This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/34352e3136332e37362e302f32322d3234203d3e20323638353531.roa
File:                     34352e3136332e37362e302f32322d3234203d3e20323638353531.roa (raw, json)
Hash identifier:          +uefydI/PTBpkdTym/m2FV2H4tjJJyNILPK3GkarMzU=
Subject key identifier:   B8:03:52:9A:A4:C7:85:92:30:B7:3A:A8:AD:86:86:5F:FA:0F:3F:49
Certificate issuer:       /CN=BA727881B79151945D7EFC990ECCA40FA067AD8C
Certificate serial:       246194A1EA74E68F81E9B318695CAB3E5570298C
Authority key identifier: BA:72:78:81:B7:91:51:94:5D:7E:FC:99:0E:CC:A4:0F:A0:67:AD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA727881B79151945D7EFC990ECCA40FA067AD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/34352e3136332e37362e302f32322d3234203d3e20323638353531.roa
Signing time:             Sat 13 Dec 2025 00:44:05 +0000
ROA not before:           Sat 13 Dec 2025 00:39:05 +0000
ROA not after:            Sat 12 Dec 2026 00:44:05 +0000
asID:                     268551
IP address blocks:        45.163.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/BA727881B79151945D7EFC990ECCA40FA067AD8C.crl
                          rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/BA727881B79151945D7EFC990ECCA40FA067AD8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA727881B79151945D7EFC990ECCA40FA067AD8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:61:94:a1:ea:74:e6:8f:81:e9:b3:18:69:5c:ab:3e:55:70:29:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA727881B79151945D7EFC990ECCA40FA067AD8C
        Validity
            Not Before: Dec 13 00:39:05 2025 GMT
            Not After : Dec 12 00:44:05 2026 GMT
        Subject: CN=B803529AA4C7859230B73AA8AD86865FFA0F3F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:26:06:c1:ab:3b:ac:85:96:eb:06:8b:42:
                    b9:43:b3:5f:e2:8f:47:4a:58:f1:45:ee:52:33:70:
                    07:fd:c4:bc:59:1f:bb:57:50:1e:a8:e3:63:df:84:
                    aa:50:8d:8c:ab:66:7a:ae:07:5a:26:23:48:d3:fe:
                    90:20:6c:ff:15:1a:94:03:3b:3d:a2:c3:06:41:fd:
                    aa:ea:ba:6d:c3:d5:d1:78:c3:eb:d5:50:99:88:c9:
                    25:9b:38:bb:28:f9:a8:3a:72:8a:31:08:28:b2:7f:
                    fc:ac:05:a2:62:87:b6:15:38:18:c9:54:c5:81:17:
                    b0:71:ed:0e:49:6e:1a:5d:22:a7:4e:2b:00:27:07:
                    ec:5c:e7:16:41:a2:ec:98:cb:69:ab:7c:24:05:ec:
                    f8:22:36:92:cc:3a:89:38:e0:ac:29:91:a8:b9:70:
                    cb:bf:07:a5:fb:10:07:6c:5d:0b:82:c3:a6:fe:9f:
                    48:fa:dc:3c:97:0c:b3:ec:6b:37:ec:2e:2b:43:42:
                    7e:3a:f9:bd:8a:1a:24:72:9e:b7:da:04:e9:60:8f:
                    00:7c:5a:cf:41:a7:0a:3b:05:1b:e9:e4:ed:18:2f:
                    ec:18:93:d7:fc:69:bc:f8:14:1a:89:47:e5:94:69:
                    7a:cd:cf:fc:1a:82:88:7b:a2:63:39:03:c1:e0:b7:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:03:52:9A:A4:C7:85:92:30:B7:3A:A8:AD:86:86:5F:FA:0F:3F:49
            X509v3 Authority Key Identifier:
                keyid:BA:72:78:81:B7:91:51:94:5D:7E:FC:99:0E:CC:A4:0F:A0:67:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/BA727881B79151945D7EFC990ECCA40FA067AD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA727881B79151945D7EFC990ECCA40FA067AD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/34352e3136332e37362e302f32322d3234203d3e20323638353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:5d:bf:c7:ec:30:d6:98:6c:d4:9d:66:7b:91:2b:15:35:b9:
         09:56:94:25:f9:83:fc:ca:10:65:ab:9f:3d:4d:92:b5:67:95:
         50:89:23:29:69:4a:1a:e3:85:93:0a:c2:aa:a8:1a:0e:b3:f9:
         e6:43:b0:83:87:fd:40:5c:af:4a:dc:ee:5d:8d:70:7c:a7:75:
         aa:6a:78:ac:d3:10:cc:47:09:89:22:8e:0d:f0:e6:24:06:02:
         31:68:20:3f:59:1f:5e:a6:73:50:fd:ba:e3:08:ed:95:62:ab:
         b6:e2:0c:35:69:2e:5b:c5:7a:2b:6d:f1:b4:d2:42:b0:b8:29:
         c2:9b:01:14:35:78:fe:ae:66:3c:49:59:60:2c:7f:9c:2f:7e:
         2b:59:58:26:22:f5:57:0c:67:dc:1e:99:a7:f7:14:0d:15:21:
         f2:52:3c:18:1f:30:79:45:df:e1:85:7f:63:ce:35:30:81:33:
         28:52:21:49:5c:63:89:55:d2:a0:d5:fc:a9:c6:a0:54:bd:28:
         64:fb:a7:72:4e:37:f0:4b:36:e8:f6:86:c9:00:24:ef:2b:79:
         60:78:29:cd:60:24:18:71:4a:c5:bf:f7:ba:ae:47:69:58:70:
         cc:96:36:be:ca:25:ba:96:a8:3d:f1:ae:41:8e:41:5e:31:84:
         1e:c3:67:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJGGUoep05o+B6bMYaVyrPlVwKYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE3Mjc4ODFCNzkxNTE5NDVEN0VGQzk5MEVDQ0E0MEZB
MDY3QUQ4QzAeFw0yNTEyMTMwMDM5MDVaFw0yNjEyMTIwMDQ0MDVaMDMxMTAvBgNV
BAMTKEI4MDM1MjlBQTRDNzg1OTIzMEI3M0FBOEFEODY4NjVGRkEwRjNGNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8SCYGwas7rIWW6waLQrlDs1/i
j0dKWPFF7lIzcAf9xLxZH7tXUB6o42PfhKpQjYyrZnquB1omI0jT/pAgbP8VGpQD
Oz2iwwZB/arqum3D1dF4w+vVUJmIySWbOLso+ag6cooxCCiyf/ysBaJih7YVOBjJ
VMWBF7Bx7Q5JbhpdIqdOKwAnB+xc5xZBouyYy2mrfCQF7PgiNpLMOok44Kwpkai5
cMu/B6X7EAdsXQuCw6b+n0j63DyXDLPsazfsLitDQn46+b2KGiRynrfaBOlgjwB8
Ws9Bpwo7BRvp5O0YL+wYk9f8abz4FBqJR+WUaXrNz/wagoh7omM5A8HgtzXfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuANSmqTHhZIwtzqorYaGX/oPP0kwHwYDVR0j
BBgwFoAUunJ4gbeRUZRdfvyZDsykD6BnrYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1VUQUtiR0plc25tVjZiZjcyM2tCc0p3RVVFeEsybjJKM3lYNlRkamNN
WHQvMC9CQTcyNzg4MUI3OTE1MTk0NUQ3RUZDOTkwRUNDQTQwRkEwNjdBRDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNzI3ODgxQjc5MTUxOTQ1
RDdFRkM5OTBFQ0NBNDBGQTA2N0FEOEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dVVEFLYkdKZXNubVY2YmY3MjNrQnNKd0VVRXhLMm4ySjN5WDZUZGpjTVh0LzAv
MzQzNTJlMzEzNjMzMmUzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzUzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaNMMA0GCSqGSIb3DQEBCwUAA4IBAQCQXb/H7DDW
mGzUnWZ7kSsVNbkJVpQl+YP8yhBlq589TZK1Z5VQiSMpaUoa44WTCsKqqBoOs/nm
Q7CDh/1AXK9K3O5djXB8p3Wqanis0xDMRwmJIo4N8OYkBgIxaCA/WR9epnNQ/brj
CO2VYqu24gw1aS5bxXorbfG00kKwuCnCmwEUNXj+rmY8SVlgLH+cL34rWVgmIvVX
DGfcHpmn9xQNFSHyUjwYHzB5Rd/hhX9jzjUwgTMoUiFJXGOJVdKg1fypxqBUvShk
+6dyTjfwSzbo9obJACTvK3lgeCnNYCQYcUrFv/e6rkdpWHDMlja+yiW6lqg98a5B
jkFeMYQew2e3
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:57:30 2025 by rpki-client