This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/34352e3136382e34302e302f32322d3332203d3e20323638303238.roa
File:                     34352e3136382e34302e302f32322d3332203d3e20323638303238.roa (raw, json)
Hash identifier:          H0Dht2va1rK529I51+SC9bFrSbs9PZLFZH9VPPagmRI=
Subject key identifier:   6D:6C:08:9D:71:49:0A:A5:80:BF:50:A2:58:77:B3:00:78:3A:E6:FC
Certificate issuer:       /CN=6A7229281936FDF6807C956949B8906409365025
Certificate serial:       1B2748CAE786564BFE7CF3CBD70553AA832F1B6F
Authority key identifier: 6A:72:29:28:19:36:FD:F6:80:7C:95:69:49:B8:90:64:09:36:50:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7229281936FDF6807C956949B8906409365025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/34352e3136382e34302e302f32322d3332203d3e20323638303238.roa
Signing time:             Mon 08 Dec 2025 19:56:00 +0000
ROA not before:           Mon 08 Dec 2025 19:51:00 +0000
ROA not after:            Mon 07 Dec 2026 19:56:00 +0000
asID:                     268028
IP address blocks:        45.168.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/6A7229281936FDF6807C956949B8906409365025.crl
                          rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/6A7229281936FDF6807C956949B8906409365025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7229281936FDF6807C956949B8906409365025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 06:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:27:48:ca:e7:86:56:4b:fe:7c:f3:cb:d7:05:53:aa:83:2f:1b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7229281936FDF6807C956949B8906409365025
        Validity
            Not Before: Dec  8 19:51:00 2025 GMT
            Not After : Dec  7 19:56:00 2026 GMT
        Subject: CN=6D6C089D71490AA580BF50A25877B300783AE6FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:08:c9:98:ec:3f:a1:aa:25:76:57:36:77:
                    1f:6c:de:d9:80:47:ca:d0:0a:c3:14:5f:14:dc:9e:
                    90:6e:cf:c8:fd:08:a9:2d:e6:c4:97:be:a5:51:46:
                    03:73:da:09:89:ce:ae:b4:1f:c5:5b:ab:cd:f8:5f:
                    2e:67:05:64:ef:2c:04:1e:c8:a3:8c:17:80:bc:72:
                    e1:2a:c9:e9:40:ba:08:cf:06:5d:be:c9:af:43:cc:
                    16:19:9c:20:71:66:6d:a6:8d:e6:6a:b7:ff:5b:6a:
                    11:82:2c:b5:61:ae:0d:7a:0b:a6:1f:65:2d:22:c0:
                    56:68:fe:c9:2f:00:ee:e8:f8:50:08:31:31:6a:21:
                    6c:13:6e:a5:83:94:d6:0b:3c:21:9c:39:40:f8:cf:
                    b6:b2:0d:06:cf:3e:21:10:07:ae:35:4b:26:15:3d:
                    78:c8:d9:49:f7:5f:ee:22:f5:ac:6a:fa:bd:15:01:
                    cc:6d:b1:8b:3d:0d:68:1b:c0:e1:b0:d3:7b:4c:68:
                    ae:9c:02:26:e2:91:bb:48:a1:50:2c:ad:20:31:49:
                    8f:06:33:f7:2c:6d:6d:df:09:25:2d:a1:b6:67:cc:
                    c4:cb:27:05:f6:35:6f:a2:8b:dd:f3:a2:a3:89:39:
                    e9:1c:ed:e2:ad:c3:4d:a7:dd:50:54:2a:6a:d2:79:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6C:08:9D:71:49:0A:A5:80:BF:50:A2:58:77:B3:00:78:3A:E6:FC
            X509v3 Authority Key Identifier:
                keyid:6A:72:29:28:19:36:FD:F6:80:7C:95:69:49:B8:90:64:09:36:50:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/6A7229281936FDF6807C956949B8906409365025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7229281936FDF6807C956949B8906409365025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/34352e3136382e34302e302f32322d3332203d3e20323638303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:82:0c:eb:9e:4f:94:b0:87:22:bf:e0:4f:ff:d6:cb:ba:26:
         ab:72:ef:ba:b4:b4:33:57:0b:c3:9a:d9:7f:03:fc:aa:cb:e6:
         4d:75:3b:14:8b:a1:85:c0:b3:ea:23:a9:cd:88:d8:e0:e1:e6:
         57:06:c8:59:14:f4:da:f7:2f:98:5a:09:ee:5d:82:37:60:06:
         49:96:05:34:bd:54:ec:e8:6a:b6:15:a0:ac:0f:1c:68:db:e4:
         ff:24:f4:ba:3c:a1:ac:f8:48:e4:35:90:c3:2e:20:eb:34:9b:
         76:29:50:ce:5d:31:4a:48:47:a9:85:27:7a:6b:0d:37:13:21:
         bc:ca:7a:96:fc:74:69:f5:87:ef:b8:14:b3:5e:2b:b6:d8:42:
         fd:71:b9:98:f5:ec:8c:2f:e6:ed:d5:7b:24:bb:bd:8c:e7:72:
         11:e8:80:bb:1a:3c:8c:22:a7:bd:1b:10:29:a8:11:56:33:10:
         79:e8:77:fa:5a:04:af:74:4e:92:e6:40:01:73:d6:1d:b8:65:
         28:2b:eb:17:0c:e3:bd:da:60:46:09:66:b9:5c:26:64:7b:73:
         f9:2c:3e:ef:d6:db:a7:35:73:f1:9c:ae:8e:bd:c2:d1:c8:8f:
         ea:46:17:55:96:73:3a:23:d2:af:14:3d:e8:04:95:e3:fb:61:
         7a:a4:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:07:36 2025 by rpki-client