This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/34352e3137302e39362e302f32322d3332203d3e20323638313537.roa
File:                     34352e3137302e39362e302f32322d3332203d3e20323638313537.roa (raw, json)
Hash identifier:          +YwqC/5std6vGN+W15r72UKpBP/QjcANUK3LHGk5vkA=
Subject key identifier:   E0:06:95:D6:06:A3:EB:9B:B2:DF:65:DC:7B:EC:42:6B:C8:62:7C:30
Certificate issuer:       /CN=7659F9EC5715739A2646E217090D2A0154CC1C7E
Certificate serial:       0F350AA59654E4FD5B6E66E12086A7D3DD36F039
Authority key identifier: 76:59:F9:EC:57:15:73:9A:26:46:E2:17:09:0D:2A:01:54:CC:1C:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7659F9EC5715739A2646E217090D2A0154CC1C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/34352e3137302e39362e302f32322d3332203d3e20323638313537.roa
Signing time:             Thu 13 Nov 2025 12:54:40 +0000
ROA not before:           Thu 13 Nov 2025 12:49:40 +0000
ROA not after:            Thu 12 Nov 2026 12:54:40 +0000
asID:                     268157
IP address blocks:        45.170.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/7659F9EC5715739A2646E217090D2A0154CC1C7E.crl
                          rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/7659F9EC5715739A2646E217090D2A0154CC1C7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7659F9EC5715739A2646E217090D2A0154CC1C7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:35:0a:a5:96:54:e4:fd:5b:6e:66:e1:20:86:a7:d3:dd:36:f0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7659F9EC5715739A2646E217090D2A0154CC1C7E
        Validity
            Not Before: Nov 13 12:49:40 2025 GMT
            Not After : Nov 12 12:54:40 2026 GMT
        Subject: CN=E00695D606A3EB9BB2DF65DC7BEC426BC8627C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:0b:68:b8:af:9a:7c:db:84:f4:8a:84:2d:
                    29:4d:86:17:b0:72:20:6c:f5:43:4c:93:ff:59:1e:
                    89:45:a0:b6:3e:67:53:c7:69:95:64:5a:09:a3:80:
                    7e:e4:87:1e:34:07:6d:fa:c4:ad:ee:ae:c9:55:a6:
                    5b:ad:27:f4:75:18:73:d6:e4:52:ec:6d:4b:85:08:
                    50:bf:23:91:30:8b:70:d3:ec:13:5d:7d:f1:20:dd:
                    e1:12:9a:44:1d:7c:21:b2:78:9b:bc:2e:f0:08:13:
                    92:f0:f8:13:60:fb:fd:35:c4:f2:0c:df:66:62:62:
                    0f:12:9f:5b:63:5f:31:6e:1e:d7:07:ab:8b:d5:e3:
                    18:e4:1f:bf:36:cc:b0:d4:86:27:60:9b:8d:b0:03:
                    e8:4e:39:28:39:35:80:88:63:4e:93:e0:13:94:5d:
                    b3:16:ae:89:c2:9f:5c:b1:f8:dd:4e:a4:a4:65:4a:
                    c5:8e:51:7d:59:76:96:41:d2:71:57:4a:d7:3b:0f:
                    88:18:d7:04:3d:fc:72:5b:e5:0d:3b:a6:3b:9d:c3:
                    7c:c0:1a:aa:5b:c4:71:86:9c:ce:55:ef:17:dc:a1:
                    a9:66:4b:10:f9:ba:3c:36:7d:bb:02:68:af:d1:e1:
                    3f:df:0e:84:65:6c:c3:ee:ad:d8:3c:52:d9:7b:b5:
                    b1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:06:95:D6:06:A3:EB:9B:B2:DF:65:DC:7B:EC:42:6B:C8:62:7C:30
            X509v3 Authority Key Identifier:
                keyid:76:59:F9:EC:57:15:73:9A:26:46:E2:17:09:0D:2A:01:54:CC:1C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/7659F9EC5715739A2646E217090D2A0154CC1C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7659F9EC5715739A2646E217090D2A0154CC1C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/34352e3137302e39362e302f32322d3332203d3e20323638313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:d9:e1:3b:09:d2:85:00:55:2d:97:fd:ef:00:d0:0a:b0:11:
         68:3a:10:a9:2d:ef:f8:da:c0:64:58:ca:18:4d:6a:9d:a9:7a:
         e5:ad:56:67:31:47:44:a3:81:25:1f:48:20:df:e7:41:ba:cd:
         8b:fd:17:50:41:cf:b9:fa:71:37:69:b0:2a:15:d6:82:6b:6d:
         fb:77:0c:d4:5d:de:1c:fe:5b:f2:b5:1d:02:74:92:56:b1:21:
         19:c2:8f:ff:f4:62:03:a4:2d:f9:b4:21:cf:16:29:20:8d:16:
         86:56:14:c7:79:e2:9d:e5:43:ba:2d:b6:a9:9c:a7:eb:02:11:
         7b:02:42:ed:70:35:16:7c:47:d3:cd:20:8c:86:90:2a:2a:96:
         50:fc:1e:4f:11:21:84:9e:e4:b3:a5:ed:ee:f6:11:5b:92:2a:
         2a:5c:ba:24:9e:30:42:4d:79:df:4e:7e:5f:6e:ce:69:e5:cf:
         08:a5:0e:ba:47:59:4a:e7:b8:ea:4c:0f:60:5b:79:a4:5c:da:
         46:6a:01:64:ca:22:13:4b:90:d6:d1:a7:f2:8c:0c:2b:85:0a:
         99:4e:91:85:fb:a8:4a:3b:9e:83:43:39:af:31:84:01:25:ae:
         03:f1:49:2e:45:4d:4a:3d:9e:e1:48:28:66:9c:1c:e3:aa:18:
         a2:fa:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:00:59 2025 by rpki-client