This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31342e302f32332d3233203d3e203631353930.roa
File:                     34352e3233342e31342e302f32332d3233203d3e203631353930.roa (raw, json)
Hash identifier:          /oHK3eMT7dfCe4AfQNT1krtfWQhdRck4v1AH2VoMrW4=
Subject key identifier:   91:7B:E0:7C:24:CD:C4:30:5C:95:C9:62:5C:5F:F3:FE:0C:BE:8E:5D
Certificate issuer:       /CN=1BC53F212E26C974A3552F8E1703246BF93E5856
Certificate serial:       7415F94D9B3B76BF418AE9952D0498D1156DF27E
Authority key identifier: 1B:C5:3F:21:2E:26:C9:74:A3:55:2F:8E:17:03:24:6B:F9:3E:58:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31342e302f32332d3233203d3e203631353930.roa
Signing time:             Mon 08 Dec 2025 06:19:03 +0000
ROA not before:           Mon 08 Dec 2025 06:14:03 +0000
ROA not after:            Mon 07 Dec 2026 06:19:03 +0000
asID:                     61590
IP address blocks:        45.234.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.crl
                          rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:15:f9:4d:9b:3b:76:bf:41:8a:e9:95:2d:04:98:d1:15:6d:f2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC53F212E26C974A3552F8E1703246BF93E5856
        Validity
            Not Before: Dec  8 06:14:03 2025 GMT
            Not After : Dec  7 06:19:03 2026 GMT
        Subject: CN=917BE07C24CDC4305C95C9625C5FF3FE0CBE8E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:de:d3:0b:10:89:6e:34:1e:62:35:d3:47:
                    d9:8e:8d:3d:3f:2c:38:10:90:bf:ac:93:e3:15:b6:
                    3f:9e:de:88:5a:1b:a1:3c:68:6e:55:10:73:09:c6:
                    3a:d9:ad:12:d4:75:c7:4d:13:50:a2:0a:b5:61:85:
                    38:92:cb:dd:92:18:5c:4c:a8:7a:85:c1:81:b6:7a:
                    f1:33:0f:74:cb:04:5a:37:b7:7f:04:76:70:ef:47:
                    96:6c:d6:af:20:c3:5c:1f:6a:ab:6b:28:3b:aa:83:
                    6c:9a:82:23:e0:2d:88:b8:8c:17:c4:71:b9:c0:88:
                    1f:d5:47:7e:13:8e:30:fb:e5:e3:79:7b:7e:1e:f3:
                    59:3f:ef:51:0b:92:17:2a:5d:59:08:03:8f:cf:e3:
                    83:7d:42:e5:de:e7:5a:29:45:fc:13:b3:4b:40:60:
                    7d:8a:ab:5c:da:e7:76:02:1b:1c:a7:fd:df:f6:d3:
                    2d:a2:31:6e:90:48:29:bc:96:3d:21:b9:22:c2:09:
                    13:c4:fa:96:ae:00:43:ec:9c:f4:9c:5b:65:dd:35:
                    1c:1c:88:26:d3:a9:59:1a:db:da:21:5f:fe:95:2c:
                    04:c6:1f:50:ab:18:0c:43:a3:ed:f6:6d:30:45:97:
                    12:51:a4:eb:0f:6e:03:34:0a:96:b6:8a:36:90:99:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7B:E0:7C:24:CD:C4:30:5C:95:C9:62:5C:5F:F3:FE:0C:BE:8E:5D
            X509v3 Authority Key Identifier:
                keyid:1B:C5:3F:21:2E:26:C9:74:A3:55:2F:8E:17:03:24:6B:F9:3E:58:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/1BC53F212E26C974A3552F8E1703246BF93E5856.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BC53F212E26C974A3552F8E1703246BF93E5856.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E62ze4DNyc2ArmzQk78LpVYn3J5dTyrkxvWkbSj6MTuN/0/34352e3233342e31342e302f32332d3233203d3e203631353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:cc:f4:b7:49:37:c5:2d:8a:b0:81:70:d3:4e:57:78:e5:b8:
         5e:09:e2:06:16:68:74:ce:09:e7:34:ce:31:1d:45:73:73:3f:
         a2:e3:6f:ee:91:4c:71:68:2b:0b:44:2e:ec:42:d4:4d:ad:4a:
         f9:c7:23:80:f0:bb:9a:a2:35:05:5f:7a:75:c4:bc:cc:64:9e:
         fb:51:9d:7f:1d:f8:e1:44:57:ce:4a:d4:cf:58:2f:b7:ea:28:
         e7:1d:98:17:cf:f8:1b:e2:a1:9b:63:c1:4b:c0:d9:93:b7:f4:
         d5:6f:c7:a1:0f:6f:47:4a:0c:1d:15:0c:da:31:13:15:d6:8d:
         ae:d1:15:ce:09:4d:61:b6:d3:5a:8f:3d:b1:4b:d1:81:ef:61:
         77:d6:49:ed:13:b2:14:44:22:60:e5:be:11:4d:a2:f4:13:97:
         ae:b0:95:cc:2e:19:dc:52:ea:fd:57:ba:94:61:e7:cd:98:06:
         bd:f5:75:7f:0c:b0:96:80:09:89:0e:61:42:c2:78:54:e5:c5:
         3a:56:a5:76:ae:9a:0d:c5:ac:de:10:98:a7:53:c5:17:4b:42:
         67:97:be:dd:53:32:54:86:1c:ed:3c:0a:41:71:c6:34:86:3f:
         fd:51:f0:53:90:f6:0e:ba:a7:b7:ed:3d:2b:b7:93:aa:f1:d6:
         58:e6:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:32:17 2025 by rpki-client