This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/34352e36352e3138342e302f32322d3332203d3e20323636353336.roa
File:                     34352e36352e3138342e302f32322d3332203d3e20323636353336.roa (raw, json)
Hash identifier:          RHm0PcArhnbmQYw/ae2IQd1YtzX9Gi4ngB+4UtRSuOk=
Subject key identifier:   80:6F:53:5D:25:E9:4E:A9:82:6C:73:C7:9E:4B:C5:8F:87:FF:F6:C6
Certificate issuer:       /CN=30749C5E57A887A5B2B8370496E94AA79DC8B198
Certificate serial:       3CABDCE0D0FEB7BFF98A93722168EECEBDA26FB5
Authority key identifier: 30:74:9C:5E:57:A8:87:A5:B2:B8:37:04:96:E9:4A:A7:9D:C8:B1:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/34352e36352e3138342e302f32322d3332203d3e20323636353336.roa
Signing time:             Fri 21 Nov 2025 11:21:06 +0000
ROA not before:           Fri 21 Nov 2025 11:16:06 +0000
ROA not after:            Fri 20 Nov 2026 11:21:06 +0000
asID:                     266536
IP address blocks:        45.65.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.crl
                          rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ab:dc:e0:d0:fe:b7:bf:f9:8a:93:72:21:68:ee:ce:bd:a2:6f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30749C5E57A887A5B2B8370496E94AA79DC8B198
        Validity
            Not Before: Nov 21 11:16:06 2025 GMT
            Not After : Nov 20 11:21:06 2026 GMT
        Subject: CN=806F535D25E94EA9826C73C79E4BC58F87FFF6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:66:4b:d6:24:87:f8:92:56:1e:f2:80:e7:65:
                    26:73:d8:e4:ac:89:61:d8:70:d4:41:44:36:03:f9:
                    fc:68:c8:2a:0f:b4:34:7d:8c:10:f7:d3:98:60:c6:
                    0a:be:6a:83:90:da:77:0f:98:53:56:3b:39:d7:08:
                    2a:17:26:f0:b4:3b:e8:1c:55:a8:6b:7c:63:72:61:
                    ac:97:7d:84:7a:08:ae:2d:bb:ae:97:69:d3:d3:a6:
                    0c:e8:b5:97:f3:60:31:50:f1:cc:ac:48:d8:27:13:
                    ca:db:96:87:78:00:08:b8:bd:f9:0f:9d:03:24:23:
                    15:6a:2f:33:29:5c:c7:ba:bb:9f:0d:7c:06:2c:54:
                    3c:95:7d:4a:1c:5a:56:7f:fa:c9:3a:cf:f7:25:a5:
                    da:e9:d7:be:cf:50:a6:2d:33:45:f6:b1:12:d1:89:
                    b5:0e:15:2e:45:85:54:90:6f:fc:a9:7b:a9:9f:2a:
                    3b:e1:f9:01:27:1f:14:ca:53:21:c6:f2:77:8a:1f:
                    fb:ec:99:c5:bc:41:ae:a9:bc:56:50:cc:5d:37:4a:
                    96:d2:f0:f0:f5:04:b3:18:ba:ff:53:9f:89:2f:99:
                    4d:30:6c:07:cc:d2:9c:42:36:10:80:20:a6:4a:30:
                    7f:6f:34:34:9f:c5:bc:06:ca:f5:11:ba:11:e0:29:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6F:53:5D:25:E9:4E:A9:82:6C:73:C7:9E:4B:C5:8F:87:FF:F6:C6
            X509v3 Authority Key Identifier:
                keyid:30:74:9C:5E:57:A8:87:A5:B2:B8:37:04:96:E9:4A:A7:9D:C8:B1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/34352e36352e3138342e302f32322d3332203d3e20323636353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:59:f5:fd:87:43:70:a8:58:d9:19:9d:c2:64:f2:ee:b8:39:
         2d:56:b5:4e:63:21:61:f9:0e:5a:f7:98:27:ec:f4:51:c1:d8:
         02:70:79:b3:90:7d:04:62:19:cc:3d:96:2f:fa:70:49:71:35:
         5e:11:8d:67:c1:07:e3:c1:5e:60:b6:5f:3d:72:67:7e:6c:38:
         69:48:f7:cb:44:68:8c:f6:27:69:8b:8e:1f:ea:bc:aa:de:c0:
         0b:5b:fb:e0:4f:40:5c:1d:ae:9f:da:84:82:4a:90:3c:8d:a0:
         31:3d:be:c8:69:9e:4f:0b:32:c6:72:c7:96:41:47:d2:16:cc:
         4a:04:bf:c7:90:99:5e:d0:a2:96:10:03:b4:64:92:d7:b8:38:
         3e:70:e6:0b:3e:95:43:fc:b4:d9:aa:d5:54:f1:42:79:4d:6b:
         e4:55:35:bc:b2:3e:4b:04:14:f5:4a:e1:9b:26:37:7e:a0:d0:
         ca:dc:cb:f3:ea:02:5d:c3:d7:bc:0d:3e:68:a5:c8:a8:9e:02:
         43:f8:b2:78:39:c8:78:c0:65:a8:38:2f:dd:bc:a2:be:73:d1:
         02:f6:75:ff:84:cc:a9:40:17:ba:6a:4a:4c:86:5f:3f:8b:ed:
         5d:25:32:24:df:d9:42:76:b8:17:c7:82:39:00:97:8f:13:98:
         5d:68:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:45:47 2025 by rpki-client