This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/34352e3138352e3138332e302f32342d3234203d3e20323639333838.roa
File:                     34352e3138352e3138332e302f32342d3234203d3e20323639333838.roa (raw, json)
Hash identifier:          ouPk2h3bCoyg3M/+fS5BR9BEjp5zcVNdisW1l4kVZ0Q=
Subject key identifier:   71:AA:9F:15:DE:63:F1:10:BE:B6:2A:7A:C7:BC:9E:C4:6F:C1:4B:29
Certificate issuer:       /CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
Certificate serial:       7B14549D8AB810EA9CD62518BA6E525039593AB3
Authority key identifier: 44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/34352e3138352e3138332e302f32342d3234203d3e20323639333838.roa
Signing time:             Thu 11 Dec 2025 19:50:26 +0000
ROA not before:           Thu 11 Dec 2025 19:45:26 +0000
ROA not after:            Thu 10 Dec 2026 19:50:26 +0000
asID:                     269388
IP address blocks:        45.185.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:14:54:9d:8a:b8:10:ea:9c:d6:25:18:ba:6e:52:50:39:59:3a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
        Validity
            Not Before: Dec 11 19:45:26 2025 GMT
            Not After : Dec 10 19:50:26 2026 GMT
        Subject: CN=71AA9F15DE63F110BEB62A7AC7BC9EC46FC14B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:2f:f0:d2:88:e4:a1:95:42:d7:25:fd:15:
                    6e:7d:77:8e:a3:6d:e4:1b:b9:8c:89:5d:60:2a:c1:
                    fc:72:2f:7e:b2:ce:61:8d:fb:e4:5f:5a:44:5f:58:
                    92:a8:96:2d:8f:af:d1:15:56:6f:3f:45:35:5c:74:
                    69:e4:e4:cc:bb:78:f2:b1:b5:cc:43:65:d0:2f:00:
                    e5:a5:e6:63:29:27:12:ab:eb:26:30:90:f5:3a:33:
                    e0:0d:da:e3:22:0c:d7:6b:e2:b7:74:e8:60:1f:a2:
                    a5:72:76:bd:e3:fc:64:9b:3a:8c:94:a8:2d:e0:17:
                    2f:45:f0:96:98:b8:2e:75:aa:6e:14:58:be:36:10:
                    f1:8c:55:d6:ee:ae:6f:76:14:ec:4f:f8:91:2d:c4:
                    06:ae:3b:36:b6:95:c6:0d:fb:11:03:5f:73:80:4e:
                    d6:2a:51:fc:0e:21:18:6b:c8:5d:24:b7:df:a2:83:
                    65:50:b8:18:1c:b4:79:57:2a:c0:aa:96:21:9d:aa:
                    88:0c:41:c9:2e:b8:21:e0:2e:21:83:75:c4:f4:ef:
                    d0:e2:d7:e3:33:f3:ca:f2:3e:60:1c:9b:f6:f2:8e:
                    a2:13:2a:cd:4c:0e:90:22:50:36:0a:c1:7e:76:ac:
                    cc:39:fb:2a:c1:36:3a:64:cb:02:ff:e3:2d:9a:fe:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AA:9F:15:DE:63:F1:10:BE:B6:2A:7A:C7:BC:9E:C4:6F:C1:4B:29
            X509v3 Authority Key Identifier:
                keyid:44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/34352e3138352e3138332e302f32342d3234203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:6c:59:63:c9:9b:cd:4a:b4:c3:67:82:34:4f:ec:c3:a4:6c:
         46:b5:07:81:b3:15:b7:08:da:b0:e8:65:1a:4b:12:c6:00:fa:
         ce:6a:9f:c1:b8:ed:65:e5:94:a2:71:60:4e:3f:c7:ba:aa:52:
         c0:d1:a6:92:50:8c:bd:c4:78:a7:61:3c:2c:87:88:c0:45:02:
         35:b3:db:10:41:47:6b:11:6b:54:7c:df:95:0c:37:56:d1:68:
         65:cd:3b:32:e4:8c:54:e5:2e:05:cd:56:8b:1f:96:36:ba:5e:
         f8:58:61:3f:83:29:18:e2:df:49:8d:6c:a4:78:a6:0c:24:da:
         8e:d2:58:36:6e:69:77:ff:f2:60:8b:34:16:ad:76:32:3c:c5:
         df:bf:2d:5e:f4:c0:9b:30:49:f6:b4:66:6e:c0:23:71:27:c1:
         0e:0a:b4:b8:81:c9:1b:c3:fc:28:06:0a:fc:49:53:7b:46:49:
         3e:3e:68:d2:7a:23:3d:7c:64:20:85:7b:4a:64:27:bd:ac:37:
         6d:6b:b9:f8:be:77:2a:8f:60:fb:b4:9b:5f:39:30:39:1a:87:
         d6:4d:4d:77:bd:4e:8f:5b:bb:37:a6:7d:9a:fc:70:7a:07:13:
         b6:ff:fe:e6:9f:bf:24:45:d9:2d:c7:dc:84:4e:82:f1:dd:17:
         89:c8:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:47:44 2025 by rpki-client