This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa
File:                     34352e3137382e32302e302f32322d3232203d3e20323639303135.roa (raw, json)
Hash identifier:          HftmIyrokhGUjcr0FEZyXrdA7R5IHKyE3fX0Rugnkr4=
Subject key identifier:   87:22:25:1C:DB:F2:A9:95:34:0B:22:CF:94:55:A7:75:54:09:51:AD
Certificate issuer:       /CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Certificate serial:       4F1B6F088645B947F5F2526D1CA433F246982361
Authority key identifier: 2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa
Signing time:             Thu 18 Dec 2025 14:18:18 +0000
ROA not before:           Thu 18 Dec 2025 14:13:18 +0000
ROA not after:            Thu 17 Dec 2026 14:18:18 +0000
asID:                     269015
IP address blocks:        45.178.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 15:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1b:6f:08:86:45:b9:47:f5:f2:52:6d:1c:a4:33:f2:46:98:23:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
        Validity
            Not Before: Dec 18 14:13:18 2025 GMT
            Not After : Dec 17 14:18:18 2026 GMT
        Subject: CN=8722251CDBF2A995340B22CF9455A775540951AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:4a:84:33:a6:fc:a5:e6:07:e4:d9:14:20:
                    c8:31:d7:dc:da:24:7b:4b:44:69:8c:5d:91:7b:d3:
                    a2:66:15:54:3d:15:40:d0:65:52:2c:c8:9b:13:b8:
                    7b:00:5f:92:59:20:cd:c7:27:81:26:a3:c9:72:3f:
                    a9:2c:11:17:d7:90:a7:26:c5:ac:89:bf:01:bf:ea:
                    d5:d0:fa:39:2c:bf:e5:60:b8:85:26:ac:8b:d8:9d:
                    ac:e5:74:45:35:a7:a0:8b:64:0a:7f:82:b0:1d:bc:
                    30:8c:ac:d3:32:cf:27:74:ee:51:ac:ba:65:96:87:
                    e6:dd:f1:01:4d:6a:e6:0e:72:7f:8d:c1:7b:aa:c2:
                    d0:a9:49:0f:bb:6b:3f:70:00:d1:18:ce:35:20:54:
                    63:c2:b1:7f:db:3b:c5:f0:52:e4:00:fa:f6:35:1e:
                    c9:9b:f4:e5:1e:c7:d0:85:21:42:2d:2d:d5:33:9b:
                    15:94:d1:90:3a:6c:ef:3c:80:54:08:83:d9:6f:fa:
                    01:69:f0:83:40:f6:6f:3c:d8:8d:9b:f0:0b:d7:d8:
                    d2:e1:e8:5a:10:56:5f:b4:a7:cc:45:f0:f9:69:f0:
                    6f:54:01:1c:a0:a4:97:d2:55:60:02:e8:d7:9e:c6:
                    89:26:f2:1a:d5:70:e8:fd:0c:d6:0d:ad:17:1e:6f:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:22:25:1C:DB:F2:A9:95:34:0B:22:CF:94:55:A7:75:54:09:51:AD
            X509v3 Authority Key Identifier:
                keyid:2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:2c:9f:98:a6:d6:19:9b:2d:77:ff:6c:a5:11:60:fa:93:b7:
         fa:1b:07:b2:52:93:0c:50:a6:76:9c:0c:db:d0:71:84:44:35:
         0d:ed:aa:d2:a7:37:41:25:2e:80:02:fe:30:0f:27:2c:32:e4:
         a4:a4:44:3e:6c:19:ec:9f:7d:58:cc:74:14:34:7a:a5:13:89:
         2b:69:d7:9f:96:39:b7:aa:0a:dd:aa:ff:ef:f7:a9:b6:a3:ac:
         ab:1e:cc:c3:eb:8b:57:32:d9:21:44:fc:7b:26:58:a0:cf:6c:
         d4:d7:5d:a9:5c:85:fb:05:ca:ac:80:38:96:3a:a6:cd:38:14:
         49:6c:91:70:43:3c:b0:41:d4:b8:ac:6c:f9:97:2a:97:1b:46:
         98:1e:a7:7d:a9:d7:d4:b0:15:19:8d:d3:e3:59:fd:37:70:c7:
         37:ef:34:f4:f0:73:80:00:44:5b:45:be:f7:b1:32:9e:ee:d7:
         0a:8f:8e:4f:f0:98:c0:68:7b:59:22:ff:d9:0d:9c:6c:f6:9e:
         4e:20:be:53:db:99:e6:b0:2c:2c:9f:07:a6:f7:15:bc:93:57:
         6c:6c:f0:bb:4c:e7:d4:1a:ba:7c:93:24:81:ea:8a:e8:46:48:
         95:99:27:c8:f2:eb:d0:79:ac:56:78:9f:b5:64:05:77:e1:3b:
         54:e8:60:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:47:15 2025 by rpki-client