This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134342e302f32342d3234203d3e20323638353638.roa
File:                     34352e3136332e3134342e302f32342d3234203d3e20323638353638.roa (raw, json)
Hash identifier:          im40Vu9TTrylfKVYAvbLgG2isrrDEExLMv8jlLqOqT8=
Subject key identifier:   25:12:7B:16:F4:C5:C8:72:5D:70:0B:FB:BE:43:F4:58:F6:8D:E8:6A
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       7A77F32A431FA8D854AD9FA9C1C2085AF481D49B
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134342e302f32342d3234203d3e20323638353638.roa
Signing time:             Mon 15 Dec 2025 12:56:01 +0000
ROA not before:           Mon 15 Dec 2025 12:51:01 +0000
ROA not after:            Mon 14 Dec 2026 12:56:01 +0000
asID:                     268568
IP address blocks:        45.163.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:77:f3:2a:43:1f:a8:d8:54:ad:9f:a9:c1:c2:08:5a:f4:81:d4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:01 2025 GMT
            Not After : Dec 14 12:56:01 2026 GMT
        Subject: CN=3082010A02820101009CAC186DC659423996BA53CA12204CE0B2816BB004D3CFFAD10D7C94A44B0953E668B79FE9BD6F2C23E968A7983A2755314F438E8E7DF59A633AF6D4D9B3010AB4683874EC1B6BF1382D6C720AFED78C6C4C22F3EB8B1275D1267910730F24B2D3F53DA542DE6C3A50AE49FADCCF14403575374039A55CAF11FFCC168B3C302C01FF511328C58173F58D025B01E7EC450FAD158D3022296CD55FE6E48E0DA861C22A94F714C41473AC842931A3BB7A44A58803BDDC15B47C739EC464CE80A2F6B3A548850A22C40C8F5885E72B962D166049C112EE69921D646981A1EB3C6395E6EAF0A4960F6BD247872D92E7E5819876C2E08BCEFF61DDE1AC314A89B1D7F10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:18:6d:c6:59:42:39:96:ba:53:ca:12:20:
                    4c:e0:b2:81:6b:b0:04:d3:cf:fa:d1:0d:7c:94:a4:
                    4b:09:53:e6:68:b7:9f:e9:bd:6f:2c:23:e9:68:a7:
                    98:3a:27:55:31:4f:43:8e:8e:7d:f5:9a:63:3a:f6:
                    d4:d9:b3:01:0a:b4:68:38:74:ec:1b:6b:f1:38:2d:
                    6c:72:0a:fe:d7:8c:6c:4c:22:f3:eb:8b:12:75:d1:
                    26:79:10:73:0f:24:b2:d3:f5:3d:a5:42:de:6c:3a:
                    50:ae:49:fa:dc:cf:14:40:35:75:37:40:39:a5:5c:
                    af:11:ff:cc:16:8b:3c:30:2c:01:ff:51:13:28:c5:
                    81:73:f5:8d:02:5b:01:e7:ec:45:0f:ad:15:8d:30:
                    22:29:6c:d5:5f:e6:e4:8e:0d:a8:61:c2:2a:94:f7:
                    14:c4:14:73:ac:84:29:31:a3:bb:7a:44:a5:88:03:
                    bd:dc:15:b4:7c:73:9e:c4:64:ce:80:a2:f6:b3:a5:
                    48:85:0a:22:c4:0c:8f:58:85:e7:2b:96:2d:16:60:
                    49:c1:12:ee:69:92:1d:64:69:81:a1:eb:3c:63:95:
                    e6:ea:f0:a4:96:0f:6b:d2:47:87:2d:92:e7:e5:81:
                    98:76:c2:e0:8b:ce:ff:61:dd:e1:ac:31:4a:89:b1:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:12:7B:16:F4:C5:C8:72:5D:70:0B:FB:BE:43:F4:58:F6:8D:E8:6A
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134342e302f32342d3234203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:08:0e:cf:18:c1:a8:16:84:7b:06:03:aa:02:ba:92:25:89:
         71:2b:02:04:13:23:de:0c:37:73:1b:3c:44:8b:27:93:20:2e:
         48:e1:5b:90:91:7d:5d:29:b6:f1:2f:2c:31:d9:e9:11:1b:4d:
         ec:e4:c5:2f:d4:28:c3:d5:5a:83:11:17:0d:c4:8f:fc:d3:22:
         c6:96:68:89:a3:48:99:e6:06:f5:0d:ee:a4:a9:2d:d1:9a:7b:
         eb:d0:95:d1:02:53:14:19:c8:5c:5b:0d:12:22:31:dd:a2:8b:
         8f:7a:76:82:20:77:a4:fe:1d:d1:e2:e4:18:6b:47:84:41:7d:
         f3:93:bb:a0:fd:5a:83:cc:b4:cf:2f:b3:7a:7f:09:f9:0c:da:
         1c:ce:30:a6:2c:ea:06:00:c8:19:85:f2:20:ee:e7:b0:12:06:
         e5:c9:be:96:a5:6b:f5:d5:4c:ad:3d:5f:b0:92:38:ac:11:ba:
         9b:d0:16:35:0a:17:1d:fe:36:58:6d:70:50:28:54:15:a8:da:
         19:5b:4f:80:80:76:c8:fa:9e:55:b0:c3:7e:e1:0f:92:89:61:
         48:45:d4:06:40:40:3c:bb:11:14:c6:20:2e:60:74:e9:43:77:
         e6:73:3e:0a:3a:28:0f:13:a3:24:2e:86:f9:bf:6b:32:f0:87:
         b2:a2:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----