This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3234203d3e20323636303931.roa
File:                     34352e352e39362e302f32322d3234203d3e20323636303931.roa (raw, json)
Hash identifier:          TpP0pyyBddetIefEQp+tbjSdfBvTQ1UGHo5796I3wNk=
Subject key identifier:   CA:50:38:77:A1:39:AB:C0:C8:3F:94:18:79:6C:CE:63:11:A8:C8:98
Certificate issuer:       /CN=D272B79940440721190429AABBA45B0BB5589F3E
Certificate serial:       7E78E9C07DCE6B0C3C22B76F7A729821329229B5
Authority key identifier: D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3234203d3e20323636303931.roa
Signing time:             Mon 29 Dec 2025 13:06:28 +0000
ROA not before:           Mon 29 Dec 2025 13:01:28 +0000
ROA not after:            Mon 28 Dec 2026 13:06:28 +0000
asID:                     266091
IP address blocks:        45.5.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl
                          rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 10:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:78:e9:c0:7d:ce:6b:0c:3c:22:b7:6f:7a:72:98:21:32:92:29:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D272B79940440721190429AABBA45B0BB5589F3E
        Validity
            Not Before: Dec 29 13:01:28 2025 GMT
            Not After : Dec 28 13:06:28 2026 GMT
        Subject: CN=CA503877A139ABC0C83F9418796CCE6311A8C898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:80:08:68:82:74:8b:bb:71:51:dd:21:81:
                    63:8b:14:17:11:3c:96:32:2a:7c:46:00:8c:ce:ed:
                    6b:6f:36:6b:25:72:76:b7:4f:5f:fb:b2:6f:6f:23:
                    1a:bb:ee:78:7d:c1:17:5d:93:ce:96:66:da:0b:44:
                    ca:ca:0b:7d:33:81:7d:af:d9:52:59:03:77:c4:e0:
                    d7:5d:6f:03:76:37:09:c2:bb:f3:16:3e:bb:3c:dd:
                    2b:79:53:fc:8b:81:2b:4c:ce:00:06:d7:11:75:0f:
                    d5:96:bd:30:c8:b9:6b:a9:29:b0:ff:a7:65:ea:c0:
                    e1:ae:fa:32:ef:da:a5:66:18:9f:cf:07:07:01:b4:
                    3d:b4:fa:69:3e:8a:a1:2d:d5:77:c2:75:c2:7e:a4:
                    77:1f:dc:73:b6:a2:90:d7:36:cd:25:07:0b:c9:af:
                    2a:f4:ef:a3:11:cd:a4:4c:79:35:3c:0a:ab:33:3d:
                    23:57:d1:f0:5c:f0:5a:75:d2:72:ab:f0:33:a4:74:
                    ee:b6:58:c0:bb:31:47:95:a6:f6:7e:2a:22:89:38:
                    b5:13:44:b7:f2:66:c6:2b:81:3c:42:96:13:97:ea:
                    89:45:27:cb:af:3f:7d:d6:a9:92:0c:da:ad:c4:a4:
                    48:3a:76:c8:51:31:20:8d:53:ad:fc:67:9d:24:b0:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:50:38:77:A1:39:AB:C0:C8:3F:94:18:79:6C:CE:63:11:A8:C8:98
            X509v3 Authority Key Identifier:
                keyid:D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3234203d3e20323636303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:81:62:c8:74:c6:f3:b7:31:ae:50:2e:6d:98:df:4b:95:14:
         f7:64:28:5e:79:da:cf:6c:4f:c2:85:94:b6:ff:2f:51:a4:fb:
         93:43:69:bb:69:70:00:11:63:4c:f9:b7:e0:f3:c1:fb:97:77:
         76:d0:8e:34:12:0b:9e:7a:5f:1f:5d:cc:89:d0:6e:f6:cd:ed:
         26:50:4f:91:34:81:c0:58:e0:6e:a1:12:ec:7b:7f:70:17:07:
         2e:b8:63:3c:01:11:79:7c:9c:51:5c:b7:f2:91:e1:c1:47:35:
         f9:16:a1:de:96:68:d2:af:fc:87:a4:35:c7:00:a0:69:4c:07:
         c7:00:45:fb:43:0b:13:56:d8:95:6c:55:94:4f:3b:40:81:3e:
         ed:93:1b:1b:d6:f1:5e:87:4a:57:6f:e6:43:dd:e6:6b:2b:4d:
         4a:b9:9a:7a:16:27:b4:38:75:e2:a7:d6:e6:89:7d:cb:14:68:
         50:1e:28:86:c3:95:6d:c1:9b:90:09:3f:6d:72:9f:49:bf:64:
         2b:2c:2b:bd:02:aa:8a:1f:6b:7c:89:5c:62:e4:59:67:04:3e:
         21:27:d9:20:e8:76:ae:9b:c3:18:a4:d5:00:6c:94:de:df:0a:
         49:9d:ce:b8:03:05:0f:c4:f2:27:b6:4c:86:06:a1:59:48:4d:
         95:31:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 08:20:59 2025 by rpki-client