This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32342d3234203d3e20323639303135.roa
File:                     34352e3137382e32302e302f32342d3234203d3e20323639303135.roa (raw, json)
Hash identifier:          76J/LbaS8NkLWvDOSQpfRNQSw6fKso3P7snzdo4O1BY=
Subject key identifier:   07:BC:C8:11:09:1C:1C:A8:BD:2F:F1:A5:22:EA:63:40:F4:65:FA:C5
Certificate issuer:       /CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Certificate serial:       0B28FF6A085A32CDB9AC4B51CDCDCE54F164DBE6
Authority key identifier: 2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32342d3234203d3e20323639303135.roa
Signing time:             Thu 18 Dec 2025 14:18:22 +0000
ROA not before:           Thu 18 Dec 2025 14:13:22 +0000
ROA not after:            Thu 17 Dec 2026 14:18:22 +0000
asID:                     269015
IP address blocks:        45.178.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 15:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:28:ff:6a:08:5a:32:cd:b9:ac:4b:51:cd:cd:ce:54:f1:64:db:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
        Validity
            Not Before: Dec 18 14:13:22 2025 GMT
            Not After : Dec 17 14:18:22 2026 GMT
        Subject: CN=07BCC811091C1CA8BD2FF1A522EA6340F465FAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:fd:1d:ec:f2:e8:6e:e9:7f:48:13:96:62:
                    3c:7b:1e:13:9f:0a:fc:ca:b7:cd:0a:65:50:8d:ff:
                    e0:c1:ea:f2:9e:9f:ec:fe:a6:28:b5:17:25:72:06:
                    a3:f2:6a:ff:09:8d:b5:c4:3c:a2:2c:67:36:b9:1d:
                    85:7e:6b:bd:55:88:17:ad:06:1b:49:56:a1:e3:67:
                    8a:27:6f:01:a9:06:10:17:83:02:82:8c:5a:74:55:
                    0c:d5:c6:b6:be:38:15:4b:71:1e:1c:42:2b:b2:58:
                    e7:6f:2c:5b:0c:36:e7:8c:60:6b:85:fd:1a:46:66:
                    05:93:f7:71:9b:f9:f4:17:03:b6:03:5f:9e:7e:47:
                    8b:a4:f5:78:ae:63:a1:17:41:08:0d:6e:3d:35:30:
                    53:c7:e4:a1:73:3d:9f:0e:6d:82:a1:a2:c2:5d:9f:
                    5c:fe:d5:e5:51:8b:e9:51:bd:39:e7:03:e0:d0:34:
                    a1:09:08:24:4a:ab:fb:ab:a4:17:26:b9:de:41:53:
                    43:30:d4:01:b6:bf:ee:33:46:b9:80:0e:a3:7c:21:
                    62:eb:f9:d6:a8:35:89:4e:e8:7d:56:ac:51:fe:a3:
                    50:fc:49:21:49:3b:e2:d0:52:dc:96:7c:ee:29:c1:
                    ae:5f:42:62:e7:1b:1f:6d:93:f2:16:9c:86:2d:a2:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BC:C8:11:09:1C:1C:A8:BD:2F:F1:A5:22:EA:63:40:F4:65:FA:C5
            X509v3 Authority Key Identifier:
                keyid:2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32342d3234203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:44:8d:cc:ba:2e:d0:12:fa:c5:9a:38:fc:5f:b8:1c:11:b8:
         4b:82:11:8c:83:16:1a:f3:69:4a:cf:46:95:56:bb:b9:c6:7b:
         44:99:d1:6e:21:81:41:7c:b6:7c:72:bb:5c:bd:96:b6:ed:24:
         5e:df:e1:a5:d7:ab:bf:d4:c2:11:c1:47:04:25:dd:ea:20:3e:
         15:06:45:e5:43:e8:56:48:91:87:34:11:bb:28:c4:81:2f:05:
         4b:97:8f:58:ee:d3:be:21:90:fd:73:03:67:46:7d:06:b0:2e:
         4f:d6:f2:5b:8a:dd:71:d0:8a:38:cf:21:cb:74:e1:68:e4:7d:
         70:85:a3:12:b0:4c:31:f4:8b:c3:6e:b2:a5:a6:c8:4c:71:ad:
         28:cc:f6:a7:3e:ed:40:08:84:d5:08:5a:2a:40:04:97:63:83:
         88:b5:70:55:9f:f9:7d:9a:1e:28:1f:e8:d5:d1:39:13:e8:aa:
         51:18:4d:91:1b:82:86:5b:0c:07:18:21:26:e5:ca:52:49:ef:
         87:d1:31:61:a5:1e:b5:ee:0d:91:8c:67:5b:74:e3:3d:20:7e:
         91:86:93:80:32:0a:d3:66:b2:a6:da:24:28:c8:7b:36:cd:d3:
         89:aa:76:3a:8f:10:87:83:e4:94:9a:61:b5:32:ec:7c:5e:a9:
         33:22:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:47:12 2025 by rpki-client