This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa
File:                     34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa (raw, json)
Hash identifier:          ymbi2Lfx4ZtV8gF2MRQp8E/O2Ogj/N6UCPxsNEcjK1o=
Subject key identifier:   B0:4E:08:06:9A:96:3F:1A:62:37:49:E9:19:B0:AD:64:2C:0D:F9:AC
Certificate issuer:       /CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
Certificate serial:       7AC79BDA57EF989219D1BCB92BBDAB440B3EBF42
Authority key identifier: 35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa
Signing time:             Wed 10 Dec 2025 23:18:50 +0000
ROA not before:           Wed 10 Dec 2025 23:13:50 +0000
ROA not after:            Wed 09 Dec 2026 23:18:50 +0000
asID:                     268116
IP address blocks:        45.169.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl
                          rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 10:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c7:9b:da:57:ef:98:92:19:d1:bc:b9:2b:bd:ab:44:0b:3e:bf:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
        Validity
            Not Before: Dec 10 23:13:50 2025 GMT
            Not After : Dec  9 23:18:50 2026 GMT
        Subject: CN=B04E08069A963F1A623749E919B0AD642C0DF9AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:a6:0e:03:3e:e4:93:7a:05:7e:1b:09:38:
                    1e:7e:24:d1:09:d8:42:a2:51:58:64:16:84:43:50:
                    02:10:57:17:f8:6d:96:12:6d:b4:d9:df:17:08:ec:
                    2a:5a:9c:59:96:e7:da:26:8f:c4:eb:e3:fd:69:f8:
                    74:fd:ef:77:96:b9:52:1b:68:24:49:4e:86:7a:af:
                    76:a0:9b:34:a2:8a:11:2a:36:79:ec:a5:2f:db:9e:
                    c4:33:e6:d6:e0:5f:a5:e4:c1:c4:5b:fd:c0:22:fa:
                    0c:c0:eb:af:ea:c7:c4:94:bf:44:7b:d9:a0:74:da:
                    86:e8:e2:78:b6:bb:4d:63:26:07:2f:fe:82:e6:88:
                    93:37:03:e6:ba:2d:9a:26:67:29:98:bb:6d:55:97:
                    03:60:a4:8b:1d:fa:62:e0:f9:c1:0a:09:19:f3:91:
                    45:f4:03:31:2b:d9:f5:1c:9f:28:5b:43:b4:63:f9:
                    6f:fd:6b:99:40:5f:ac:60:b6:d4:bc:48:42:2f:92:
                    24:6b:f9:e3:3a:7a:16:b4:b2:f2:28:d4:79:c9:18:
                    85:b1:06:39:44:0a:a0:16:bf:76:f0:bd:4d:6e:5b:
                    9e:be:b6:ae:ef:bb:69:e3:4f:7a:fa:57:9c:9f:63:
                    cc:6f:eb:fb:01:c4:6a:c5:42:8d:a4:b0:4d:03:ac:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4E:08:06:9A:96:3F:1A:62:37:49:E9:19:B0:AD:64:2C:0D:F9:AC
            X509v3 Authority Key Identifier:
                keyid:35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:77:59:0d:46:88:de:05:02:66:d4:74:a6:58:1b:c8:03:03:
         3a:77:90:76:4f:fb:12:82:a0:cb:68:0b:59:0f:7f:dd:06:3e:
         6d:f8:b1:44:27:68:9f:b0:d8:64:ab:32:8c:07:e2:1c:72:45:
         61:8c:20:e3:1d:dc:35:fb:f6:b3:93:90:94:2a:71:1e:c2:5e:
         42:dc:0f:fb:ca:b4:dd:c9:c7:06:b4:b0:d1:71:7f:20:24:62:
         f9:5f:eb:4d:79:ea:00:5a:f7:26:aa:c6:50:ee:70:e9:72:b5:
         dc:4f:04:e4:60:32:2f:16:ed:18:13:4a:b9:c2:20:9f:dd:07:
         0d:c2:bb:f7:76:6c:1b:ba:8a:d8:5e:96:4c:b3:bf:5c:a5:bf:
         86:37:18:81:ec:78:af:8e:e1:c1:c9:0c:91:5e:d8:91:10:31:
         ea:c5:a6:78:bb:63:f7:56:d7:37:53:e6:db:71:97:e9:79:b6:
         63:94:f9:bf:7b:9a:c6:2e:b2:7e:62:ea:2a:97:87:ae:4c:e0:
         89:67:32:92:69:83:4a:07:1d:04:41:97:a9:d0:af:17:e7:a9:
         db:1d:b2:6e:ea:3f:8d:f5:21:7a:4d:b9:2d:6c:00:84:5f:7a:
         7b:35:57:f0:63:81:66:56:1d:e9:ad:53:4c:c6:dd:c7:bb:9a:
         16:10:be:4a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeseb2lfvmJIZ0by5K72rRAs+v0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3QzY2QUVERTVDODVENjJFNDNGMkU3QjQ3QTlBNEQy
QURCRURCQTAeFw0yNTEyMTAyMzEzNTBaFw0yNjEyMDkyMzE4NTBaMDMxMTAvBgNV
BAMTKEIwNEUwODA2OUE5NjNGMUE2MjM3NDlFOTE5QjBBRDY0MkMwREY5QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtKYOAz7kk3oFfhsJOB5+JNEJ
2EKiUVhkFoRDUAIQVxf4bZYSbbTZ3xcI7CpanFmW59omj8Tr4/1p+HT973eWuVIb
aCRJToZ6r3agmzSiihEqNnnspS/bnsQz5tbgX6XkwcRb/cAi+gzA66/qx8SUv0R7
2aB02obo4ni2u01jJgcv/oLmiJM3A+a6LZomZymYu21VlwNgpIsd+mLg+cEKCRnz
kUX0AzEr2fUcnyhbQ7Rj+W/9a5lAX6xgttS8SEIvkiRr+eM6eha0svIo1HnJGIWx
BjlECqAWv3bwvU1uW56+tq7vu2njT3r6V5yfY8xv6/sBxGrFQo2ksE0DrM0nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsE4IBpqWPxpiN0npGbCtZCwN+awwHwYDVR0j
BBgwFoAUNXxmrt5chdYuQ/LntHqaTSrb7bowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnlhRjZnVjVYNkV6WUU0dTlFc0pqMVhtZFpOUlExakFYVGdyM2RQMjZT
NlYvMi8zNTdDNjZBRURFNUM4NUQ2MkU0M0YyRTdCNDdBOUE0RDJBREJFREJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1N0M2NkFFREU1Qzg1RDYy
RTQzRjJFN0I0N0E5QTREMkFEQkVEQkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5YUY2Z1Y1WDZFellFNHU5RXNKajFYbWRaTlJRMWpBWFRncjNkUDI2UzZWLzIv
MzQzNTJlMzEzNjM5MmUzMTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqZwwDQYJKoZIhvcNAQELBQADggEBAEF3WQ1G
iN4FAmbUdKZYG8gDAzp3kHZP+xKCoMtoC1kPf90GPm34sUQnaJ+w2GSrMowH4hxy
RWGMIOMd3DX79rOTkJQqcR7CXkLcD/vKtN3Jxwa0sNFxfyAkYvlf60156gBa9yaq
xlDucOlytdxPBORgMi8W7RgTSrnCIJ/dBw3Cu/d2bBu6ithelkyzv1ylv4Y3GIHs
eK+O4cHJDJFe2JEQMerFpni7Y/dW1zdT5ttxl+l5tmOU+b97msYusn5i6iqXh65M
4IlnMpJpg0oHHQRBl6nQrxfnqdsdsm7qP431IXpNuS1sAIRfens1V/BjgWZWHemt
U0zG3ce7mhYQvko=
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:48:21 2025 by rpki-client