This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3136332e3130382e302f32322d3332203d3e20323632343934.roa
File:                     34352e3136332e3130382e302f32322d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          jUzX7fz+3lbaJ9QXEufdnOpE17gj1bMEGWN17Gevy+A=
Subject key identifier:   A2:2C:0B:B2:30:E3:DC:A3:79:6D:A9:90:7A:97:4E:34:7D:92:F0:0A
Certificate issuer:       /CN=FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772
Certificate serial:       AB0F43F41817F5EEFDF2778EF5442BC5AF2493
Authority key identifier: FE:5F:4F:A6:B8:8A:1C:2C:36:12:16:A2:D7:C5:0C:8D:96:9A:27:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3136332e3130382e302f32322d3332203d3e20323632343934.roa
Signing time:             Tue 09 Dec 2025 19:32:11 +0000
ROA not before:           Tue 09 Dec 2025 19:27:11 +0000
ROA not after:            Tue 08 Dec 2026 19:32:11 +0000
asID:                     262494
IP address blocks:        45.163.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ab:0f:43:f4:18:17:f5:ee:fd:f2:77:8e:f5:44:2b:c5:af:24:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772
        Validity
            Not Before: Dec  9 19:27:11 2025 GMT
            Not After : Dec  8 19:32:11 2026 GMT
        Subject: CN=A22C0BB230E3DCA3796DA9907A974E347D92F00A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:f1:2c:32:fc:77:d5:36:aa:fe:af:ea:81:
                    9e:c6:f9:1e:c1:98:da:3a:25:1f:e0:79:c4:76:48:
                    49:97:07:01:88:e5:c8:f4:69:1d:45:bd:7a:7c:6e:
                    ae:34:fb:56:d0:31:7e:a2:cb:f9:16:a1:6e:4f:f5:
                    54:96:9c:ae:f6:e9:c3:6e:00:95:82:48:dc:05:42:
                    d3:f1:fb:05:85:97:b4:6f:44:fd:18:da:42:81:9f:
                    35:40:9b:ca:c4:6e:b4:3e:05:38:1b:6c:a2:51:3c:
                    48:d6:5a:b4:55:4c:3f:e3:eb:d9:e6:02:a9:b4:c8:
                    57:a4:39:fc:db:56:5a:62:0d:05:71:55:28:f0:f1:
                    8b:d9:2c:42:17:1e:c3:d9:2b:af:dc:fa:cc:d6:10:
                    ed:40:b0:d5:53:0d:d2:e0:c7:62:91:72:86:73:eb:
                    f5:c3:b1:fb:89:a3:93:34:fb:fb:13:83:d1:60:09:
                    37:9c:c4:21:c1:98:44:40:77:28:4e:4f:2e:20:47:
                    ad:51:11:99:c2:75:05:bd:a7:2c:1f:2a:52:48:a2:
                    ac:0e:bd:53:31:cc:1d:e5:3d:c0:07:85:c4:05:c3:
                    5b:99:13:32:86:35:2a:05:34:38:86:b6:05:f0:3f:
                    b4:14:08:8f:48:09:33:e1:96:78:7b:af:85:34:70:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2C:0B:B2:30:E3:DC:A3:79:6D:A9:90:7A:97:4E:34:7D:92:F0:0A
            X509v3 Authority Key Identifier:
                keyid:FE:5F:4F:A6:B8:8A:1C:2C:36:12:16:A2:D7:C5:0C:8D:96:9A:27:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3136332e3130382e302f32322d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:ec:50:a8:0a:7a:3e:0e:79:b4:61:56:39:c0:a3:17:1d:
         24:dc:18:4b:70:0e:c9:93:50:17:a1:ef:c7:b0:92:9e:ef:c4:
         be:4a:a6:db:ba:89:27:5b:36:a2:03:d7:ac:7e:5d:f0:e6:3f:
         72:5f:31:ba:3a:20:91:af:36:fa:f9:02:2e:4e:1a:e4:af:5c:
         9c:63:56:4c:71:91:cc:d2:1a:52:bc:62:d3:24:cb:23:1d:8e:
         09:24:18:60:d6:04:c1:e9:4c:82:e7:95:dd:c4:0c:9e:44:fd:
         f5:38:d2:44:67:ea:e4:f9:1e:0a:b8:ab:f7:40:43:a5:b9:ee:
         56:f1:59:f8:bb:58:c1:b8:ae:ac:06:a0:11:db:6f:9f:a5:79:
         a1:bc:4f:74:bb:47:07:b4:fa:e9:fe:15:12:bc:f5:33:35:df:
         09:32:18:a0:a8:ac:9d:d6:a5:cd:c8:53:88:6d:9b:3d:27:fd:
         b9:4f:5d:cf:3a:b4:74:86:50:45:a8:8c:7a:df:d8:87:5e:ca:
         b8:e1:d2:f7:ad:67:36:6b:3d:0c:52:e6:09:5a:98:22:ca:c6:
         82:ad:d2:eb:4f:46:e6:53:b7:3b:58:0d:3a:3d:13:69:db:96:
         5f:cf:0f:e1:24:de:54:7a:46:3f:8d:54:0e:65:11:e2:fd:32:
         be:f9:ef:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAKsPQ/QYF/Xu/fJ3jvVEK8WvJJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU1RjRGQTZCODhBMUMyQzM2MTIxNkEyRDdDNTBDOEQ5
NjlBMjc3MjAeFw0yNTEyMDkxOTI3MTFaFw0yNjEyMDgxOTMyMTFaMDMxMTAvBgNV
BAMTKEEyMkMwQkIyMzBFM0RDQTM3OTZEQTk5MDdBOTc0RTM0N0Q5MkYwMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxvEsMvx31Taq/q/qgZ7G+R7B
mNo6JR/gecR2SEmXBwGI5cj0aR1FvXp8bq40+1bQMX6iy/kWoW5P9VSWnK726cNu
AJWCSNwFQtPx+wWFl7RvRP0Y2kKBnzVAm8rEbrQ+BTgbbKJRPEjWWrRVTD/j69nm
Aqm0yFekOfzbVlpiDQVxVSjw8YvZLEIXHsPZK6/c+szWEO1AsNVTDdLgx2KRcoZz
6/XDsfuJo5M0+/sTg9FgCTecxCHBmERAdyhOTy4gR61REZnCdQW9pywfKlJIoqwO
vVMxzB3lPcAHhcQFw1uZEzKGNSoFNDiGtgXwP7QUCI9ICTPhlnh7r4U0cCR5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoiwLsjDj3KN5bamQepdONH2S8AowHwYDVR0j
BBgwFoAU/l9PpriKHCw2Ehai18UMjZaaJ3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdXZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNF
SkMvMC9GRTVGNEZBNkI4OEExQzJDMzYxMjE2QTJEN0M1MEM4RDk2OUEyNzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNUY0RkE2Qjg4QTFDMkMz
NjEyMTZBMkQ3QzUwQzhEOTY5QTI3NzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAv
MzQzNTJlMzEzNjMzMmUzMTMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIto2wwDQYJKoZIhvcNAQELBQADggEBAD+r7FCo
Cno+Dnm0YVY5wKMXHSTcGEtwDsmTUBeh78ewkp7vxL5Kptu6iSdbNqID16x+XfDm
P3JfMbo6IJGvNvr5Ai5OGuSvXJxjVkxxkczSGlK8YtMkyyMdjgkkGGDWBMHpTILn
ld3EDJ5E/fU40kRn6uT5Hgq4q/dAQ6W57lbxWfi7WMG4rqwGoBHbb5+leaG8T3S7
Rwe0+un+FRK89TM13wkyGKCorJ3Wpc3IU4htmz0n/blPXc86tHSGUEWojHrf2Ide
yrjh0vetZzZrPQxS5glamCLKxoKt0utPRuZTtztYDTo9E2nbll/PD+Ek3lR6Rj+N
VA5lEeL9Mr757wo=
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:19:52 2025 by rpki-client