This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa
File:                     34352e3233352e31362e302f32332d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          Yd0GYUbrW5kcL9uw8U/3aCCFMutQBpF8F8zbp1xwx+8=
Subject key identifier:   7A:DA:5C:35:18:47:9A:67:13:09:ED:84:DC:51:8D:F6:F0:E6:8C:6F
Certificate issuer:       /CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
Certificate serial:       7659797293385545FAD1FDCAAA64FF43ECC123DA
Authority key identifier: 87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa
Signing time:             Fri 16 Jan 2026 17:26:03 +0000
ROA not before:           Fri 16 Jan 2026 17:21:03 +0000
ROA not after:            Fri 15 Jan 2027 17:26:03 +0000
asID:                     262391
IP address blocks:        45.235.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:59:79:72:93:38:55:45:fa:d1:fd:ca:aa:64:ff:43:ec:c1:23:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
        Validity
            Not Before: Jan 16 17:21:03 2026 GMT
            Not After : Jan 15 17:26:03 2027 GMT
        Subject: CN=7ADA5C3518479A671309ED84DC518DF6F0E68C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:e3:7e:d3:27:49:5a:f5:b1:89:d4:6b:ae:
                    91:9b:70:c0:b2:ea:22:46:fb:f5:f6:2c:bc:01:72:
                    41:03:bd:11:34:0e:d7:30:af:9b:16:a7:8c:9d:80:
                    48:04:07:fa:37:46:67:69:2e:68:2c:83:2d:f9:67:
                    e2:33:51:32:1b:48:40:4a:02:b5:aa:eb:3f:52:c1:
                    c5:de:cb:b4:35:be:70:83:7c:f1:8f:a0:c5:9b:09:
                    25:c2:40:89:65:f6:ae:c6:ac:84:0e:02:30:cf:cd:
                    b0:3e:b5:18:89:90:53:fe:8d:2f:8b:0e:dc:f2:38:
                    a1:8e:59:51:b8:ef:7e:26:8a:b8:d1:e2:d2:dd:24:
                    02:ec:b5:0d:26:5d:2d:cf:e8:27:85:3f:d5:d3:68:
                    f6:59:9b:d2:d0:f6:75:1f:38:e9:49:f6:2d:ed:f3:
                    e2:cb:48:ed:31:ce:da:03:a1:3b:a4:65:ff:2f:0a:
                    f4:28:31:af:83:94:76:ea:ff:4c:4e:48:b1:cc:ed:
                    63:1b:65:11:45:9a:ad:9a:10:51:cb:fa:0f:66:af:
                    ad:59:d3:a3:dd:66:c6:e8:d6:b2:98:db:0e:93:a5:
                    5c:57:aa:e1:0b:17:aa:2d:7a:ab:e4:f2:e1:a6:b6:
                    f1:a7:34:e9:0f:23:69:a8:99:63:7f:bf:9e:cd:b5:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DA:5C:35:18:47:9A:67:13:09:ED:84:DC:51:8D:F6:F0:E6:8C:6F
            X509v3 Authority Key Identifier:
                keyid:87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/34352e3233352e31362e302f32332d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:a3:89:f0:e3:63:47:d5:97:c6:5a:f5:1e:fd:af:12:00:e0:
         f0:52:a9:0d:11:f0:a0:b1:67:23:ec:6b:cc:b4:06:e8:43:3d:
         7d:32:f0:73:a6:8f:0f:8a:bf:01:8d:3d:bc:54:32:9f:92:12:
         a0:bb:05:a8:18:84:be:90:d3:63:f4:0e:55:75:1f:71:59:a7:
         c9:cb:c3:5c:17:ea:6f:51:3d:ec:93:84:19:b0:e4:62:72:40:
         2c:e7:2f:1f:ff:2b:3e:78:65:12:28:91:22:fe:c5:f9:63:9b:
         d8:2e:b6:0a:90:5d:a3:42:08:32:0a:72:69:3f:4c:26:ad:6d:
         60:05:05:41:fe:9c:2d:c8:bf:14:8c:e9:13:82:91:82:b5:0a:
         43:f9:c3:9a:ea:23:1a:11:d7:1d:13:e5:ad:a7:06:0b:8e:a0:
         e7:9a:86:5a:fe:e1:fa:8d:1e:b6:ef:35:2e:e8:f5:79:b1:cd:
         c8:f6:b5:12:9a:de:a2:10:76:6f:a0:20:eb:b8:5b:9f:76:cd:
         03:9b:9b:9b:d2:e2:50:e3:4f:78:a9:2a:d1:7a:4c:11:f2:d9:
         66:f5:eb:93:e2:63:34:f3:8d:d5:b5:1b:94:cd:3d:a4:d3:54:
         3b:ef:6b:bb:f1:e2:91:0e:a4:c8:15:1a:ac:ef:bb:41:4e:c8:
         fa:eb:b2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:01:34 2026 by rpki-client