This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/34352e3136342e3139322e302f32322d3234203d3e20323632393037.roa
File:                     34352e3136342e3139322e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          aV/bja2HfSkpBuOwVd4MKdwnqYDrq8excXhj3fxucds=
Subject key identifier:   D5:66:A9:0C:E0:98:CC:32:F9:73:A7:E4:80:9E:42:AB:C3:20:FC:52
Certificate issuer:       /CN=0F78626D3BF8B07214C737318E62EE73094347B3
Certificate serial:       7E9008F610E22D6374F280F7427AEC7C93CB0E7F
Authority key identifier: 0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/34352e3136342e3139322e302f32322d3234203d3e20323632393037.roa
Signing time:             Fri 19 Dec 2025 17:11:37 +0000
ROA not before:           Fri 19 Dec 2025 17:06:37 +0000
ROA not after:            Fri 18 Dec 2026 17:11:37 +0000
asID:                     262907
IP address blocks:        45.164.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl
                          rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:90:08:f6:10:e2:2d:63:74:f2:80:f7:42:7a:ec:7c:93:cb:0e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F78626D3BF8B07214C737318E62EE73094347B3
        Validity
            Not Before: Dec 19 17:06:37 2025 GMT
            Not After : Dec 18 17:11:37 2026 GMT
        Subject: CN=D566A90CE098CC32F973A7E4809E42ABC320FC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7e:75:39:dd:68:80:83:e9:57:f3:69:5e:74:
                    9d:f9:f1:9b:91:0f:f6:37:12:23:85:ef:33:2d:0f:
                    9f:ec:9e:d7:48:70:9b:b5:d4:38:42:cd:2d:9d:e9:
                    ff:4a:a2:e1:f0:e2:46:66:da:7a:cf:f3:c4:65:7a:
                    75:12:7d:0e:f0:a0:33:52:39:6d:2b:65:fc:c1:2e:
                    c8:f4:db:2f:86:d5:50:ae:ef:eb:4f:69:f7:6c:43:
                    03:5a:f6:94:99:7a:53:e5:0c:eb:c1:a7:ed:3d:b0:
                    cc:6e:4a:51:cf:26:5b:59:01:4b:6a:0e:4c:c9:07:
                    a6:ad:58:95:ce:29:59:b3:cc:3c:55:40:cf:be:fc:
                    cd:6b:cb:12:9a:da:2a:7b:cb:e6:52:b9:a4:ae:da:
                    3a:85:5c:f9:90:19:bc:c3:8a:d7:63:65:8b:f3:49:
                    09:89:ee:21:b8:bb:7d:e2:6f:db:a1:46:33:a4:f5:
                    b8:5f:19:db:a0:29:2c:13:47:01:11:30:00:3e:04:
                    ae:81:1f:d6:b2:d9:59:c1:58:c3:f6:0d:f4:4d:cb:
                    5c:b9:0a:e4:9c:38:ee:11:72:80:5c:0c:90:7a:1c:
                    29:24:1e:f9:82:78:e9:f4:72:fe:37:b5:04:56:c3:
                    15:ca:84:81:f7:37:d9:e1:b0:a2:1b:6a:5e:a0:52:
                    37:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:66:A9:0C:E0:98:CC:32:F9:73:A7:E4:80:9E:42:AB:C3:20:FC:52
            X509v3 Authority Key Identifier:
                keyid:0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/34352e3136342e3139322e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:e9:c4:83:8b:c4:4a:2c:0a:f3:00:f9:d7:94:32:06:ec:cc:
         72:7b:5f:ed:9d:3d:d2:37:a9:65:fa:91:93:1e:cc:d0:fa:65:
         4d:08:1a:78:67:48:39:6a:f7:7f:18:f9:ca:b7:e0:48:5c:4a:
         54:c3:85:a8:61:82:4c:89:77:50:0b:bc:10:23:a6:52:94:56:
         04:bc:33:3c:9b:fa:0f:59:0e:8d:86:89:87:a6:25:84:fb:15:
         c5:2f:36:62:6e:cf:50:6e:a8:ec:dc:d0:1f:fe:9e:96:bc:48:
         e2:e6:31:6f:fa:0d:5a:eb:1a:e7:18:85:4b:03:2b:25:11:2a:
         f6:40:0b:4e:85:90:8c:a4:35:a5:b6:44:8e:90:cd:b8:1d:45:
         6c:0d:a3:8f:50:92:e1:7e:5c:e5:76:ab:3e:fa:22:68:b0:b3:
         e8:81:c6:7a:70:a1:3f:36:1f:26:10:be:84:b6:41:cd:27:69:
         41:67:81:95:66:35:a7:e0:b5:47:e2:06:c0:84:93:99:56:3b:
         92:7d:e7:9f:dc:b0:03:ee:2d:7f:b6:92:ca:b7:f3:2f:51:6a:
         0a:3c:4a:cd:92:da:46:70:c4:54:99:e7:b4:11:ef:df:c6:c0:
         49:c4:e0:1a:e6:0e:5b:30:56:7e:60:5a:66:94:3a:5e:95:e2:
         fd:e7:b3:d2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfpAI9hDiLWN08oD3QnrsfJPLDn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3ODYyNkQzQkY4QjA3MjE0QzczNzMxOEU2MkVFNzMw
OTQzNDdCMzAeFw0yNTEyMTkxNzA2MzdaFw0yNjEyMTgxNzExMzdaMDMxMTAvBgNV
BAMTKEQ1NjZBOTBDRTA5OENDMzJGOTczQTdFNDgwOUU0MkFCQzMyMEZDNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfnU53WiAg+lX82ledJ358ZuR
D/Y3EiOF7zMtD5/sntdIcJu11DhCzS2d6f9KouHw4kZm2nrP88RlenUSfQ7woDNS
OW0rZfzBLsj02y+G1VCu7+tPafdsQwNa9pSZelPlDOvBp+09sMxuSlHPJltZAUtq
DkzJB6atWJXOKVmzzDxVQM++/M1ryxKa2ip7y+ZSuaSu2jqFXPmQGbzDitdjZYvz
SQmJ7iG4u33ib9uhRjOk9bhfGdugKSwTRwERMAA+BK6BH9ay2VnBWMP2DfRNy1y5
CuScOO4RcoBcDJB6HCkkHvmCeOn0cv43tQRWwxXKhIH3N9nhsKIbal6gUjevAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1WapDOCYzDL5c6fkgJ5Cq8Mg/FIwHwYDVR0j
BBgwFoAUD3hibTv4sHIUxzcxjmLucwlDR7MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJNQVoyRnRYOERvQng4bXJCbzZvVHRZMW5CWmQ1NnB0eHFtankyYnVj
ZHEvMC8wRjc4NjI2RDNCRjhCMDcyMTRDNzM3MzE4RTYyRUU3MzA5NDM0N0IzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNzg2MjZEM0JGOEIwNzIx
NEM3MzczMThFNjJFRTczMDk0MzQ3QjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyTUFaMkZ0WDhEb0J4OG1yQm82b1R0WTFuQlpkNTZwdHhxbWp5MmJ1Y2RxLzAv
MzQzNTJlMzEzNjM0MmUzMTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzOTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpMAwDQYJKoZIhvcNAQELBQADggEBADPpxIOL
xEosCvMA+deUMgbszHJ7X+2dPdI3qWX6kZMezND6ZU0IGnhnSDlq938Y+cq34Ehc
SlTDhahhgkyJd1ALvBAjplKUVgS8Mzyb+g9ZDo2GiYemJYT7FcUvNmJuz1BuqOzc
0B/+npa8SOLmMW/6DVrrGucYhUsDKyURKvZAC06FkIykNaW2RI6QzbgdRWwNo49Q
kuF+XOV2qz76Imiws+iBxnpwoT82HyYQvoS2Qc0naUFngZVmNafgtUfiBsCEk5lW
O5J955/csAPuLX+2ksq38y9Rago8Ss2S2kZwxFSZ57QR79/GwEnE4BrmDlswVn5g
WmaUOl6V4v3ns9I=
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:12:36 2025 by rpki-client