This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132372e302f32342d3234203d3e20323733353830.roa
File:                     34352e362e3132372e302f32342d3234203d3e20323733353830.roa (raw, json)
Hash identifier:          1Ch0pKslK3C+zazaoF/nTcolae8Y2ajkWS5ajBb+2NM=
Subject key identifier:   F9:A7:9D:06:0D:BE:7C:35:9A:36:7B:AC:17:55:70:8E:50:67:BF:E2
Certificate issuer:       /CN=1209D9C857F463458E737B2E278969D81C4F384A
Certificate serial:       2B44026B9837D3192EC52A972A9904BDDDF4CAB5
Authority key identifier: 12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132372e302f32342d3234203d3e20323733353830.roa
Signing time:             Sun 02 Nov 2025 04:04:35 +0000
ROA not before:           Sun 02 Nov 2025 03:59:35 +0000
ROA not after:            Sun 01 Nov 2026 04:04:35 +0000
asID:                     273580
IP address blocks:        45.6.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 19:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:44:02:6b:98:37:d3:19:2e:c5:2a:97:2a:99:04:bd:dd:f4:ca:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1209D9C857F463458E737B2E278969D81C4F384A
        Validity
            Not Before: Nov  2 03:59:35 2025 GMT
            Not After : Nov  1 04:04:35 2026 GMT
        Subject: CN=F9A79D060DBE7C359A367BAC1755708E5067BFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:42:7c:11:79:90:e3:fe:7d:b8:9a:26:4f:
                    d7:aa:48:47:01:a6:e9:4c:c1:69:03:6e:59:52:da:
                    7c:d0:d7:1f:51:22:9e:4a:90:ec:98:2e:81:7e:ad:
                    fe:16:ef:cb:15:d2:ed:fb:e6:d3:e8:45:4f:d7:b3:
                    f9:c5:13:40:47:a4:86:ef:d4:f5:8c:3e:7d:38:67:
                    f9:bb:9e:9b:3f:ea:4d:e0:1c:2d:41:aa:a2:64:0c:
                    85:f3:79:cd:af:13:40:18:88:b6:2d:65:17:9f:f5:
                    5f:d4:9f:01:90:cc:dc:d8:b3:be:cf:01:49:29:cc:
                    b0:27:4e:54:4a:e3:82:02:95:ef:5f:fa:8e:3c:a6:
                    2d:b2:9a:25:8f:f4:b6:f0:b2:31:a0:77:1f:d4:97:
                    7b:df:df:78:f1:5f:e8:18:95:da:d4:1c:80:18:e3:
                    b7:bb:e1:cc:ce:02:5a:33:50:a6:5a:4b:41:ac:e7:
                    58:26:33:d6:e3:8d:dd:c2:6e:b9:f1:07:9f:7f:4d:
                    30:ac:d7:a4:01:04:c5:14:02:16:65:bb:a5:9e:8c:
                    be:00:0f:9a:3c:4a:50:85:28:05:51:a2:29:f4:6b:
                    a1:e7:ed:c8:8a:ce:fa:12:ee:21:a7:e3:2a:ae:e1:
                    4c:f4:88:17:ad:eb:e7:2e:97:24:6c:aa:01:ca:67:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A7:9D:06:0D:BE:7C:35:9A:36:7B:AC:17:55:70:8E:50:67:BF:E2
            X509v3 Authority Key Identifier:
                keyid:12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132372e302f32342d3234203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:56:5a:12:de:49:e9:ee:13:c4:8c:24:fa:2b:1f:5c:8d:05:
         47:3f:fa:c9:4f:3e:de:7d:53:3f:17:a5:e5:d9:9d:3f:6e:c9:
         ed:ad:0b:cb:44:29:90:15:e8:03:10:93:b4:1a:66:1a:8b:38:
         e6:a2:69:d0:64:92:ef:78:cd:b7:27:9d:c3:f9:4e:82:57:6b:
         73:db:46:e7:e0:dd:43:49:08:c5:e0:ec:48:6a:6f:ba:37:44:
         4c:af:7f:1e:6d:01:55:10:00:70:9d:62:fd:e9:dc:76:f5:55:
         35:45:4c:98:59:92:26:68:71:d6:f4:c7:43:b5:9a:17:5c:4f:
         bc:4a:57:9c:bc:3a:2b:80:8f:d7:43:4c:e1:c6:ff:aa:4f:db:
         aa:90:bd:0d:f7:45:0e:04:b1:ce:54:3d:2c:8d:81:a0:7e:da:
         5b:fd:03:4b:80:06:68:2c:b9:00:5f:b6:c4:5a:69:08:71:4d:
         7b:d2:95:08:5e:fc:11:1f:11:c8:46:32:c1:fb:9c:01:bc:81:
         d3:eb:61:ba:93:03:3a:17:91:33:d1:0f:94:4c:56:ab:d4:b1:
         0e:da:13:ae:d8:fa:9a:f5:55:73:8d:49:76:54:80:50:50:fb:
         0e:de:02:01:c1:a5:3d:50:98:c6:6c:e0:6a:32:9b:2c:61:ff:
         f6:5e:a1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:46:06 2025 by rpki-client