This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/34352e3138352e3138302e302f32342d3234203d3e20323639333838.roa
File:                     34352e3138352e3138302e302f32342d3234203d3e20323639333838.roa (raw, json)
Hash identifier:          sk8jWtlPNokQCJZMX59KAWBrvT8JFFk+/ZulDDzYXGQ=
Subject key identifier:   50:91:49:10:18:89:2E:5C:37:58:C3:17:55:49:31:83:8F:19:4E:8F
Certificate issuer:       /CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
Certificate serial:       0C36E1FDEC2E055AE7F7A20B479DF05F63A23D53
Authority key identifier: 44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/34352e3138352e3138302e302f32342d3234203d3e20323639333838.roa
Signing time:             Thu 11 Dec 2025 18:12:30 +0000
ROA not before:           Thu 11 Dec 2025 18:07:30 +0000
ROA not after:            Thu 10 Dec 2026 18:12:30 +0000
asID:                     269388
IP address blocks:        45.185.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:36:e1:fd:ec:2e:05:5a:e7:f7:a2:0b:47:9d:f0:5f:63:a2:3d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
        Validity
            Not Before: Dec 11 18:07:30 2025 GMT
            Not After : Dec 10 18:12:30 2026 GMT
        Subject: CN=5091491018892E5C3758C317554931838F194E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:5f:89:f3:35:9e:3e:8e:dc:1d:ef:53:65:
                    39:69:1b:13:f4:96:16:56:38:74:dc:e2:0b:0c:72:
                    9b:25:a8:01:77:41:9e:40:07:3b:e6:94:e6:4e:70:
                    92:56:d7:bf:9f:d1:e3:bf:3f:9a:a7:68:e8:ad:2b:
                    39:86:38:ec:c8:e5:5a:2c:85:1e:4a:d8:db:6d:fc:
                    9b:34:8e:71:87:58:6e:4d:56:87:8d:cc:da:b8:8c:
                    63:40:73:2d:80:ba:7a:54:44:bf:58:aa:a9:05:1f:
                    ae:07:94:3b:a3:58:57:f6:7b:38:3e:60:99:f6:af:
                    01:b0:59:18:82:13:23:89:09:0c:d2:38:e0:ff:32:
                    19:14:8a:d8:c7:74:72:46:b9:13:97:a9:7d:cb:4d:
                    b4:ff:25:01:f9:ea:e1:dc:02:c2:ae:3b:a5:53:70:
                    68:2f:5e:2a:30:79:c8:d1:f1:fa:60:8e:1f:61:e3:
                    77:e6:07:39:cc:e0:d0:5a:7e:7d:ea:18:e5:e2:ef:
                    18:2d:92:5d:81:2a:d4:87:47:6d:4f:c7:b2:67:1b:
                    34:3b:5f:00:21:cb:67:24:2b:1e:39:46:dc:00:d2:
                    f4:29:01:06:9f:d6:3a:88:fa:7c:d0:32:de:0e:c8:
                    ac:ae:46:14:04:75:b8:c0:38:f5:43:9b:ab:75:65:
                    ea:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:91:49:10:18:89:2E:5C:37:58:C3:17:55:49:31:83:8F:19:4E:8F
            X509v3 Authority Key Identifier:
                keyid:44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/34352e3138352e3138302e302f32342d3234203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:14:65:81:a7:b3:b8:86:b0:e6:96:d9:1a:48:b7:1c:d2:7e:
         b7:af:d1:58:8b:f3:bb:e6:ff:7c:ae:b3:49:0a:cd:89:01:90:
         31:7f:db:80:fb:4f:01:bb:b5:45:7a:d0:8a:e4:dd:55:aa:17:
         e2:7e:47:06:52:f4:e8:9c:ff:3e:cd:05:33:1c:e2:c2:8b:ac:
         50:07:11:7d:7d:db:4a:86:8b:6b:a9:c3:60:ce:47:d6:b6:3d:
         fb:6d:63:6c:09:f6:a8:46:db:6f:f5:cd:8b:c8:b4:88:9a:81:
         fc:4f:e3:ba:a7:0b:f3:59:c6:17:ab:c1:ff:28:3a:ee:dd:49:
         21:cc:fa:e2:de:2f:c9:6d:6e:86:0b:7e:ab:a6:0e:95:70:63:
         62:7c:1b:ab:74:55:96:fb:27:0a:2c:8b:29:f5:84:9e:5c:7d:
         a0:ab:a5:18:58:83:66:3a:b1:11:6b:b4:eb:61:67:0c:f1:fc:
         66:ea:27:09:17:fa:bd:63:18:4b:3c:a3:79:ab:2c:c2:88:54:
         2c:1c:4c:7b:17:37:3e:48:36:ce:07:5f:55:ff:1f:c1:03:d2:
         b1:61:bd:5b:c0:a9:d5:77:a4:47:5f:ad:58:cc:91:c2:dd:16:
         c9:61:e1:58:2d:89:83:2e:d4:f5:24:bd:c9:64:42:b0:8c:96:
         30:dd:70:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:47:43 2025 by rpki-client