This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/34352e3139302e32312e302f32342d3234203d3e20323639363038.roa
File:                     34352e3139302e32312e302f32342d3234203d3e20323639363038.roa (raw, json)
Hash identifier:          a6yS35OBrvfAgwENFV2Ffdhi0aVqDSWGTXAVZBdJSL0=
Subject key identifier:   38:55:90:2E:44:83:59:9E:A7:23:CA:99:7F:0D:A5:EE:FC:23:82:EB
Certificate issuer:       /CN=77858F0B49CF01FBE34EAD0268D2D6A0B31685C4
Certificate serial:       45A3BAA6A39640A37EE3A730388F1B0B1928947E
Authority key identifier: 77:85:8F:0B:49:CF:01:FB:E3:4E:AD:02:68:D2:D6:A0:B3:16:85:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/34352e3139302e32312e302f32342d3234203d3e20323639363038.roa
Signing time:             Tue 30 Dec 2025 16:15:32 +0000
ROA not before:           Tue 30 Dec 2025 16:10:32 +0000
ROA not after:            Tue 29 Dec 2026 16:15:32 +0000
asID:                     269608
IP address blocks:        45.190.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.crl
                          rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 10:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a3:ba:a6:a3:96:40:a3:7e:e3:a7:30:38:8f:1b:0b:19:28:94:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77858F0B49CF01FBE34EAD0268D2D6A0B31685C4
        Validity
            Not Before: Dec 30 16:10:32 2025 GMT
            Not After : Dec 29 16:15:32 2026 GMT
        Subject: CN=3855902E4483599EA723CA997F0DA5EEFC2382EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:70:85:e4:63:0e:7b:9c:f1:9e:e1:82:fa:
                    96:a6:1c:c8:b2:27:b1:b0:d0:11:32:b7:e3:d0:d1:
                    a8:85:c4:48:0b:4f:4f:34:c4:de:bc:80:16:c0:00:
                    1f:43:fa:e5:22:94:72:49:80:73:64:e3:27:f0:64:
                    e1:d4:97:f0:c9:a1:36:0d:e0:da:33:8c:24:c1:c4:
                    5a:0b:ab:64:73:d1:29:00:d5:74:3b:6d:7c:4c:30:
                    5b:c9:e3:70:a5:c0:27:c7:a9:8c:77:0e:8c:74:c1:
                    e9:d7:ca:3c:19:ff:9e:2b:fb:9a:d6:e9:5a:d1:38:
                    4f:e6:25:78:1d:d0:74:b5:e6:d0:65:bc:01:51:95:
                    85:ca:f0:2d:f3:09:df:13:78:fb:b9:8b:de:26:a3:
                    0c:5b:a8:ae:da:89:12:7f:2a:41:b2:a8:14:eb:47:
                    f0:02:28:df:79:3c:92:bd:4a:8b:7b:86:5a:e3:88:
                    bb:09:b7:da:60:96:67:7a:97:35:cf:2a:c8:43:6d:
                    7f:10:f6:80:2e:55:e1:1b:ba:62:32:40:f8:0e:f0:
                    5e:e5:22:c1:eb:f0:d1:f9:5e:de:62:9e:55:e4:cb:
                    7f:30:16:4d:a2:37:2a:d7:72:af:5e:ce:3e:ab:d9:
                    24:f9:01:8c:10:89:52:46:18:c7:53:14:58:cf:44:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:55:90:2E:44:83:59:9E:A7:23:CA:99:7F:0D:A5:EE:FC:23:82:EB
            X509v3 Authority Key Identifier:
                keyid:77:85:8F:0B:49:CF:01:FB:E3:4E:AD:02:68:D2:D6:A0:B3:16:85:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/34352e3139302e32312e302f32342d3234203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:80:35:b1:a2:f9:11:1d:d9:da:0a:b7:34:9e:5b:3a:51:d1:
         e0:11:1f:1d:2b:3e:c4:90:9e:4c:b5:ef:6f:46:8f:ec:ce:e8:
         c7:86:7d:94:a7:04:3c:81:84:ec:f0:d3:16:92:64:2e:25:22:
         96:b3:d6:a9:90:54:43:a0:0a:02:13:05:02:66:ae:03:f8:7d:
         6a:38:9e:67:e3:f5:0b:86:ed:07:cf:69:15:61:f5:1c:74:aa:
         5c:b0:9b:5a:ad:22:41:a1:34:ef:76:f9:65:a4:1a:41:5b:ba:
         b1:29:78:4b:05:fe:45:29:95:45:7d:18:af:0b:1a:d2:0f:8f:
         76:b2:ef:03:b2:14:e0:f0:0d:e3:74:f6:45:72:77:1b:32:d7:
         0b:c9:82:e8:1d:ac:26:1a:08:a9:b1:b6:cd:27:e7:49:a5:e3:
         5a:64:e7:f0:d4:da:c3:26:1b:70:d3:64:40:db:f3:62:e4:db:
         44:1b:d6:b9:05:58:11:f2:1e:6f:cf:d7:91:08:22:c8:53:64:
         9f:ec:10:cb:22:56:d7:79:d5:1d:2d:98:58:fd:48:75:aa:3e:
         45:d6:6c:1e:4e:d0:9b:29:b3:b2:94:a8:15:91:30:7b:72:89:
         5e:06:94:50:93:13:72:a6:40:65:24:1f:b1:82:41:1d:36:04:
         c5:ba:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 20:38:52 2026 by rpki-client