This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/34352e3139302e3234342e302f32322d3332203d3e20323639363535.roa
File:                     34352e3139302e3234342e302f32322d3332203d3e20323639363535.roa (raw, json)
Hash identifier:          1r67+XbYM+3lcNZ57wTWwA3+bOzTcdDk4S8yXyAED9c=
Subject key identifier:   D7:91:6E:97:AB:E3:15:69:7D:04:E3:2B:34:23:DA:0A:E5:C7:03:FB
Certificate issuer:       /CN=B599F549032CE46FA7AE20E8E19156AF95C31ACF
Certificate serial:       59040D31EB749C22A77335AC93CE3CF032A72481
Authority key identifier: B5:99:F5:49:03:2C:E4:6F:A7:AE:20:E8:E1:91:56:AF:95:C3:1A:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B599F549032CE46FA7AE20E8E19156AF95C31ACF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/34352e3139302e3234342e302f32322d3332203d3e20323639363535.roa
Signing time:             Tue 06 Jan 2026 12:51:31 +0000
ROA not before:           Tue 06 Jan 2026 12:46:31 +0000
ROA not after:            Tue 05 Jan 2027 12:51:31 +0000
asID:                     269655
IP address blocks:        45.190.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/B599F549032CE46FA7AE20E8E19156AF95C31ACF.crl
                          rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/B599F549032CE46FA7AE20E8E19156AF95C31ACF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B599F549032CE46FA7AE20E8E19156AF95C31ACF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 17:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:04:0d:31:eb:74:9c:22:a7:73:35:ac:93:ce:3c:f0:32:a7:24:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B599F549032CE46FA7AE20E8E19156AF95C31ACF
        Validity
            Not Before: Jan  6 12:46:31 2026 GMT
            Not After : Jan  5 12:51:31 2027 GMT
        Subject: CN=D7916E97ABE315697D04E32B3423DA0AE5C703FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:ef:94:4f:fc:dd:b1:25:8b:b0:58:70:a1:
                    28:ac:bf:53:bd:e2:dc:c8:9f:f7:3d:b1:c0:11:51:
                    9a:77:0b:6f:be:94:b8:79:03:a8:0c:55:5c:b3:bd:
                    63:95:99:68:8c:47:69:18:1d:79:03:9e:cb:26:b1:
                    64:13:67:95:8f:2a:71:50:73:81:20:41:ad:81:35:
                    13:01:5d:a9:f6:f2:c8:e4:87:19:4c:01:06:ec:40:
                    42:e3:00:d4:c1:6e:7c:c1:f6:04:4a:6b:56:4e:59:
                    b1:bc:c4:80:63:4d:d6:fc:2d:d0:68:ec:b2:3a:bc:
                    b4:0a:ad:7d:81:cb:19:46:e3:eb:88:c4:01:4f:97:
                    25:4a:82:e9:c6:70:71:ad:ee:03:fc:50:29:d0:4b:
                    6d:74:e1:00:3b:63:6f:67:2e:24:3d:de:c6:dd:0a:
                    08:b7:b2:d6:21:38:5e:fa:75:f2:30:9f:2c:8a:a8:
                    dd:3e:3c:ff:8e:21:bc:c8:dd:d6:06:2b:f6:51:14:
                    87:16:80:32:71:8c:f2:c5:9a:01:0e:83:76:8d:6b:
                    61:bb:88:d2:55:8e:a7:c9:13:f3:83:b1:fd:90:4e:
                    0e:a0:31:20:c6:4c:c3:c3:67:9f:87:19:11:93:a0:
                    36:51:d7:0c:3a:ed:09:b4:04:93:97:df:96:fc:8d:
                    f9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:91:6E:97:AB:E3:15:69:7D:04:E3:2B:34:23:DA:0A:E5:C7:03:FB
            X509v3 Authority Key Identifier:
                keyid:B5:99:F5:49:03:2C:E4:6F:A7:AE:20:E8:E1:91:56:AF:95:C3:1A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/B599F549032CE46FA7AE20E8E19156AF95C31ACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B599F549032CE46FA7AE20E8E19156AF95C31ACF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/34352e3139302e3234342e302f32322d3332203d3e20323639363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:a2:6d:88:f4:c1:f4:cd:4b:ce:e9:cb:d6:bf:07:6d:16:61:
         2f:95:f3:81:c5:3f:93:85:67:f6:4e:27:35:3c:87:53:c6:25:
         05:6f:25:77:9b:5c:96:0e:94:3f:26:31:3a:59:07:4c:41:17:
         02:1e:f2:c7:a7:94:03:23:f7:ac:42:34:64:f5:03:8b:77:d2:
         c3:27:12:62:2c:fa:de:84:a1:13:6c:dc:3d:a4:cb:4b:5d:14:
         e4:8a:f8:af:ce:de:f6:b6:41:d3:af:09:94:0c:81:49:fe:e8:
         1f:d3:4c:87:61:82:74:d2:4c:bd:93:0c:92:e3:97:78:34:72:
         3a:5d:9a:dd:da:db:48:55:4c:0b:9d:36:ed:1b:df:13:19:56:
         bb:a4:64:af:24:16:90:5f:02:45:f4:0a:bb:02:07:78:27:d4:
         a5:6f:bb:f5:db:22:fd:a5:48:e3:6d:f7:e5:e9:e3:b9:c2:bb:
         dd:61:b2:81:b1:b7:2b:24:03:1e:8a:da:41:4c:6c:69:56:b9:
         75:7d:98:26:bd:97:a7:7b:2c:31:be:c3:0d:4d:9e:90:a5:f7:
         3a:ed:bc:8a:e4:ea:d9:cd:93:b7:c0:60:9a:30:be:78:7f:07:
         5c:da:59:f9:5a:ec:7b:2f:fe:47:3c:60:18:20:0f:8c:75:a7:
         ad:22:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:20 2026 by rpki-client