This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31322e302f32332d3233203d3e203631353930.roa
File:                     34352e3233342e31322e302f32332d3233203d3e203631353930.roa (raw, json)
Hash identifier:          VYq6wnUJDfaSE2TzgQ7WNFjCqqioLCBC2pPrb2e+3MU=
Subject key identifier:   30:12:6B:0A:22:1D:2A:0F:8E:A0:5F:79:18:FB:22:4A:42:55:05:24
Certificate issuer:       /CN=1BC53F212E26C974A3552F8E1703246BF93E5856
Certificate serial:       7D8B68C1084470D4A8A307AF6B95C3A919710082
Authority key identifier: 1B:C5:3F:21:2E:26:C9:74:A3:55:2F:8E:17:03:24:6B:F9:3E:58:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31322e302f32332d3233203d3e203631353930.roa
Signing time:             Mon 08 Dec 2025 06:19:02 +0000
ROA not before:           Mon 08 Dec 2025 06:14:02 +0000
ROA not after:            Mon 07 Dec 2026 06:19:02 +0000
asID:                     61590
IP address blocks:        45.234.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.crl
                          rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8b:68:c1:08:44:70:d4:a8:a3:07:af:6b:95:c3:a9:19:71:00:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC53F212E26C974A3552F8E1703246BF93E5856
        Validity
            Not Before: Dec  8 06:14:02 2025 GMT
            Not After : Dec  7 06:19:02 2026 GMT
        Subject: CN=30126B0A221D2A0F8EA05F7918FB224A42550524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:6b:fe:e6:3d:63:ac:fc:8f:29:1c:8e:a7:
                    aa:89:0e:21:3d:7e:07:ce:22:6a:5f:db:89:f5:39:
                    fd:6a:b8:5b:f1:1d:c6:72:ce:1f:f2:fd:a3:37:ae:
                    af:12:a7:fb:01:d7:bb:e7:b5:9d:be:fd:34:4b:02:
                    fb:d7:47:8d:df:3d:7f:8a:e3:78:d4:20:78:18:b5:
                    69:5e:28:d2:43:41:27:87:e3:4d:1d:b2:00:2e:82:
                    15:b6:12:ae:44:1c:8f:70:86:73:b7:bb:b1:e8:f9:
                    77:1c:14:fe:09:44:91:3e:60:4e:fc:32:fb:6b:0a:
                    04:94:5e:42:02:f7:70:47:a3:c6:38:a4:1e:4d:8b:
                    f9:59:7e:1e:16:96:cc:5e:b4:6d:a3:b8:25:99:30:
                    f7:3b:bc:5b:3e:1c:1f:08:20:e5:66:06:61:e9:fe:
                    6f:68:c7:b8:b6:54:8b:b9:a8:8f:0f:19:e5:77:6c:
                    30:f6:73:ac:d5:87:3a:fc:7c:38:4e:e9:f3:84:c8:
                    cb:80:4e:87:69:c4:fe:07:7e:60:fd:f1:ff:db:ee:
                    c9:90:ab:8a:f6:ff:79:d6:ca:be:5f:52:c0:48:27:
                    fb:e8:d9:d2:70:36:de:4e:d5:c0:f1:72:c8:26:c9:
                    8f:e1:20:34:99:a8:df:0e:aa:74:5b:4e:fc:01:99:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:12:6B:0A:22:1D:2A:0F:8E:A0:5F:79:18:FB:22:4A:42:55:05:24
            X509v3 Authority Key Identifier:
                keyid:1B:C5:3F:21:2E:26:C9:74:A3:55:2F:8E:17:03:24:6B:F9:3E:58:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31322e302f32332d3233203d3e203631353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:19:43:7b:1d:b7:a3:44:fa:c5:8c:03:bb:1b:00:30:7c:a3:
         f8:75:97:66:81:3f:0d:87:2f:cb:a4:63:be:cd:c6:d8:7d:a3:
         14:a6:e4:8d:f6:f2:68:45:3d:99:c1:9f:e3:e8:20:eb:fd:8c:
         f3:9e:85:d8:96:1e:07:f8:c1:fc:8d:3c:79:9d:61:d7:12:ee:
         c3:0c:dc:75:bf:ec:0b:19:d6:23:e4:46:ec:db:c0:3a:e6:38:
         37:c1:b3:e0:2c:14:4c:ce:97:4c:91:54:22:b0:03:8a:2c:d7:
         5d:bc:27:4b:61:6b:ae:dc:dc:f8:0a:5a:2f:33:3c:d0:09:19:
         7d:4f:48:52:ed:9f:22:24:89:b6:e4:95:98:5b:1a:c2:7e:72:
         7b:d4:13:9f:6e:47:a1:a2:99:78:e8:3d:d0:3b:f5:43:b4:b2:
         f8:2d:fd:57:6e:c4:65:82:bd:85:d0:01:8d:17:7c:4b:59:06:
         59:bf:6b:ff:1e:4b:0f:22:f2:47:8d:95:2e:a9:74:4f:62:fe:
         5b:4f:8f:35:0f:95:35:44:57:cd:e9:8d:3f:8d:32:7a:02:f8:
         fb:35:8b:78:1a:4d:d9:d5:3b:d4:b6:fc:51:e5:fc:04:b1:d0:
         d5:2d:6c:4a:1f:46:2f:8b:08:c3:ec:73:c6:3e:c3:89:4c:a7:
         dc:e1:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:32:16 2025 by rpki-client