This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3138332e32382e302f32342d3234203d3e20323639323538.roa
File:                     34352e3138332e32382e302f32342d3234203d3e20323639323538.roa (raw, json)
Hash identifier:          8C6UC+wDxB0qUbdh7OEHmVIpHSeVjsxbPBNENSNgUMw=
Subject key identifier:   47:DE:67:DA:DD:33:A6:BE:FF:9F:73:93:67:09:6A:00:6E:1A:82:6D
Certificate issuer:       /CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4
Certificate serial:       6A4B8CBA813DB8F9E7943140FCDF46E77804419E
Authority key identifier: 98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3138332e32382e302f32342d3234203d3e20323639323538.roa
Signing time:             Fri 14 Nov 2025 18:39:23 +0000
ROA not before:           Fri 14 Nov 2025 18:34:23 +0000
ROA not after:            Fri 13 Nov 2026 18:39:23 +0000
asID:                     269258
IP address blocks:        45.183.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl
                          rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4b:8c:ba:81:3d:b8:f9:e7:94:31:40:fc:df:46:e7:78:04:41:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4
        Validity
            Not Before: Nov 14 18:34:23 2025 GMT
            Not After : Nov 13 18:39:23 2026 GMT
        Subject: CN=47DE67DADD33A6BEFF9F739367096A006E1A826D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b8:27:bd:16:55:ca:4d:75:56:e0:2d:53:e3:
                    4b:c4:1f:8a:87:96:20:da:fd:03:d2:9f:45:b8:1f:
                    64:58:3b:d3:11:e3:33:9a:00:b1:e9:b1:48:20:e1:
                    86:10:83:ad:e0:58:bd:4d:c8:f9:66:b3:a8:ba:ff:
                    ee:59:b0:b7:8a:f1:57:c4:9d:c6:cd:bd:1a:05:0b:
                    01:f0:90:1b:82:8a:5f:7c:32:28:d4:37:9e:91:db:
                    85:7f:c9:d4:de:74:c0:cd:94:30:bc:51:0a:61:d4:
                    07:a1:e3:44:14:fd:7d:03:47:39:be:0e:64:fb:41:
                    87:cc:7b:5c:27:e2:bf:b7:37:b3:41:70:d9:d8:44:
                    9f:94:bd:06:ed:31:c8:f4:a0:43:b6:af:05:77:95:
                    e1:92:03:87:73:9f:bf:ac:a4:c4:79:56:a7:3b:0b:
                    3f:08:26:83:79:b9:bc:bf:a1:e2:f8:47:2a:74:ff:
                    de:a6:a3:5e:2f:29:53:bd:8a:04:d4:bf:e4:d7:0a:
                    74:c7:20:ad:4d:d1:22:65:62:5b:68:65:e2:db:bf:
                    ab:0d:c7:ce:c1:61:7b:92:a3:0d:e9:0e:31:fc:1c:
                    04:83:ca:e1:b3:4b:55:53:ca:b3:f4:0e:db:a1:27:
                    e6:e1:1c:6e:cd:14:65:b6:f3:3d:a2:6a:07:8c:f4:
                    c6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DE:67:DA:DD:33:A6:BE:FF:9F:73:93:67:09:6A:00:6E:1A:82:6D
            X509v3 Authority Key Identifier:
                keyid:98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3138332e32382e302f32342d3234203d3e20323639323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:51:a5:ec:6d:ac:89:a1:a6:6b:da:b4:aa:bb:f9:3a:43:f0:
         e6:ac:97:4b:35:b8:ff:ed:ac:26:6c:f9:7d:60:48:9f:7d:e5:
         81:16:f7:00:fe:9d:b1:1b:b3:92:34:95:cc:61:41:ca:67:d5:
         86:ef:78:51:b0:16:bd:36:1a:23:9b:41:19:e7:1e:ba:a0:1b:
         a5:66:60:fb:d6:52:99:38:e0:1b:5c:df:89:fc:53:df:b5:9d:
         4a:13:8d:ba:7f:0f:22:da:15:9f:76:8e:cb:e4:d1:81:0d:bb:
         7c:12:37:02:15:79:31:4d:80:41:20:c3:ca:31:0f:14:89:1b:
         e9:73:c7:de:38:07:69:8d:d3:5a:8a:ea:37:2d:1c:6d:92:52:
         3f:0e:d3:32:51:db:68:8a:39:a0:a3:ae:21:84:54:eb:26:f1:
         83:57:7b:3c:0c:4a:a3:f1:98:f6:34:86:92:98:3c:0b:6f:84:
         d7:22:c0:db:c2:4c:c6:0d:aa:fe:db:91:a5:5a:06:a1:9d:8d:
         83:ac:d1:b5:c0:01:65:fb:eb:89:c3:e7:92:72:6c:ef:0c:b4:
         b2:24:07:72:62:ad:bf:e4:77:4f:98:ff:49:2e:8e:61:68:2d:
         50:77:3a:a8:84:45:a6:70:39:0d:f1:2d:2d:3e:ee:0a:ea:59:
         06:54:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:23:27 2025 by rpki-client