This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3231312e302f32342d3234203d3e20323636323638.roa
File:                     34352e36352e3231312e302f32342d3234203d3e20323636323638.roa (raw, json)
Hash identifier:          HRaN/s2H6zsbP9PT9JGp7cg+OnQoHbvne2s6wRBbAfg=
Subject key identifier:   6B:65:9D:4F:7B:34:44:90:E3:BD:C3:12:5B:42:26:20:70:61:C6:6E
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       5771C940C35EFE8F8AA63013D8252DAFB7013793
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3231312e302f32342d3234203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:40 +0000
ROA not before:           Mon 22 Dec 2025 19:11:40 +0000
ROA not after:            Mon 21 Dec 2026 19:16:40 +0000
asID:                     266268
IP address blocks:        45.65.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 22:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:71:c9:40:c3:5e:fe:8f:8a:a6:30:13:d8:25:2d:af:b7:01:37:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:40 2025 GMT
            Not After : Dec 21 19:16:40 2026 GMT
        Subject: CN=6B659D4F7B344490E3BDC3125B4226207061C66E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:a5:fd:0c:c6:db:9e:1a:8f:3d:cf:47:2f:
                    53:87:1c:88:36:e8:02:99:58:f6:97:46:3b:9e:9b:
                    4b:d8:20:ec:65:03:f8:69:5f:b7:e7:23:2c:b4:a4:
                    95:58:22:b6:fd:eb:56:8d:a6:4f:fd:ab:ed:14:16:
                    57:ac:db:58:ae:57:7c:0e:23:b9:0f:e9:1d:4e:fd:
                    a9:5e:b8:b7:51:28:ab:48:2c:d4:05:53:f9:5b:b3:
                    aa:13:8f:55:cc:3a:5c:7c:54:42:f1:98:66:48:f4:
                    3c:94:d6:21:c8:b8:62:39:3f:05:9a:80:1e:c4:7e:
                    eb:94:8e:9b:2f:cd:e0:a8:0c:47:b5:0d:47:93:35:
                    7a:01:f8:53:f7:3e:f0:6b:95:09:f4:cf:1f:bd:3e:
                    ff:63:6a:57:e8:a3:cb:0d:7b:88:4c:f1:f6:1c:d7:
                    b8:13:37:3f:bd:95:e5:a5:f5:56:7f:6b:f8:69:73:
                    82:89:2f:e7:1e:0e:e5:24:0e:5c:e9:a0:49:97:db:
                    79:6a:d6:26:2b:89:00:5d:d4:a5:8f:5f:f9:43:38:
                    1d:e5:88:c2:f5:26:f8:01:5e:23:c0:7a:20:90:e6:
                    32:58:93:aa:62:de:e8:e3:3c:6e:b4:02:8e:3f:0b:
                    c8:5b:2a:c9:69:3b:c1:58:9a:8d:c7:9a:54:49:0d:
                    a4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:65:9D:4F:7B:34:44:90:E3:BD:C3:12:5B:42:26:20:70:61:C6:6E
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3231312e302f32342d3234203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:f1:eb:46:b8:fe:82:54:be:e8:9a:09:71:d1:1f:ac:b8:25:
         fd:74:f4:6b:16:14:cd:77:42:83:df:20:5f:99:89:b0:63:29:
         fc:9b:58:40:aa:87:f5:11:d8:f0:27:15:90:0d:16:e4:8b:4c:
         d8:49:27:c1:47:d6:f0:4e:c7:76:7c:6f:b6:41:a3:31:71:95:
         b4:71:66:50:4e:7d:d8:20:03:2a:c3:d6:6d:13:a5:04:d1:c2:
         39:10:e5:ee:9f:87:e3:3a:f9:9d:30:21:9a:72:a8:5e:b1:d9:
         c7:12:f6:60:39:3e:10:38:8d:a6:b2:8b:04:a2:04:a0:b3:03:
         56:26:f6:6e:fc:09:0a:27:f8:29:4a:aa:51:76:1b:cc:97:b8:
         68:1a:92:72:29:ad:12:c2:73:95:ed:1b:33:35:46:67:a1:31:
         79:11:20:1f:90:af:a0:cd:fb:b5:61:a1:ee:67:58:2b:1c:b0:
         c2:81:33:06:9d:85:6a:3b:43:ba:4d:aa:77:03:2b:91:5c:32:
         5a:9a:f4:be:16:a4:86:e6:1d:64:e4:61:de:58:6f:90:c5:1a:
         bf:9a:ff:f5:01:ac:be:45:e4:27:73:07:13:11:2e:e2:fa:95:
         a4:78:bf:9a:a3:75:36:e2:2c:36:c8:ec:e5:2e:fe:61:62:72:
         43:6e:9b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:50:00 2025 by rpki-client