This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32342d3234203d3e20323639323538.roa
File:                     34352e3233392e3134302e302f32342d3234203d3e20323639323538.roa (raw, json)
Hash identifier:          CiONmP+PeykJVpUWpQj6lOU9OL+vJEC6bQ8s0Ehc1Qk=
Subject key identifier:   AC:B8:ED:DD:62:70:63:EF:0E:22:B9:69:D7:1B:0E:E9:89:D6:72:CC
Certificate issuer:       /CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4
Certificate serial:       030F059AD7E637391929FF62FA3323D493E9681D
Authority key identifier: 98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32342d3234203d3e20323639323538.roa
Signing time:             Fri 14 Nov 2025 18:40:32 +0000
ROA not before:           Fri 14 Nov 2025 18:35:32 +0000
ROA not after:            Fri 13 Nov 2026 18:40:32 +0000
asID:                     269258
IP address blocks:        45.239.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl
                          rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0f:05:9a:d7:e6:37:39:19:29:ff:62:fa:33:23:d4:93:e9:68:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4
        Validity
            Not Before: Nov 14 18:35:32 2025 GMT
            Not After : Nov 13 18:40:32 2026 GMT
        Subject: CN=ACB8EDDD627063EF0E22B969D71B0EE989D672CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:8b:5f:42:43:a2:35:53:d9:b3:66:d2:f9:
                    3a:6b:49:9a:b2:d0:a3:c5:d8:35:bf:9c:b1:16:83:
                    9e:5d:d6:7e:0b:d1:5e:2b:7b:d4:1f:ef:eb:89:b0:
                    29:ae:be:fd:54:10:ff:61:a8:06:17:6e:dd:c9:e8:
                    c4:50:9f:33:90:e2:82:a4:dc:5f:ed:53:24:5c:04:
                    c0:17:0c:d9:12:81:ba:e8:f6:a0:ec:f7:59:ba:12:
                    f2:77:f5:20:25:8b:90:b6:fd:a5:4c:f1:8c:c0:80:
                    62:95:86:d5:14:c0:50:9d:b1:2e:41:81:f7:a2:90:
                    99:f2:a8:9f:58:3b:37:81:8f:b5:5c:51:15:11:7a:
                    f2:e7:c8:10:2c:c2:c4:b8:8f:cd:7f:62:10:8b:ff:
                    7b:a8:9a:e2:a4:1a:c8:6b:ef:d0:02:64:fe:0c:ae:
                    4a:5b:b8:0a:26:a1:44:56:dc:f1:cc:92:9b:fd:ad:
                    01:3c:9a:65:03:c5:7e:34:d2:68:9d:3e:e7:c0:62:
                    f7:50:28:45:0a:9e:b2:a3:c5:58:25:af:ac:75:59:
                    b8:7e:75:65:5d:02:76:72:7e:5d:e7:ae:87:40:58:
                    da:c7:01:ed:14:c5:2c:e4:13:ac:db:10:63:ce:27:
                    b5:db:d7:46:74:18:26:be:5d:44:84:22:e9:10:82:
                    4f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B8:ED:DD:62:70:63:EF:0E:22:B9:69:D7:1B:0E:E9:89:D6:72:CC
            X509v3 Authority Key Identifier:
                keyid:98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32342d3234203d3e20323639323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b9:04:a2:54:72:d1:53:47:a8:9e:92:12:8d:ad:3f:15:28:
         e7:07:e7:75:f9:7f:7e:2a:12:1c:b8:b0:c4:23:f5:cd:ea:37:
         6f:29:41:e6:66:e8:c6:ab:4c:cf:79:11:04:82:db:17:f0:0a:
         81:0d:1a:d1:c6:a1:77:49:f7:14:48:34:4f:82:c0:5d:2d:85:
         d2:69:f0:e6:08:3a:c5:b2:d8:fa:3b:7c:fa:6e:5d:90:78:77:
         1d:b1:d3:bf:e5:46:8f:6a:f8:b9:ba:b5:84:81:a7:a6:f4:b4:
         74:fe:19:dd:a3:44:2d:bc:e8:02:51:a7:39:8f:c0:6d:45:da:
         17:62:1a:30:d3:ab:27:b3:b4:ae:99:66:4a:1f:64:03:25:4d:
         92:88:1e:56:4a:33:67:43:a7:66:06:29:30:f5:4e:1b:8f:0a:
         62:f0:7e:8f:75:c9:44:25:f2:ba:20:92:62:7a:f1:10:31:7d:
         c5:7a:01:86:5a:b5:d5:f7:11:00:ad:48:69:26:99:15:42:07:
         7b:f1:db:98:cf:5e:40:89:9d:c5:f0:60:a3:2a:47:9f:88:79:
         3f:93:9e:26:9d:51:df:7d:64:01:88:b5:b7:04:28:d9:b0:ed:
         f3:a4:73:3f:f3:e3:fb:68:ea:a7:c2:ab:94:e6:0a:8a:2a:f2:
         f2:76:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:24:50 2025 by rpki-client