This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa
File:                     34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa (raw, json)
Hash identifier:          sLMb/Ih6L5ozCVou7/nvGcSHeciCr+viZtNiS747nqI=
Subject key identifier:   8C:4A:E7:DF:A7:31:53:07:10:63:8E:41:42:9F:42:FA:79:9D:4E:E5
Certificate issuer:       /CN=A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71
Certificate serial:       4215AE08DAE102CEBE634C2D97FFBA58625DF599
Authority key identifier: A7:F0:27:6C:65:FB:74:CB:5F:D0:B1:FA:77:87:E8:CE:5B:47:2E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa
Signing time:             Mon 08 Dec 2025 20:03:24 +0000
ROA not before:           Mon 08 Dec 2025 19:58:24 +0000
ROA not after:            Mon 07 Dec 2026 20:03:24 +0000
asID:                     269405
IP address blocks:        45.185.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.crl
                          rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 08:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:15:ae:08:da:e1:02:ce:be:63:4c:2d:97:ff:ba:58:62:5d:f5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71
        Validity
            Not Before: Dec  8 19:58:24 2025 GMT
            Not After : Dec  7 20:03:24 2026 GMT
        Subject: CN=8C4AE7DFA731530710638E41429F42FA799D4EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:5e:e9:c3:d3:3f:b2:e6:bd:b1:1e:e0:ea:
                    d0:61:ef:12:2e:d2:24:1e:76:99:2a:cf:6f:8c:ac:
                    43:13:06:45:cb:d8:57:f6:8b:6f:e5:05:9a:b0:90:
                    6c:c1:22:3d:f1:8c:6f:57:e8:f4:5f:5b:2e:58:23:
                    07:cd:28:5b:a5:f8:21:fb:5f:b8:30:a8:ac:48:50:
                    3b:55:dd:f4:a9:d5:fd:f6:0c:a2:b5:0d:d7:4b:9b:
                    d1:5e:f0:c0:fa:56:13:79:72:ba:1a:d7:d3:a3:33:
                    0f:50:ed:b4:0d:28:a9:e8:ab:0d:25:59:77:38:4e:
                    cb:4e:90:c8:b3:34:ac:a6:91:47:38:fb:c9:fc:1d:
                    bd:d5:ec:ed:9b:9f:1e:f4:59:d1:e3:e0:64:ff:aa:
                    17:a5:99:f5:be:62:57:a7:cb:1e:64:b7:d0:b5:2c:
                    c8:87:e0:63:6a:0b:64:fc:0b:ed:cc:e0:3f:ec:2a:
                    be:28:a9:0b:9f:6e:a2:ec:96:16:8e:16:f1:20:2a:
                    70:14:7f:48:38:3b:a8:36:68:51:f4:0e:e2:6e:f0:
                    3f:89:e7:d6:0e:4e:75:48:6a:0d:11:d4:b2:6a:02:
                    da:9d:18:84:62:20:7d:d9:da:2e:b2:55:ee:cf:ef:
                    7a:db:da:7d:a5:7a:d8:2c:dd:cb:e8:37:73:f1:e5:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4A:E7:DF:A7:31:53:07:10:63:8E:41:42:9F:42:FA:79:9D:4E:E5
            X509v3 Authority Key Identifier:
                keyid:A7:F0:27:6C:65:FB:74:CB:5F:D0:B1:FA:77:87:E8:CE:5B:47:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:16:b0:a0:06:a9:6a:ce:35:0e:03:29:d3:ee:5c:9f:6a:
         1d:45:0d:93:b8:57:91:cb:8d:e9:7b:f4:c4:4b:67:87:26:27:
         cd:a6:73:f8:db:3f:e0:a6:94:31:b4:23:31:23:0a:b0:92:8a:
         ae:6b:c8:13:96:c1:12:b3:cb:27:32:5e:74:bd:46:e3:c2:52:
         39:1b:26:f2:f8:d3:11:df:7e:ec:06:39:13:f8:66:0e:c9:e6:
         2f:d4:d8:7d:24:47:fe:cd:83:0b:30:96:4d:18:9b:84:82:f1:
         eb:71:70:e4:4b:7a:98:2d:bc:d3:96:46:b4:01:0e:d8:da:e9:
         96:a7:21:c7:3c:bb:a1:a3:24:20:ce:f0:fb:dd:87:65:b0:69:
         6b:74:fb:bb:d0:a3:b5:da:e6:d6:12:92:14:0a:fc:cd:31:c9:
         21:15:0c:fb:1f:21:06:74:59:87:16:5a:3a:19:f0:3b:c5:11:
         cd:56:3d:15:6a:18:8d:f3:28:13:f2:b6:da:b6:31:a6:36:03:
         12:af:56:5a:88:1f:f4:bd:6d:2b:55:2c:93:54:96:e9:d3:54:
         83:0c:00:bf:08:26:fd:1f:95:bf:da:7a:3d:12:ed:2f:f6:d2:
         4d:1a:6d:80:b6:51:13:50:e5:0c:ec:70:6d:14:2b:51:c0:6d:
         af:b0:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:52:48 2025 by rpki-client