This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bFW1Zv5wuE8AktXQ9pNQBQ6MNmCPNzFHXkq7zaRiShA/0/34352e3233312e3136362e302f32332d3233203d3e20323637323130.roa
File:                     34352e3233312e3136362e302f32332d3233203d3e20323637323130.roa (raw, json)
Hash identifier:          Bqd8eSDWZmXHCmGBqUNlGvbcQVYRVTRxJfGj4KvLNP0=
Subject key identifier:   A8:8D:A7:4E:5E:42:33:84:82:98:0C:BC:C8:03:A5:2F:3C:53:53:7F
Certificate issuer:       /CN=554569F00F12EC9084ADC6573302154A47EAC594
Certificate serial:       2DC28093F58153EC614FD1D976159358E5D65E10
Authority key identifier: 55:45:69:F0:0F:12:EC:90:84:AD:C6:57:33:02:15:4A:47:EA:C5:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554569F00F12EC9084ADC6573302154A47EAC594.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bFW1Zv5wuE8AktXQ9pNQBQ6MNmCPNzFHXkq7zaRiShA/0/34352e3233312e3136362e302f32332d3233203d3e20323637323130.roa
Signing time:             Sun 14 Dec 2025 23:17:37 +0000
ROA not before:           Sun 14 Dec 2025 23:12:37 +0000
ROA not after:            Sun 13 Dec 2026 23:17:37 +0000
asID:                     267210
IP address blocks:        45.231.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bFW1Zv5wuE8AktXQ9pNQBQ6MNmCPNzFHXkq7zaRiShA/0/554569F00F12EC9084ADC6573302154A47EAC594.crl
                          rsync://rpki-repo.registro.br/repo/8bFW1Zv5wuE8AktXQ9pNQBQ6MNmCPNzFHXkq7zaRiShA/0/554569F00F12EC9084ADC6573302154A47EAC594.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554569F00F12EC9084ADC6573302154A47EAC594.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c2:80:93:f5:81:53:ec:61:4f:d1:d9:76:15:93:58:e5:d6:5e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554569F00F12EC9084ADC6573302154A47EAC594
        Validity
            Not Before: Dec 14 23:12:37 2025 GMT
            Not After : Dec 13 23:17:37 2026 GMT
        Subject: CN=A88DA74E5E42338482980CBCC803A52F3C53537F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:df:88:9d:d6:29:b7:39:3f:66:77:11:1b:
                    20:58:c7:72:db:86:12:b5:e0:b2:28:8e:79:59:cf:
                    1b:2d:90:cb:86:9c:30:ab:c1:d3:3b:f5:0c:57:1a:
                    73:7a:8b:a0:e5:e8:a5:f3:99:37:d4:19:49:6d:79:
                    86:16:a0:45:d6:84:69:30:24:9b:fd:ff:1d:21:a3:
                    22:71:f9:ed:ad:84:70:70:bb:2b:b0:9c:2c:31:43:
                    c4:67:7a:d5:b6:9f:7d:28:97:7d:59:f2:e6:d9:f6:
                    d8:db:65:45:2b:44:e3:00:b7:3e:f0:18:87:77:29:
                    58:64:67:7e:2c:d5:59:a1:64:c8:2b:97:99:d9:d7:
                    6a:a2:1d:c6:67:85:3b:5b:fc:58:9e:ca:3d:90:cc:
                    c7:ed:d6:25:a8:2d:0d:97:74:e2:20:45:28:8c:26:
                    cc:63:ab:d1:68:b9:b8:d3:d8:8b:ad:0f:89:46:41:
                    1b:97:3d:0d:51:6f:6d:22:f5:71:71:58:b4:a9:89:
                    13:f6:41:4d:14:10:40:f7:d8:c7:d7:76:62:4a:1b:
                    09:e8:97:57:90:e3:52:64:b0:e8:22:e7:dd:9e:d3:
                    bc:12:34:2e:5c:f8:15:a2:87:42:1e:a6:3a:13:4b:
                    53:3b:a9:72:d9:9c:1c:4f:8a:3b:e1:96:11:91:cf:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8D:A7:4E:5E:42:33:84:82:98:0C:BC:C8:03:A5:2F:3C:53:53:7F
            X509v3 Authority Key Identifier:
                keyid:55:45:69:F0:0F:12:EC:90:84:AD:C6:57:33:02:15:4A:47:EA:C5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bFW1Zv5wuE8AktXQ9pNQBQ6MNmCPNzFHXkq7zaRiShA/0/554569F00F12EC9084ADC6573302154A47EAC594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554569F00F12EC9084ADC6573302154A47EAC594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bFW1Zv5wuE8AktXQ9pNQBQ6MNmCPNzFHXkq7zaRiShA/0/34352e3233312e3136362e302f32332d3233203d3e20323637323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:3e:e3:dd:41:1c:e1:9a:3e:cb:c7:2b:bd:e5:fb:e5:ef:
         cb:19:29:bd:49:62:8e:0a:84:46:40:3b:b9:70:54:75:75:0d:
         44:7e:1a:97:c2:e7:c5:a7:ac:c5:24:0c:5b:1b:76:60:3c:22:
         1a:98:7f:19:3b:43:42:2e:a4:54:d4:07:bb:20:04:fb:7d:1d:
         4c:b1:35:2f:3a:59:38:5b:67:96:2d:a1:34:b9:a1:31:42:1c:
         7b:0c:09:23:77:41:53:f7:ca:4e:0f:a1:99:a7:79:71:16:54:
         2c:bc:fb:d3:ad:59:43:e9:cc:bf:45:a1:cd:d2:10:46:26:39:
         ee:dc:f0:07:5b:cf:16:ef:98:51:22:20:e8:06:51:16:61:d5:
         e0:a2:7b:7a:04:da:2c:e0:d9:ca:e5:0b:3e:8b:f0:1a:8c:ac:
         0c:2f:34:6e:b8:f1:32:dd:a3:f7:30:24:39:5c:46:9d:f7:96:
         49:04:7e:de:d8:9c:d9:62:f3:21:17:ce:6c:b2:04:12:ed:45:
         f1:1a:e6:b9:26:f7:a0:c5:06:8f:d7:ea:77:6f:72:47:23:10:
         81:2e:36:14:c0:71:33:0c:ed:6f:02:b8:9c:4a:f9:fb:84:d9:
         b6:7d:af:fd:b7:59:ca:19:89:f7:84:b1:94:43:ae:d1:28:c5:
         1a:f3:7a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:31 2025 by rpki-client