This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31322e302f32322d3232203d3e203631353930.roa
File:                     34352e3233342e31322e302f32322d3232203d3e203631353930.roa (raw, json)
Hash identifier:          cvfzTHc2GpPcDDZ3WJtzdEz9v4gD5oxHN/SY9si166U=
Subject key identifier:   E7:5B:81:EE:DD:7D:F5:4C:DD:FD:9F:15:EE:EB:52:A2:45:8E:23:84
Certificate issuer:       /CN=1BC53F212E26C974A3552F8E1703246BF93E5856
Certificate serial:       04DDBCEA5E9BEA5066974EA7396FC5B0436CFCBB
Authority key identifier: 1B:C5:3F:21:2E:26:C9:74:A3:55:2F:8E:17:03:24:6B:F9:3E:58:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31322e302f32322d3232203d3e203631353930.roa
Signing time:             Mon 08 Dec 2025 06:19:01 +0000
ROA not before:           Mon 08 Dec 2025 06:14:01 +0000
ROA not after:            Mon 07 Dec 2026 06:19:01 +0000
asID:                     61590
IP address blocks:        45.234.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.crl
                          rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:dd:bc:ea:5e:9b:ea:50:66:97:4e:a7:39:6f:c5:b0:43:6c:fc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC53F212E26C974A3552F8E1703246BF93E5856
        Validity
            Not Before: Dec  8 06:14:01 2025 GMT
            Not After : Dec  7 06:19:01 2026 GMT
        Subject: CN=E75B81EEDD7DF54CDDFD9F15EEEB52A2458E2384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:c5:4f:11:c6:2d:18:a3:3d:66:04:62:26:
                    da:22:81:4f:38:56:67:29:09:25:27:12:68:db:17:
                    3b:17:88:8b:57:d2:ca:20:68:f3:56:7e:47:4c:b3:
                    a7:13:6c:a5:a2:01:37:cb:ba:e2:d1:c1:fb:14:88:
                    3e:6a:32:c8:0e:8d:62:d9:60:6b:e5:ad:0e:4f:d5:
                    5e:16:5b:0b:3d:aa:f3:e4:48:32:48:92:e4:04:4d:
                    a3:00:8e:92:7f:1c:55:86:3c:0a:d1:3c:e0:da:4a:
                    14:ff:ba:ed:97:7a:82:f0:85:bc:9b:55:3f:7a:b1:
                    ba:93:57:a4:f9:73:ec:bd:e3:58:3c:ce:9d:81:39:
                    5d:f7:12:83:85:ba:7c:d5:15:43:53:b3:27:7f:7b:
                    5c:28:14:93:91:5b:08:2b:c2:dc:d3:64:8c:b3:f2:
                    17:09:93:92:e0:63:91:16:07:98:27:03:17:7c:18:
                    9c:cc:d8:98:e4:b7:b9:69:4b:f5:18:63:57:7e:f1:
                    ab:f5:85:a8:3e:bb:c2:a2:31:12:bc:85:a2:25:8c:
                    2f:0f:ee:8c:c8:c3:9f:50:44:78:52:a4:d2:87:d2:
                    9f:31:45:6b:c5:ba:e5:09:34:67:06:1b:26:c1:73:
                    2e:9b:54:18:d2:ca:f1:aa:9f:29:32:e3:56:ed:3a:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5B:81:EE:DD:7D:F5:4C:DD:FD:9F:15:EE:EB:52:A2:45:8E:23:84
            X509v3 Authority Key Identifier:
                keyid:1B:C5:3F:21:2E:26:C9:74:A3:55:2F:8E:17:03:24:6B:F9:3E:58:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31322e302f32322d3232203d3e203631353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:06:78:67:b3:43:e0:e9:53:96:59:fc:56:be:cf:7a:e1:48:
         57:b7:41:6c:db:a6:b2:ba:61:b0:1e:ea:33:1e:03:2e:57:1f:
         04:64:06:77:f6:8a:54:1e:e8:98:a9:cd:d2:b2:b6:f2:38:63:
         a7:8f:cd:c9:d9:b9:66:52:4c:7a:0b:58:ab:55:2a:85:a8:c4:
         fe:9c:cc:a8:8e:b3:89:98:5a:da:e9:6d:77:0e:73:60:5c:66:
         6c:76:8b:97:ff:63:93:d5:e2:27:75:1a:d7:17:c9:0a:8f:1d:
         3b:ce:f1:1d:e9:46:3e:d5:e4:f9:61:fd:03:cf:ff:53:c6:48:
         20:b9:c7:37:15:81:60:44:31:4c:1f:31:5e:bb:26:8c:19:ea:
         4a:ae:3e:55:f9:04:01:64:ec:bd:8f:22:f3:1f:e3:b6:50:fe:
         59:0a:c8:9e:93:42:ab:9f:e6:e6:d1:e6:8c:31:61:74:b3:fc:
         b7:61:d3:81:36:fe:e2:ec:79:2a:14:a7:1c:01:d0:18:28:66:
         e6:c0:b5:0c:8c:12:4c:d1:7c:4e:b9:91:30:47:9a:c4:cd:95:
         7b:3a:13:fc:55:17:5c:c4:5e:03:ca:a6:23:f3:0c:38:78:d9:
         cd:2f:16:e8:7c:10:bf:3d:ee:bf:4e:d1:a7:89:91:b3:9b:bb:
         7d:10:73:cd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBN286l6b6lBml06nOW/FsENs/LswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJDNTNGMjEyRTI2Qzk3NEEzNTUyRjhFMTcwMzI0NkJG
OTNFNTg1NjAeFw0yNTEyMDgwNjE0MDFaFw0yNjEyMDcwNjE5MDFaMDMxMTAvBgNV
BAMTKEU3NUI4MUVFREQ3REY1NENEREZEOUYxNUVFRUI1MkEyNDU4RTIzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnMVPEcYtGKM9ZgRiJtoigU84
VmcpCSUnEmjbFzsXiItX0sogaPNWfkdMs6cTbKWiATfLuuLRwfsUiD5qMsgOjWLZ
YGvlrQ5P1V4WWws9qvPkSDJIkuQETaMAjpJ/HFWGPArRPODaShT/uu2XeoLwhbyb
VT96sbqTV6T5c+y941g8zp2BOV33EoOFunzVFUNTsyd/e1woFJORWwgrwtzTZIyz
8hcJk5LgY5EWB5gnAxd8GJzM2Jjkt7lpS/UYY1d+8av1hag+u8KiMRK8haIljC8P
7ozIw59QRHhSpNKH0p8xRWvFuuUJNGcGGybBcy6bVBjSyvGqnyky41btOjpfAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU51uB7t199Uzd/Z8V7utSokWOI4QwHwYDVR0j
BBgwFoAUG8U/IS4myXSjVS+OFwMka/k+WFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTYyemU0RE55YzJBcm16UWs3OExwVlluM0o1ZFR5cmt4dldrYlNqNk1U
dU4vMC8xQkM1M0YyMTJFMjZDOTc0QTM1NTJGOEUxNzAzMjQ2QkY5M0U1ODU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQzUzRjIxMkUyNkM5NzRB
MzU1MkY4RTE3MDMyNDZCRjkzRTU4NTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U2MnplNEROeWMyQXJtelFrNzhMcFZZbjNKNWRUeXJreHZXa2JTajZNVHVOLzAv
MzQzNTJlMzIzMzM0MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMTM1
MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3qDDANBgkqhkiG9w0BAQsFAAOCAQEAfgZ4Z7ND4OlT
lln8Vr7PeuFIV7dBbNumsrphsB7qMx4DLlcfBGQGd/aKVB7omKnN0rK28jhjp4/N
ydm5ZlJMegtYq1UqhajE/pzMqI6ziZha2ultdw5zYFxmbHaLl/9jk9XiJ3Ua1xfJ
Co8dO87xHelGPtXk+WH9A8//U8ZIILnHNxWBYEQxTB8xXrsmjBnqSq4+VfkEAWTs
vY8i8x/jtlD+WQrInpNCq5/m5tHmjDFhdLP8t2HTgTb+4ux5KhSnHAHQGChm5sC1
DIwSTNF8TrmRMEeaxM2VezoT/FUXXMReA8qmI/MMOHjZzS8W6HwQvz3uv07Rp4mR
s5u7fRBzzQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:32:18 2025 by rpki-client