:7f:90:2b:59:fa:2d:6b:5b:7d:48:b4:81:13:4e:0b:
         14:71:bf:20:de:61:c7:27:84:60:4a:64:ff:f7:c5:b6:85:6f:
         ed:87:38:0e:0c:f1:25:0d:fd:53:39:18:28:8e:ef:6b:99:af:
         ea:bd:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:10:50 2025 by rpki-client