This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134372e302f32342d3234203d3e20323638353638.roa
File:                     34352e3136332e3134372e302f32342d3234203d3e20323638353638.roa (raw, json)
Hash identifier:          /v8acorAdNJWKMyHON1TrLhRmRzSmZOQ00aiFfiGakM=
Subject key identifier:   01:14:CF:0A:5A:BA:71:3A:D3:EC:46:19:8A:FF:2B:C8:AB:F3:F4:7C
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       404E9AE2E7CFACF6CD1AB2463C5E1AEB57A3C05B
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134372e302f32342d3234203d3e20323638353638.roa
Signing time:             Mon 15 Dec 2025 12:56:00 +0000
ROA not before:           Mon 15 Dec 2025 12:51:00 +0000
ROA not after:            Mon 14 Dec 2026 12:56:00 +0000
asID:                     268568
IP address blocks:        45.163.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4e:9a:e2:e7:cf:ac:f6:cd:1a:b2:46:3c:5e:1a:eb:57:a3:c0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:00 2025 GMT
            Not After : Dec 14 12:56:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c7:78:50:d4:58:8b:b5:ec:bb:34:59:07:14:
                    86:2c:4f:74:1e:62:5e:6b:37:9d:f7:9a:41:dd:1c:
                    24:3d:9d:72:9e:0c:85:ac:f7:dd:05:94:2e:3f:5e:
                    ef:62:a8:d6:f0:ac:b0:6a:3b:6e:d7:26:c3:33:9b:
                    55:28:15:23:1e:11:ca:69:b6:0d:da:19:e8:1e:c9:
                    86:28:f7:87:c7:95:f6:ea:60:e0:fb:79:09:29:ab:
                    99:49:a3:76:d7:83:93:70:72:cd:80:3a:21:c8:f1:
                    88:95:2d:d1:d6:14:96:48:78:37:17:49:05:87:f5:
                    63:95:ce:d0:8e:20:56:db:81:37:7d:f5:59:e4:af:
                    9a:66:e3:33:3c:1f:39:50:a5:ef:72:06:3d:c9:be:
                    11:f1:ae:1f:e7:46:1c:8d:20:6f:66:c3:bf:57:c1:
                    c2:56:2c:9b:f1:dc:43:1d:c0:38:c1:a6:3e:a3:5e:
                    97:0c:fa:48:c8:93:a0:94:d7:bf:54:46:94:1b:13:
                    f2:1d:72:fe:35:82:85:f6:2a:b3:22:5d:65:fb:36:
                    d6:40:e8:1b:a2:ff:61:f3:5d:56:cf:97:8c:e9:05:
                    79:a0:c2:ce:4c:0a:ec:32:d1:dd:22:f5:f3:dc:17:
                    93:f9:14:8c:52:3d:2f:62:80:87:e1:81:d1:b4:ed:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:14:CF:0A:5A:BA:71:3A:D3:EC:46:19:8A:FF:2B:C8:AB:F3:F4:7C
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134372e302f32342d3234203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:08:01:33:a5:0f:5a:c3:1e:d2:68:00:4c:92:41:74:9e:28:
         2c:46:29:6c:fa:f0:60:72:ae:1b:38:7d:95:82:28:87:f4:72:
         0e:c6:8e:aa:f6:d1:35:6d:a0:e6:34:fb:63:6e:c8:35:4c:f1:
         0e:6b:6c:0b:ec:52:32:d3:46:48:90:e9:38:f3:33:bc:9b:88:
         75:b4:de:de:92:ec:db:4b:88:6f:42:16:32:4b:32:88:ca:83:
         cd:ff:cf:42:e7:d0:ee:36:c9:e9:4d:16:a9:db:10:26:df:5d:
         7b:82:bb:22:8a:f9:fc:d5:c3:b1:33:56:db:6d:a9:6a:f2:0e:
         fa:1a:06:17:24:f8:f9:52:b1:4d:9e:ff:fd:d5:ca:11:f5:ed:
         62:61:59:f8:59:80:b5:fe:2c:d0:7e:ca:0a:1a:1d:97:ae:01:
         fb:5d:85:99:54:45:dc:d8:77:fa:a8:86:58:f0:c5:46:24:09:
         69:e7:20:69:e3:5f:52:58:43:47:15:24:f9:26:20:bf:3b:d4:
         8f:1a:50:a6:ef:ef:af:a2:ed:12:27:b3:7b:45:bb:5c:e0:83:
         2f:f7:64:2c:15:c4:b2:85:b2:4f:01:be:29:a9:f1:f3:9e:20:
         68:35:5d:91:88:9b:93:6c:d4:c2:4f:a0:bb:d1:63:e6:52:d5:
         38:09:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----