This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32322d3232203d3e20323639333638.roa
File:                     34352e3138352e3130302e302f32322d3232203d3e20323639333638.roa (raw, json)
Hash identifier:          +kK2OCbqamc7MlDbALYLRWJBQwF98YVrSZAKnr5G3hk=
Subject key identifier:   24:89:31:30:AC:B8:85:C0:B3:BE:4C:87:A9:E1:40:5C:E7:34:43:95
Certificate issuer:       /CN=510593E55BF7DF9C9640505BCC0F9E789B6EABFA
Certificate serial:       20FAB68AA6C637F29489E0C89895EC70CF0AEA8F
Authority key identifier: 51:05:93:E5:5B:F7:DF:9C:96:40:50:5B:CC:0F:9E:78:9B:6E:AB:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32322d3232203d3e20323639333638.roa
Signing time:             Wed 07 Jan 2026 21:01:56 +0000
ROA not before:           Wed 07 Jan 2026 20:56:56 +0000
ROA not after:            Wed 06 Jan 2027 21:01:56 +0000
asID:                     269368
IP address blocks:        45.185.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.crl
                          rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fa:b6:8a:a6:c6:37:f2:94:89:e0:c8:98:95:ec:70:cf:0a:ea:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510593E55BF7DF9C9640505BCC0F9E789B6EABFA
        Validity
            Not Before: Jan  7 20:56:56 2026 GMT
            Not After : Jan  6 21:01:56 2027 GMT
        Subject: CN=24893130ACB885C0B3BE4C87A9E1405CE7344395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:a2:e1:d4:d3:fc:8a:5a:41:80:08:01:d5:
                    68:a3:5d:a3:b0:d8:31:b3:f4:77:1c:d0:4f:a8:be:
                    9b:ed:f6:11:6f:26:0e:99:21:98:2a:96:e6:6f:eb:
                    f1:25:4a:07:d4:d1:1c:1c:0b:16:7c:d2:f5:dc:59:
                    e9:62:c2:69:ab:26:17:ce:dd:a5:18:1f:53:57:35:
                    55:8d:51:9e:cf:a5:a4:7d:f7:4d:a2:9e:6e:34:b5:
                    2d:76:e3:db:94:35:37:78:75:db:b6:ed:01:8d:a3:
                    99:31:7a:aa:01:61:c2:ac:cf:cc:d6:b9:f7:91:91:
                    c8:0a:10:ba:13:a9:40:52:75:43:b9:14:e3:28:92:
                    3f:11:06:b6:e4:a2:e6:68:a3:44:7c:b3:05:50:77:
                    d1:9b:1e:cf:25:0e:11:e8:b1:f4:55:bd:8b:96:6a:
                    c0:54:cf:83:85:0f:d4:20:8f:01:3f:da:e2:c0:1d:
                    3e:16:fa:87:c5:04:1e:6d:ea:dc:94:0d:ce:7b:ab:
                    e2:4d:34:b2:96:23:a1:9b:a0:df:90:8c:b2:fe:05:
                    bf:80:f0:e4:9a:74:84:44:59:f2:7f:96:dc:0f:32:
                    08:95:59:fb:9e:6d:9d:61:fa:1f:be:98:61:cf:fb:
                    2c:6c:5e:e3:4a:f8:5a:ae:40:af:fb:4a:6f:18:5b:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:31:30:AC:B8:85:C0:B3:BE:4C:87:A9:E1:40:5C:E7:34:43:95
            X509v3 Authority Key Identifier:
                keyid:51:05:93:E5:5B:F7:DF:9C:96:40:50:5B:CC:0F:9E:78:9B:6E:AB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32322d3232203d3e20323639333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:e6:49:b7:15:cf:61:ec:eb:7b:c5:6b:1c:18:91:67:9b:9c:
         6e:90:41:0c:47:5d:80:5a:6c:be:28:8d:80:35:d3:3d:43:11:
         de:78:8f:15:a8:fd:ee:72:82:65:53:92:4c:69:65:e9:75:eb:
         81:bf:9f:09:7d:10:ac:c2:f7:14:f0:fc:81:d3:b5:1d:a8:27:
         bb:cb:c1:3c:12:be:c0:ea:0a:34:f7:bb:65:31:9d:39:9c:a0:
         97:16:bc:c9:9c:c2:8f:54:e7:a2:a1:78:da:2a:64:e6:d0:4f:
         7d:dc:59:18:c7:d3:b8:74:ad:69:e6:5d:e9:e6:91:98:73:57:
         5a:47:80:e0:9a:df:cc:fc:d8:dd:91:7e:4d:7c:2c:c5:d7:2c:
         41:3b:1a:b6:04:a9:03:f9:cf:fa:19:8f:36:60:53:0c:b9:8e:
         fd:c1:cd:d1:10:d3:b0:f0:80:0d:6f:62:53:e9:6d:f6:c4:d8:
         f1:52:10:12:fa:93:52:59:5e:47:1f:c3:9b:9c:2b:bd:9a:07:
         73:99:06:58:c7:17:35:eb:fe:da:7b:63:9e:41:42:53:78:d9:
         d0:5f:6e:ae:dd:64:14:ae:51:5c:d2:27:52:e7:d4:b0:8b:60:
         44:c5:76:38:27:56:07:bb:55:59:51:0a:08:91:45:fb:dd:2b:
         8c:24:ff:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:01:07 2026 by rpki-client