This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa
File:                     34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa (raw, json)
Hash identifier:          gSZITvsRgU3M+07oJk4DU6sZh57hz8Fs+Fh7wFnxuec=
Subject key identifier:   A5:F1:66:04:3C:66:0E:8C:B4:4C:05:0A:FB:07:79:40:12:D9:08:3B
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       70B5DBBFA5CCD61EADFF319F55C5BF3BF3A772C9
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa
Signing time:             Mon 15 Dec 2025 12:56:05 +0000
ROA not before:           Mon 15 Dec 2025 12:51:05 +0000
ROA not after:            Mon 14 Dec 2026 12:56:05 +0000
asID:                     268568
IP address blocks:        45.163.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b5:db:bf:a5:cc:d6:1e:ad:ff:31:9f:55:c5:bf:3b:f3:a7:72:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:05 2025 GMT
            Not After : Dec 14 12:56:05 2026 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:45:08:f9:ca:dc:bc:c9:d3:d4:57:03:d5:
                    43:be:d8:dc:7d:75:c4:1c:48:4a:97:1c:59:51:1f:
                    47:1a:4d:64:41:fe:2b:72:9c:59:de:07:11:09:51:
                    f7:e9:84:f0:11:c7:6d:28:ff:09:1a:83:55:3d:ce:
                    af:7d:a7:3f:a2:77:a5:68:9d:af:41:d8:f2:2c:6e:
                    77:55:36:18:0e:70:ec:90:7f:de:67:b8:f2:17:52:
                    44:7f:f4:28:70:28:73:a3:c9:87:89:16:51:94:37:
                    69:58:5e:25:46:61:50:d1:0d:79:75:90:02:02:34:
                    e3:ec:48:1c:c9:37:06:f9:4e:6a:98:f4:9b:00:07:
                    86:d7:54:07:bb:94:5f:4a:d2:b0:e4:7b:36:c0:20:
                    e4:58:6f:16:79:20:7c:59:84:ee:dd:9c:e4:29:b2:
                    05:80:9b:25:ef:f5:b6:4c:e0:7b:f7:cc:5a:56:54:
                    44:ed:65:e3:80:58:17:e4:4c:b2:53:d3:ae:38:22:
                    10:19:b0:18:ce:f0:d5:21:37:ea:8a:54:47:36:04:
                    4c:73:17:19:6a:04:66:5e:85:d8:d1:1d:09:50:c2:
                    02:11:e3:f3:8d:54:63:91:e1:6c:d7:70:fd:e7:c5:
                    55:b7:72:f1:d8:e2:12:07:6b:4f:81:cf:37:c0:e0:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F1:66:04:3C:66:0E:8C:B4:4C:05:0A:FB:07:79:40:12:D9:08:3B
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:0d:8d:48:05:1b:d7:13:b1:4b:5a:84:57:b6:f9:55:74:5d:
         68:22:14:42:2c:6e:f1:ea:66:b9:15:6d:64:0c:56:3c:77:14:
         5d:43:0a:4f:ef:65:13:0f:9b:3d:b1:65:01:02:b4:06:fc:54:
         70:e5:50:d3:1e:d9:58:63:d1:1d:f7:4b:9b:89:a3:99:5c:ba:
         22:dd:12:5b:94:f9:91:43:9e:fb:5d:7d:ef:c7:f5:32:07:ec:
         03:27:34:dd:9f:a4:0a:12:11:f4:a0:64:98:43:22:0d:25:6a:
         d0:43:7a:51:27:f4:95:d4:45:a2:01:37:8d:c5:90:69:f5:da:
         50:6d:55:28:59:2a:3c:02:2c:82:2d:51:b8:92:9f:9f:73:3b:
         93:30:81:d0:90:85:ca:51:09:59:31:5d:35:75:a8:af:20:68:
         9c:c6:9c:0b:75:63:f1:c3:b4:55:57:da:03:93:bd:4e:a6:7e:
         49:fd:86:0d:11:36:02:b6:6f:0f:7b:a0:54:42:b9:d8:b4:29:
         13:c9:cf:a5:d2:97:1f:4b:8d:bd:19:0a:04:79:45:16:b9:10:
         75:de:e4:db:32:5e:ce:e0:75:92:7e:a1:d5:5e:16:3f:8b:25:
         ff:e8:a3:d7:e2:a0:c1:3d:02:ab:38:58:4e:36:7c:b8:c5:e9:
         a7:54:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----