This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32332d3233203d3e20323639333638.roa
File:                     34352e3138352e3130302e302f32332d3233203d3e20323639333638.roa (raw, json)
Hash identifier:          0v0apAk0VmZhwUM1bV6IY2FI4m4NlEHfxJLnMtB0RtY=
Subject key identifier:   E9:D9:30:2E:09:EE:94:DE:7A:88:EF:5B:46:3B:EB:41:B0:38:2E:36
Certificate issuer:       /CN=510593E55BF7DF9C9640505BCC0F9E789B6EABFA
Certificate serial:       4A0121C2D17638E71A9B6FBAC3F092D07A479568
Authority key identifier: 51:05:93:E5:5B:F7:DF:9C:96:40:50:5B:CC:0F:9E:78:9B:6E:AB:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32332d3233203d3e20323639333638.roa
Signing time:             Wed 07 Jan 2026 21:02:01 +0000
ROA not before:           Wed 07 Jan 2026 20:57:01 +0000
ROA not after:            Wed 06 Jan 2027 21:02:01 +0000
asID:                     269368
IP address blocks:        45.185.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.crl
                          rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:01:21:c2:d1:76:38:e7:1a:9b:6f:ba:c3:f0:92:d0:7a:47:95:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510593E55BF7DF9C9640505BCC0F9E789B6EABFA
        Validity
            Not Before: Jan  7 20:57:01 2026 GMT
            Not After : Jan  6 21:02:01 2027 GMT
        Subject: CN=E9D9302E09EE94DE7A88EF5B463BEB41B0382E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e9:5e:c6:a2:5d:87:b6:ea:ff:23:4c:c6:c5:
                    4e:cd:c3:e6:0d:97:42:17:fd:cf:25:b5:19:05:d3:
                    54:a0:e2:ef:0a:98:bd:17:24:4d:6e:bd:48:43:9f:
                    df:46:a8:a8:a4:23:df:32:b1:d4:9c:37:37:ff:39:
                    8b:c0:fe:9f:5b:f8:ca:2f:a4:ca:42:a5:b5:70:f6:
                    4b:41:29:dc:0a:1a:de:b7:70:8f:24:e6:31:ac:cb:
                    f6:a6:ad:4c:cb:79:28:50:d3:3e:fd:82:71:4b:79:
                    ce:bf:16:24:3d:e8:00:45:d6:60:5f:97:32:60:0a:
                    6d:99:be:20:0d:31:08:41:06:a3:4b:da:ff:15:45:
                    e4:7e:6d:a8:04:88:8b:ad:f1:5d:8b:d0:22:61:65:
                    66:85:f9:f0:25:55:34:15:a4:d5:c7:d4:9b:0a:a4:
                    db:23:c5:b0:1b:28:a7:82:aa:8f:74:41:57:28:6c:
                    5f:e0:5a:3c:a3:23:8f:64:07:b2:48:1c:e8:46:3e:
                    38:d7:e5:09:a8:11:05:dd:6f:a9:9d:f2:81:ce:66:
                    78:f2:85:86:02:b1:05:ff:fd:4e:8e:f9:ec:06:06:
                    b1:81:4e:d8:b7:20:bd:69:8e:ff:24:6e:8d:4a:1d:
                    ed:82:34:16:d8:7e:1a:88:54:41:28:74:71:e6:a4:
                    1b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D9:30:2E:09:EE:94:DE:7A:88:EF:5B:46:3B:EB:41:B0:38:2E:36
            X509v3 Authority Key Identifier:
                keyid:51:05:93:E5:5B:F7:DF:9C:96:40:50:5B:CC:0F:9E:78:9B:6E:AB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/510593E55BF7DF9C9640505BCC0F9E789B6EABFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/34352e3138352e3130302e302f32332d3233203d3e20323639333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:60:6f:9c:9c:68:8a:b0:88:8f:a3:70:f6:29:b6:52:dd:8a:
         da:e2:ce:39:7a:03:c0:5a:3a:6a:d9:92:5a:22:40:ac:c2:c9:
         03:a1:6e:27:dc:9d:ef:22:af:48:b1:d4:1c:2c:60:25:cf:a3:
         62:f8:cc:b0:fd:93:0c:f2:7b:6e:fe:1b:d3:f8:88:0a:be:5b:
         1f:d2:16:10:d7:ae:01:ab:36:d3:22:0a:43:68:16:84:d0:5a:
         a0:ce:9f:2c:f3:22:de:c5:0a:79:f2:19:87:00:f3:ae:cd:79:
         75:1f:08:28:01:3c:c0:a5:b2:42:b5:56:2a:c1:10:91:0d:fd:
         28:1a:05:9d:25:48:29:65:5b:ff:e6:96:82:4a:04:03:6c:a1:
         6a:8b:82:1d:b6:ec:59:94:d7:52:1d:dc:a0:f3:3b:57:c2:ae:
         d7:9e:fd:24:7b:6b:2b:e3:3b:6c:0e:34:53:43:b8:b7:c4:b3:
         80:8b:b3:98:95:be:86:d4:c8:ec:de:2c:c5:7d:52:a0:56:4c:
         23:81:28:3d:c9:a2:01:ae:a3:2c:3e:d9:e4:75:43:03:a0:80:
         14:c5:bf:72:7a:b7:27:11:56:1a:c8:b2:59:b0:76:c7:a2:88:
         62:d3:a9:71:7b:a3:84:b3:fc:cd:8e:72:55:a9:fe:77:bc:ff:
         48:ec:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:59:53 2026 by rpki-client