This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/34352e3137362e3232342e302f32322d3234203d3e20323638393535.roa
File:                     34352e3137362e3232342e302f32322d3234203d3e20323638393535.roa (raw, json)
Hash identifier:          UqvitdVoP6EOjyN866oJKkZsDmC3vHFMSZp1jMecWvs=
Subject key identifier:   56:FD:FC:73:45:2B:E7:E8:BA:7F:F7:8A:9C:57:6B:13:EA:25:8F:39
Certificate issuer:       /CN=9585286624B3FE02B7690BEE57E89C3FA5D4770E
Certificate serial:       67426EE81C0CA2BF88A4F698D272A43448407655
Authority key identifier: 95:85:28:66:24:B3:FE:02:B7:69:0B:EE:57:E8:9C:3F:A5:D4:77:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585286624B3FE02B7690BEE57E89C3FA5D4770E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/34352e3137362e3232342e302f32322d3234203d3e20323638393535.roa
Signing time:             Tue 20 Jan 2026 21:30:29 +0000
ROA not before:           Tue 20 Jan 2026 21:25:29 +0000
ROA not after:            Tue 19 Jan 2027 21:30:29 +0000
asID:                     268955
IP address blocks:        45.176.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/9585286624B3FE02B7690BEE57E89C3FA5D4770E.crl
                          rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/9585286624B3FE02B7690BEE57E89C3FA5D4770E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585286624B3FE02B7690BEE57E89C3FA5D4770E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 05:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:42:6e:e8:1c:0c:a2:bf:88:a4:f6:98:d2:72:a4:34:48:40:76:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9585286624B3FE02B7690BEE57E89C3FA5D4770E
        Validity
            Not Before: Jan 20 21:25:29 2026 GMT
            Not After : Jan 19 21:30:29 2027 GMT
        Subject: CN=56FDFC73452BE7E8BA7FF78A9C576B13EA258F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:db:00:7d:48:93:0c:21:98:c0:6c:76:4c:
                    33:fd:ab:cc:eb:9d:52:0a:ea:8f:9b:57:22:14:d7:
                    e4:58:a8:0f:1a:e2:b7:7e:ea:de:21:5f:31:4c:84:
                    5d:37:17:52:01:08:79:c8:12:cf:47:4c:f1:73:4e:
                    01:03:f0:39:c5:fa:1d:eb:60:76:d5:61:51:71:01:
                    2b:33:48:19:0a:09:57:42:57:8a:84:2a:05:b1:b5:
                    ee:b3:f4:0d:40:1e:7d:2c:6d:42:d6:44:4f:26:21:
                    c7:53:92:54:e8:13:f9:91:bf:43:71:da:77:01:34:
                    bf:ec:c2:fb:2b:03:ca:af:78:0b:6d:2c:37:d0:62:
                    57:6a:7c:e3:91:af:b6:82:64:1c:ae:b4:d8:08:bf:
                    d6:12:32:59:a2:16:2e:82:7b:55:a0:4b:78:29:75:
                    3d:f3:78:ea:be:f5:df:59:8e:e3:bf:a4:96:e1:74:
                    f0:e2:b0:78:4a:b2:7b:8e:76:bf:f8:ff:0d:de:1e:
                    50:ce:85:f9:da:3e:8d:b6:2a:9d:28:c1:81:2e:93:
                    95:81:de:26:36:85:3b:a4:57:57:2c:42:18:63:03:
                    5d:8c:56:2a:0d:c5:c8:91:f6:bf:ea:d1:0c:b1:ff:
                    c1:45:1c:e8:5a:4c:88:84:17:47:3d:99:c6:d9:b5:
                    b4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FD:FC:73:45:2B:E7:E8:BA:7F:F7:8A:9C:57:6B:13:EA:25:8F:39
            X509v3 Authority Key Identifier:
                keyid:95:85:28:66:24:B3:FE:02:B7:69:0B:EE:57:E8:9C:3F:A5:D4:77:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/9585286624B3FE02B7690BEE57E89C3FA5D4770E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9585286624B3FE02B7690BEE57E89C3FA5D4770E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/34352e3137362e3232342e302f32322d3234203d3e20323638393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:69:23:8e:23:cd:06:cd:e8:f6:fa:f3:52:f7:2d:d9:a2:41:
         b7:fc:7b:ba:04:87:35:60:02:58:40:24:b7:f8:4d:87:be:7d:
         f9:35:0d:2d:22:81:7e:f5:30:34:eb:f9:54:e6:7a:ca:0d:05:
         ad:1d:06:d2:1a:f0:ca:57:e1:1f:ff:58:c9:a9:3f:52:0c:67:
         a8:3a:5f:98:ae:b0:c0:b7:f6:30:76:07:a5:77:38:7c:dd:8b:
         0a:40:9e:45:66:d2:0b:97:13:b9:8c:2c:19:cf:26:1c:63:fb:
         80:bc:3d:6d:27:d1:03:dd:4d:eb:d9:c9:f7:91:62:79:56:b8:
         19:92:71:fb:f0:10:e3:bd:34:f1:14:cb:6c:ed:17:ee:80:eb:
         40:44:bc:1a:b9:2a:8a:c9:55:c8:31:08:fa:9c:2e:70:11:bd:
         0e:bd:f3:79:51:f1:36:1e:03:59:21:5d:40:cc:1f:98:73:b6:
         8f:fd:4f:8c:2d:e5:10:a0:22:4e:df:71:97:a6:a5:d3:46:fc:
         58:1f:37:7f:ed:76:a7:cc:18:14:76:80:b5:d4:ba:eb:78:a4:
         44:99:7d:38:d4:2a:18:ea:9d:b0:a3:79:cd:63:1c:e4:9f:e8:
         82:69:2f:bf:05:f7:6e:a2:8a:45:b9:26:26:2c:15:fe:f6:e8:
         6d:b3:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:59:50 2026 by rpki-client