This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/34352e3233352e38302e302f32322d3234203d3e203532353332.roa
File:                     34352e3233352e38302e302f32322d3234203d3e203532353332.roa (raw, json)
Hash identifier:          M+pPoczQG3UICtx5gmr/7swHCCSg328vavAIYPcBoyw=
Subject key identifier:   81:D8:22:B5:7B:76:29:85:45:57:D3:80:0B:B3:B2:F6:7D:95:81:E0
Certificate issuer:       /CN=E02547CEB01812D757CD1E70C72BBAD758D9B304
Certificate serial:       14AA7F7ACB5305FCAEA659845B084972419C5021
Authority key identifier: E0:25:47:CE:B0:18:12:D7:57:CD:1E:70:C7:2B:BA:D7:58:D9:B3:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E02547CEB01812D757CD1E70C72BBAD758D9B304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/34352e3233352e38302e302f32322d3234203d3e203532353332.roa
Signing time:             Wed 07 Jan 2026 12:29:23 +0000
ROA not before:           Wed 07 Jan 2026 12:24:23 +0000
ROA not after:            Wed 06 Jan 2027 12:29:23 +0000
asID:                     52532
IP address blocks:        45.235.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/E02547CEB01812D757CD1E70C72BBAD758D9B304.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/E02547CEB01812D757CD1E70C72BBAD758D9B304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E02547CEB01812D757CD1E70C72BBAD758D9B304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 01:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:aa:7f:7a:cb:53:05:fc:ae:a6:59:84:5b:08:49:72:41:9c:50:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02547CEB01812D757CD1E70C72BBAD758D9B304
        Validity
            Not Before: Jan  7 12:24:23 2026 GMT
            Not After : Jan  6 12:29:23 2027 GMT
        Subject: CN=81D822B57B7629854557D3800BB3B2F67D9581E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:d9:5d:e9:ba:df:87:b0:6b:e7:bc:fc:d8:
                    84:dc:3e:85:f3:8d:c7:b2:55:04:89:f5:f4:3c:98:
                    40:1d:36:86:88:b3:30:f0:d5:9b:bc:8e:48:54:95:
                    45:68:93:4f:d3:0e:09:3f:a6:2a:d6:61:8c:f6:f3:
                    a7:dc:6c:00:14:c5:d3:4a:19:13:0f:04:4c:bf:71:
                    f1:cc:40:b0:cc:e0:5b:d8:83:01:42:e3:85:44:1a:
                    d6:34:99:b0:7d:b6:89:68:a6:ba:19:a3:79:65:89:
                    47:3a:1d:68:06:b1:8a:21:a5:23:af:76:db:50:20:
                    98:8e:45:f6:fe:2a:90:64:a4:49:6f:32:51:7a:4a:
                    1b:be:d2:4a:e7:18:e4:cc:5d:55:76:cb:fd:6a:bf:
                    af:1a:25:e8:a5:61:84:95:be:78:27:aa:68:f7:5f:
                    55:9e:4e:f5:70:ef:e0:b9:a4:0f:09:30:35:a4:e8:
                    42:21:2b:43:04:34:36:4c:66:e4:2d:84:c1:ac:88:
                    c3:51:49:f3:83:95:8c:cd:ab:5a:a2:2d:f2:d9:66:
                    75:da:be:16:ae:7a:c6:2c:19:7b:ec:26:b0:ce:9f:
                    5b:ff:9c:5b:52:49:8d:5b:7a:41:fa:a3:3b:8a:d5:
                    e5:4d:d5:3b:35:70:30:05:c8:cd:6a:80:e2:cc:fe:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D8:22:B5:7B:76:29:85:45:57:D3:80:0B:B3:B2:F6:7D:95:81:E0
            X509v3 Authority Key Identifier:
                keyid:E0:25:47:CE:B0:18:12:D7:57:CD:1E:70:C7:2B:BA:D7:58:D9:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/E02547CEB01812D757CD1E70C72BBAD758D9B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E02547CEB01812D757CD1E70C72BBAD758D9B304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/34352e3233352e38302e302f32322d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:cb:54:16:89:98:46:7d:5d:29:47:7e:17:2a:66:14:62:a3:
         e1:20:94:65:06:61:7f:13:2e:3d:01:7d:fd:f5:28:53:5d:72:
         a4:fb:fe:44:bd:ef:b2:a0:fb:a1:74:17:ed:f2:2f:09:a7:08:
         25:41:00:d7:55:56:5b:58:a6:b0:9d:0e:f2:76:5d:8a:81:6c:
         6b:6f:1a:d9:85:f0:9c:34:e5:9b:73:22:27:0b:cb:d7:76:83:
         37:4c:72:3b:85:1f:94:fe:c7:54:c8:93:5e:0e:91:3c:0f:fe:
         67:6a:4d:37:5b:2e:53:7e:40:d3:7e:03:8f:18:27:18:e8:e6:
         c7:d7:7f:e5:2d:93:ec:16:be:d6:de:92:42:26:57:eb:62:38:
         93:b6:a8:3a:df:ee:7f:bf:ee:cd:7c:14:ff:65:44:21:92:28:
         d3:a7:17:c1:51:75:0a:d5:1b:73:4f:6d:dd:51:d7:e1:0a:78:
         6b:2a:a6:78:f0:61:8e:df:d3:39:8b:1b:80:c6:95:50:d6:69:
         3f:a2:2c:91:6c:26:6f:f7:3f:8d:51:17:91:db:cb:96:72:ea:
         ed:ba:96:9e:ee:c9:88:80:a7:a0:b9:83:a6:8e:6e:ef:22:2f:
         f8:6b:90:17:51:d1:3e:fd:26:18:50:c4:37:d3:64:10:17:b5:
         1b:8d:d2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:07:34 2026 by rpki-client