This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32322d3332203d3e20323633393830.roa
File:                     34352e3233322e3230302e302f32322d3332203d3e20323633393830.roa (raw, json)
Hash identifier:          EDwgP1aaaFsp1FZU4ejOSLhb6KBhxwjiwiLY64jjeAk=
Subject key identifier:   6A:3F:D5:2E:5F:E7:DB:F4:1B:C0:CA:1D:A1:2F:0D:D3:42:46:57:5B
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       2B24F44A38DB08431A41A1E89E27681563C55627
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32322d3332203d3e20323633393830.roa
Signing time:             Thu 18 Dec 2025 12:33:09 +0000
ROA not before:           Thu 18 Dec 2025 12:28:09 +0000
ROA not after:            Thu 17 Dec 2026 12:33:09 +0000
asID:                     263980
IP address blocks:        45.232.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:24:f4:4a:38:db:08:43:1a:41:a1:e8:9e:27:68:15:63:c5:56:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Dec 18 12:28:09 2025 GMT
            Not After : Dec 17 12:33:09 2026 GMT
        Subject: CN=6A3FD52E5FE7DBF41BC0CA1DA12F0DD34246575B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:7a:dc:c1:64:62:17:76:85:68:52:40:d9:
                    5d:ac:0c:04:b9:08:6b:1e:28:81:99:71:c0:d5:67:
                    4f:9d:20:26:8a:2f:e1:09:1b:62:22:0d:38:ef:8d:
                    37:26:6e:b3:d2:be:93:f9:ed:05:b6:68:dd:7f:ee:
                    99:c6:f9:ba:93:8b:24:b3:2f:7a:e4:9b:cc:cb:51:
                    70:3e:0a:6f:2e:ce:2b:93:91:ba:70:8c:c9:57:8b:
                    e7:aa:84:03:ed:05:f5:8b:fe:3a:04:a3:50:3d:28:
                    c6:95:b0:01:bd:ff:d6:29:be:bd:e1:1f:d7:8a:90:
                    f5:79:a4:cc:f2:f9:fa:0b:fc:0b:88:e1:54:8b:15:
                    07:58:63:6d:7d:2f:2c:de:22:6c:b0:94:3a:3c:c7:
                    18:b3:a1:1c:61:75:ce:2e:93:88:9e:09:bc:2b:0f:
                    44:d4:55:00:83:99:c5:56:b5:9c:c0:40:b8:a2:7c:
                    7b:65:ff:36:71:f1:13:8e:03:f2:23:03:9e:01:9f:
                    8b:e0:18:47:85:a5:63:80:2f:98:0c:38:41:ca:48:
                    1a:09:c4:dd:57:a5:db:9f:dc:5a:cd:4e:40:3d:df:
                    15:f2:04:81:2a:f1:48:a4:13:f9:dd:1c:f4:05:fc:
                    8e:04:5f:47:a9:08:b4:ec:f9:2b:0f:0d:d6:52:00:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3F:D5:2E:5F:E7:DB:F4:1B:C0:CA:1D:A1:2F:0D:D3:42:46:57:5B
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32322d3332203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:c4:ca:ea:60:bd:1e:26:87:69:4e:09:cf:1a:db:45:68:68:
         38:86:fc:e7:1b:6c:85:ec:02:9e:be:6d:77:80:5b:cd:92:60:
         14:84:ed:9a:20:bb:88:c1:39:f4:6f:5f:89:19:0e:fa:d8:e7:
         89:6a:b5:ea:84:92:b2:b0:7a:89:71:65:e4:f4:42:a1:46:fb:
         75:e6:f1:48:fa:d0:7e:0d:a3:d2:a5:89:38:f0:09:a0:2b:aa:
         f3:30:a3:3c:84:03:42:44:00:40:28:d2:cf:96:e4:74:f1:d0:
         ad:b1:b4:a3:a5:af:9a:54:14:31:71:e9:77:17:88:98:ca:c8:
         e0:a7:ec:c2:ec:25:a1:98:4a:81:04:06:64:5a:cc:24:3a:1b:
         f1:58:f4:03:76:5a:12:18:18:69:0c:44:2b:b3:91:64:b2:62:
         fd:e4:ef:ce:f9:1b:aa:2e:84:18:80:fa:53:d3:b6:03:9f:93:
         b4:2f:7c:32:04:c6:d7:3e:f5:82:3f:6f:5d:27:2e:45:06:b3:
         74:53:52:e5:ef:2f:b7:54:c1:c3:ad:08:87:c1:0d:6c:52:61:
         99:6a:47:79:94:26:ef:62:32:9b:2d:85:8b:eb:3f:31:83:50:
         0a:f7:5d:46:a6:bd:10:64:87:3a:83:ef:bc:d1:75:13:83:c4:
         6a:f3:91:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:14:13 2025 by rpki-client