This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/34352e3232362e3133382e302f32332d3234203d3e20323636393637.roa
File:                     34352e3232362e3133382e302f32332d3234203d3e20323636393637.roa (raw, json)
Hash identifier:          HMW2hMKQJ3oaZqcKsMS0f9Xb8u/H3b3qgYdnfJS2XaE=
Subject key identifier:   03:32:C4:FB:62:F7:28:0F:5A:06:5C:1D:96:A3:43:18:34:7B:4A:EA
Certificate issuer:       /CN=AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16
Certificate serial:       0F15611868063E26268BFA8C464A76B647171188
Authority key identifier: AC:9E:0E:79:3C:23:1D:6A:A0:D6:BE:4B:68:E9:2C:90:E8:B2:9D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/34352e3232362e3133382e302f32332d3234203d3e20323636393637.roa
Signing time:             Thu 18 Dec 2025 14:37:16 +0000
ROA not before:           Thu 18 Dec 2025 14:32:16 +0000
ROA not after:            Thu 17 Dec 2026 14:37:16 +0000
asID:                     266967
IP address blocks:        45.226.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:15:61:18:68:06:3e:26:26:8b:fa:8c:46:4a:76:b6:47:17:11:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16
        Validity
            Not Before: Dec 18 14:32:16 2025 GMT
            Not After : Dec 17 14:37:16 2026 GMT
        Subject: CN=0332C4FB62F7280F5A065C1D96A34318347B4AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:a2:20:fd:a8:54:4f:c3:aa:21:f6:5d:47:
                    d6:2c:28:bc:be:f1:29:8e:a7:3d:b7:36:91:2c:91:
                    e6:75:22:c1:7c:92:f7:a7:38:af:83:bd:f4:35:33:
                    8d:54:9b:5d:70:82:38:7e:a5:e7:95:5d:91:49:5c:
                    43:1e:5e:f1:1f:99:b0:20:66:5e:75:89:4c:83:67:
                    c4:bd:49:7a:c7:5a:44:bb:ae:f2:45:28:3d:62:a6:
                    47:f5:90:3b:05:59:82:b4:f8:db:21:2f:2c:25:ed:
                    ac:cf:df:53:38:48:41:bc:12:38:d6:1b:22:10:0c:
                    e0:5f:a0:94:1f:97:57:18:cf:59:7b:39:5a:dc:6d:
                    89:09:99:ae:fb:9f:60:ea:e4:c9:f6:74:43:89:a0:
                    56:ea:5d:e6:8f:ed:7e:93:73:7f:4d:2c:3c:bf:13:
                    6a:58:3f:17:8e:6e:3b:54:ce:21:b0:be:6d:4e:1d:
                    8d:48:11:38:93:76:61:d5:66:42:c5:2c:85:07:d5:
                    6b:ac:50:b9:25:56:58:fe:80:8e:ed:dc:70:96:33:
                    2c:64:a7:b5:c3:37:93:e1:80:c9:69:28:98:04:3d:
                    71:0d:12:1e:fc:cf:2c:b8:9e:29:9f:b8:85:3d:1b:
                    45:5b:d8:74:23:26:f1:cf:d2:30:14:12:fd:4e:4e:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:32:C4:FB:62:F7:28:0F:5A:06:5C:1D:96:A3:43:18:34:7B:4A:EA
            X509v3 Authority Key Identifier:
                keyid:AC:9E:0E:79:3C:23:1D:6A:A0:D6:BE:4B:68:E9:2C:90:E8:B2:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/34352e3232362e3133382e302f32332d3234203d3e20323636393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:d1:e4:f0:f3:0a:95:22:ab:24:cc:2a:8b:37:49:3c:33:
         64:b2:ec:ba:76:34:02:51:23:46:27:5e:bc:f1:50:8b:9a:c7:
         19:4e:16:49:9f:5a:9e:14:9c:92:bb:94:c1:d2:82:0f:bc:19:
         c3:9c:74:41:90:68:eb:83:ee:e7:a9:82:6e:85:a2:9b:78:99:
         05:bb:03:7d:c3:09:71:0f:92:4d:50:89:30:2a:3a:38:fd:ea:
         73:20:89:74:b0:ec:96:17:6b:c6:5c:c8:03:e8:3a:f4:ec:96:
         47:1e:45:28:b8:e1:b1:e8:e9:d2:22:7f:2e:c1:43:6e:28:96:
         3b:0c:e3:f1:50:fb:e6:25:46:d0:f8:52:18:63:1a:24:b3:2d:
         ba:c5:7a:66:ef:17:89:fc:ca:74:8e:ac:65:4b:df:9d:5b:d2:
         57:1b:6e:7b:9f:00:84:68:75:e6:3d:9f:21:44:c0:9c:b1:e7:
         99:50:f9:ea:09:ed:88:cb:e0:c9:4e:84:cd:80:10:6c:67:60:
         8c:ea:96:d2:28:78:80:17:61:e5:53:27:c3:95:e5:c8:55:12:
         9e:24:58:37:de:2d:ac:81:0e:59:33:1b:dd:c7:92:b2:bc:f8:
         6f:ce:b1:38:ac:74:2d:b8:04:1c:28:33:bd:c2:b8:2e:14:04:
         4d:67:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:47:38 2025 by rpki-client