This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa
File:                     34352e3233342e342e302f32322d3332203d3e20323637333531.roa (raw, json)
Hash identifier:          0yiBwrUjYdwhROP5xbJA/sUlZHjxwJiiyckQHtjXUGE=
Subject key identifier:   E8:49:A2:70:B3:A7:92:1E:53:11:86:6B:48:FB:7C:0B:1C:76:E8:7A
Certificate issuer:       /CN=80D47A2CDB0D0F9E2FB8A290E72C3F43B762970B
Certificate serial:       6613ED138B49C2E269B6496CCC1021D5EAAADC44
Authority key identifier: 80:D4:7A:2C:DB:0D:0F:9E:2F:B8:A2:90:E7:2C:3F:43:B7:62:97:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D47A2CDB0D0F9E2FB8A290E72C3F43B762970B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa
Signing time:             Fri 09 Jan 2026 07:13:18 +0000
ROA not before:           Fri 09 Jan 2026 07:08:18 +0000
ROA not after:            Fri 08 Jan 2027 07:13:18 +0000
asID:                     267351
IP address blocks:        45.234.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/80D47A2CDB0D0F9E2FB8A290E72C3F43B762970B.crl
                          rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/80D47A2CDB0D0F9E2FB8A290E72C3F43B762970B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D47A2CDB0D0F9E2FB8A290E72C3F43B762970B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 10:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:13:ed:13:8b:49:c2:e2:69:b6:49:6c:cc:10:21:d5:ea:aa:dc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D47A2CDB0D0F9E2FB8A290E72C3F43B762970B
        Validity
            Not Before: Jan  9 07:08:18 2026 GMT
            Not After : Jan  8 07:13:18 2027 GMT
        Subject: CN=E849A270B3A7921E5311866B48FB7C0B1C76E87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:7e:89:2c:89:70:1a:46:ee:3f:24:25:d6:
                    23:93:84:6b:30:a8:82:fe:eb:21:d7:a8:a9:77:54:
                    1c:3d:c4:41:63:10:ae:a7:ed:a5:53:3d:b4:f1:c9:
                    e4:68:0e:f3:6a:9b:f7:f7:50:85:4a:05:f1:42:66:
                    19:d0:5c:ec:c2:22:75:80:d5:1c:01:d3:91:5e:f8:
                    a9:06:a5:7c:42:ef:d6:c9:92:1e:24:8a:88:69:0b:
                    0f:1b:9c:02:53:57:c3:f5:9f:d3:4b:31:68:3c:27:
                    aa:6f:88:b6:18:87:fc:20:d2:0c:fc:a5:af:ca:55:
                    26:bc:38:50:9e:0e:e5:53:8e:79:c6:34:5e:fe:b0:
                    42:90:81:12:8e:e6:2d:cc:d2:3f:b5:35:88:e8:23:
                    a9:bc:cb:cd:5f:77:35:b5:57:d0:29:df:39:4c:c6:
                    be:4c:44:d5:ba:b7:5d:7e:df:b7:d4:49:20:0f:40:
                    af:aa:22:69:33:92:8e:35:6c:02:a8:d5:57:99:e9:
                    4d:e2:82:43:e2:20:b2:15:a1:e5:2b:c8:07:14:2b:
                    58:85:4f:4f:f8:3a:20:16:73:73:d8:9b:2e:be:0a:
                    8f:e6:78:eb:05:ae:f9:37:9b:af:46:5b:66:f1:de:
                    8a:e2:6d:29:b2:31:f4:a8:5a:7d:65:09:47:e5:d0:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:49:A2:70:B3:A7:92:1E:53:11:86:6B:48:FB:7C:0B:1C:76:E8:7A
            X509v3 Authority Key Identifier:
                keyid:80:D4:7A:2C:DB:0D:0F:9E:2F:B8:A2:90:E7:2C:3F:43:B7:62:97:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/80D47A2CDB0D0F9E2FB8A290E72C3F43B762970B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D47A2CDB0D0F9E2FB8A290E72C3F43B762970B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:a0:ac:4e:5f:b4:dd:4e:57:2c:56:9a:4d:66:44:99:92:4b:
         a0:ad:03:85:59:db:bc:5a:ae:ad:fe:87:5c:e4:24:be:d9:c2:
         ef:5c:57:d3:c1:16:4c:21:39:ed:35:a1:a0:11:de:bf:0e:66:
         3c:b6:39:92:55:2f:63:3b:27:29:d6:93:8a:be:2b:36:7a:ca:
         68:0d:cf:3c:2a:bd:f8:7e:bb:29:59:d5:9c:35:8a:07:d9:62:
         2b:45:50:fc:c3:a5:5b:25:fe:a9:02:b8:8c:b8:79:dd:cf:b3:
         c5:2b:1c:64:27:2b:20:21:b6:21:c8:d8:44:11:f2:5c:12:56:
         6f:35:75:ec:35:e1:55:4f:03:46:a3:08:76:5b:05:9f:c5:e1:
         63:89:13:d6:2d:dd:e8:c0:51:aa:c0:f0:8b:31:41:74:99:d4:
         0d:08:ac:54:b2:90:28:1b:9c:a9:52:14:c4:00:96:27:65:17:
         ce:dc:a8:80:9b:1b:5a:ca:23:f0:37:af:d7:a9:69:31:de:e7:
         17:88:19:f9:90:3e:2e:9b:f3:e3:4d:79:e9:db:06:d7:14:5b:
         74:e1:82:00:d1:ba:65:ed:43:fb:5b:dc:a5:86:75:58:e3:a3:
         21:57:20:68:ea:2b:9d:c5:8b:e9:3e:08:10:aa:bf:42:c3:b0:
         bd:b2:7c:97
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZhPtE4tJwuJptklszBAh1eqq3EQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBENDdBMkNEQjBEMEY5RTJGQjhBMjkwRTcyQzNGNDNC
NzYyOTcwQjAeFw0yNjAxMDkwNzA4MThaFw0yNzAxMDgwNzEzMThaMDMxMTAvBgNV
BAMTKEU4NDlBMjcwQjNBNzkyMUU1MzExODY2QjQ4RkI3QzBCMUM3NkU4N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KH6JLIlwGkbuPyQl1iOThGsw
qIL+6yHXqKl3VBw9xEFjEK6n7aVTPbTxyeRoDvNqm/f3UIVKBfFCZhnQXOzCInWA
1RwB05Fe+KkGpXxC79bJkh4kiohpCw8bnAJTV8P1n9NLMWg8J6pviLYYh/wg0gz8
pa/KVSa8OFCeDuVTjnnGNF7+sEKQgRKO5i3M0j+1NYjoI6m8y81fdzW1V9Ap3zlM
xr5MRNW6t11+37fUSSAPQK+qImkzko41bAKo1VeZ6U3igkPiILIVoeUryAcUK1iF
T0/4OiAWc3PYmy6+Co/meOsFrvk3m69GW2bx3oribSmyMfSoWn1lCUfl0OB1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6EmicLOnkh5TEYZrSPt8Cxx26HowHwYDVR0j
BBgwFoAUgNR6LNsND54vuKKQ5yw/Q7dilwswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhF
dUQvMC84MEQ0N0EyQ0RCMEQwRjlFMkZCOEEyOTBFNzJDM0Y0M0I3NjI5NzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRDQ3QTJDREIwRDBGOUUy
RkI4QTI5MEU3MkMzRjQzQjc2Mjk3MEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1TmlmdHNVYnVwMXVUWThqamtzQVFnVXJQejExY25oUzNFODc1Y1VoRXVELzAv
MzQzNTJlMzIzMzM0MmUzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzMz
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3qBDANBgkqhkiG9w0BAQsFAAOCAQEAZaCsTl+03U5X
LFaaTWZEmZJLoK0DhVnbvFqurf6HXOQkvtnC71xX08EWTCE57TWhoBHevw5mPLY5
klUvYzsnKdaTir4rNnrKaA3PPCq9+H67KVnVnDWKB9liK0VQ/MOlWyX+qQK4jLh5
3c+zxSscZCcrICG2IcjYRBHyXBJWbzV17DXhVU8DRqMIdlsFn8XhY4kT1i3d6MBR
qsDwizFBdJnUDQisVLKQKBucqVIUxACWJ2UXztyogJsbWsoj8Dev16lpMd7nF4gZ
+ZA+Lpvz40156dsG1xRbdOGCANG6Ze1D+1vcpYZ1WOOjIVcgaOorncWL6T4IEKq/
QsOwvbJ8lw==
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:02:08 2026 by rpki-client