This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e362e35322e302f32322d3332203d3e2030.roa
File:                     34352e362e35322e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          T6sbK5ATj2loD2AeZWKwxGT7cpC21JxW6XuMUh/Z/I0=
Subject key identifier:   B3:8C:D0:2D:40:9F:3D:02:BA:DA:97:90:2D:42:B6:CB:D9:F3:F6:AC
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       068A076F3E8C5C74175575EC365505FD585B544C
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e362e35322e302f32322d3332203d3e2030.roa
Signing time:             Tue 09 Dec 2025 20:01:54 +0000
ROA not before:           Tue 09 Dec 2025 19:56:54 +0000
ROA not after:            Tue 08 Dec 2026 20:01:54 +0000
asID:                     0
IP address blocks:        45.6.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8a:07:6f:3e:8c:5c:74:17:55:75:ec:36:55:05:fd:58:5b:54:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:54 2025 GMT
            Not After : Dec  8 20:01:54 2026 GMT
        Subject: CN=B38CD02D409F3D02BADA97902D42B6CBD9F3F6AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:72:97:e3:49:91:ad:f7:6b:7e:b6:e6:52:
                    c8:8a:50:04:3d:ef:cc:3e:3d:2f:ed:33:43:57:1f:
                    a9:d9:67:90:10:d3:e1:ee:a4:af:19:e8:ec:f5:2e:
                    1c:a3:6f:38:44:4b:b2:27:b9:b8:eb:ac:df:3b:0f:
                    46:9f:d3:d5:4f:a5:c7:8a:2d:c0:32:f0:1e:6e:6b:
                    8e:6e:ec:8f:69:5d:05:4d:ec:f2:6b:95:6e:f1:10:
                    d5:c9:0d:9c:19:d7:d6:d6:08:b1:f4:34:ef:3e:90:
                    78:9d:cd:6c:60:cd:e3:15:fa:e7:13:66:0f:02:01:
                    f4:54:6f:44:63:58:88:22:66:86:05:f0:ca:ac:b7:
                    80:3f:30:70:52:51:a8:a8:c0:dc:9c:3b:0a:56:40:
                    46:fc:29:c0:49:b6:d5:53:0f:c3:7c:a6:85:1d:36:
                    23:fd:f2:4c:33:19:07:18:09:ee:52:8c:b4:d8:4c:
                    50:fa:1a:7e:16:5b:02:eb:26:ec:c3:9e:d3:f5:3f:
                    f5:f3:23:54:1f:78:9b:32:34:fb:6f:14:c2:5c:46:
                    1d:3a:3e:92:93:4f:ea:67:21:06:1e:0c:e7:7e:3c:
                    5b:c7:08:65:51:73:89:97:00:a5:ab:a5:03:02:8e:
                    be:8a:ab:81:8f:63:75:b4:e9:22:c3:24:5e:04:b3:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8C:D0:2D:40:9F:3D:02:BA:DA:97:90:2D:42:B6:CB:D9:F3:F6:AC
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e362e35322e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:98:11:43:64:27:73:43:07:6d:f4:8f:4f:d5:36:c2:8b:1b:
         dc:e7:88:0c:b8:a5:a4:c4:1d:78:b6:03:1f:f4:42:68:c4:68:
         e0:b4:80:93:fd:c3:81:58:9f:13:34:7a:90:36:b1:bb:0c:8d:
         19:a4:94:f9:00:e8:df:ac:33:0f:7a:13:bf:e0:3c:db:6b:2b:
         dd:d1:8c:5e:46:48:3b:14:a8:6f:2d:ca:dd:c5:d0:1d:69:4f:
         da:c7:1b:00:3f:aa:9e:60:9e:a1:dd:f5:76:56:bf:70:6f:4f:
         9a:ae:f3:3f:63:b0:7a:80:68:04:7e:8e:79:31:33:3b:60:8f:
         4d:f3:86:f5:33:b2:bd:59:80:35:3b:b2:e9:62:82:ab:f5:0e:
         07:7c:92:ea:6a:73:1e:59:14:69:8a:16:e4:40:3b:ef:ed:5b:
         1b:2c:34:db:a6:fc:0f:83:0c:6a:49:48:3f:3c:30:b5:b9:8a:
         ad:e7:64:b1:db:d6:b6:6a:a8:f1:b8:c5:15:09:5e:96:6b:ad:
         24:18:8e:02:1f:ee:40:a5:99:ea:6f:7d:59:8e:d1:17:e1:12:
         04:62:ec:63:78:13:b3:a9:61:5a:95:e9:9d:48:fb:1e:ef:d6:
         34:48:35:ca:3c:64:df:31:0c:0f:41:a8:16:cd:af:ac:43:85:
         a4:5a:34:b2
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUBooHbz6MXHQXVXXsNlUF/VhbVEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNTEyMDkxOTU2NTRaFw0yNjEyMDgyMDAxNTRaMDMxMTAvBgNV
BAMTKEIzOENEMDJENDA5RjNEMDJCQURBOTc5MDJENDJCNkNCRDlGM0Y2QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRnKX40mRrfdrfrbmUsiKUAQ9
78w+PS/tM0NXH6nZZ5AQ0+HupK8Z6Oz1LhyjbzhES7InubjrrN87D0af09VPpceK
LcAy8B5ua45u7I9pXQVN7PJrlW7xENXJDZwZ19bWCLH0NO8+kHidzWxgzeMV+ucT
Zg8CAfRUb0RjWIgiZoYF8Mqst4A/MHBSUaiowNycOwpWQEb8KcBJttVTD8N8poUd
NiP98kwzGQcYCe5SjLTYTFD6Gn4WWwLrJuzDntP1P/XzI1QfeJsyNPtvFMJcRh06
PpKTT+pnIQYeDOd+PFvHCGVRc4mXAKWrpQMCjr6Kq4GPY3W06SLDJF4EsxFtAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUs4zQLUCfPQK62peQLUK2y9nz9qwwHwYDVR0j
BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx
Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2
OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQxQ3QvMi8z
NDM1MmUzNjJlMzUzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCLQY0MA0GCSqGSIb3DQEBCwUAA4IBAQBDmBFDZCdzQwdt9I9P1TbCixvc54gM
uKWkxB14tgMf9EJoxGjgtICT/cOBWJ8TNHqQNrG7DI0ZpJT5AOjfrDMPehO/4Dzb
ayvd0YxeRkg7FKhvLcrdxdAdaU/axxsAP6qeYJ6h3fV2Vr9wb0+arvM/Y7B6gGgE
fo55MTM7YI9N84b1M7K9WYA1O7LpYoKr9Q4HfJLqanMeWRRpihbkQDvv7VsbLDTb
pvwPgwxqSUg/PDC1uYqt52Sx29a2aqjxuMUVCV6Wa60kGI4CH+5ApZnqb31ZjtEX
4RIEYuxjeBOzqWFalemdSPse79Y0SDXKPGTfMQwPQagWza+sQ4WkWjSy
-----END CERTIFICATE-----
Generated at Sat Dec 20 17:15:49 2025 by rpki-client