This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230302e302f32322d3232203d3e20323638313434.roa
File:                     34352e3136382e3230302e302f32322d3232203d3e20323638313434.roa (raw, json)
Hash identifier:          dRco9xWAS6YNiwkQursM7e/d/InrGrFTIbFcO0ma39U=
Subject key identifier:   97:FF:9F:35:A5:0B:AE:29:6E:07:DE:17:D0:88:79:19:18:EA:7D:3D
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       5C148FB6121EC0FC51E6E2ADB6E6DBC7A8F9188E
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230302e302f32322d3232203d3e20323638313434.roa
Signing time:             Mon 15 Dec 2025 12:56:04 +0000
ROA not before:           Mon 15 Dec 2025 12:51:04 +0000
ROA not after:            Mon 14 Dec 2026 12:56:04 +0000
asID:                     268144
IP address blocks:        45.168.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 19:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:14:8f:b6:12:1e:c0:fc:51:e6:e2:ad:b6:e6:db:c7:a8:f9:18:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:04 2025 GMT
            Not After : Dec 14 12:56:04 2026 GMT
        Subject: CN=3082010A0282010100BD7118C6BF5A669BD98E0BDCE6E65A0D73A3CED17A31D156F99EEE5866092381754A52D4ECF4FB219E2C87DA00D26B34920C093A4E71D16A7BDCA1206B52752CABBCB278A8CA6B6AD64A184F2E4C81B621BEE38C159987AC4381641949C40E9EB22D612D3200AC1E55B65B525DD5F1BD4589851FA5C08058E102AD1E7CC092D621D93B526C03513CF8C39121C3380A278897E882CBA056F65DB291BD9960F535786B0887F8F75A920C68BF76D00D9A131743808B7B572FF43CCEA7D209DEC8B8AE4AF7222D350F60BA81596B5220E6D0FACE6CCE91777BB16DCE27CAEACC8B0B20CD0ED831D177CA3F9C01C12DF562F8C584DA8AA14DD4EFD899F595C202AD090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:18:c6:bf:5a:66:9b:d9:8e:0b:dc:e6:e6:
                    5a:0d:73:a3:ce:d1:7a:31:d1:56:f9:9e:ee:58:66:
                    09:23:81:75:4a:52:d4:ec:f4:fb:21:9e:2c:87:da:
                    00:d2:6b:34:92:0c:09:3a:4e:71:d1:6a:7b:dc:a1:
                    20:6b:52:75:2c:ab:bc:b2:78:a8:ca:6b:6a:d6:4a:
                    18:4f:2e:4c:81:b6:21:be:e3:8c:15:99:87:ac:43:
                    81:64:19:49:c4:0e:9e:b2:2d:61:2d:32:00:ac:1e:
                    55:b6:5b:52:5d:d5:f1:bd:45:89:85:1f:a5:c0:80:
                    58:e1:02:ad:1e:7c:c0:92:d6:21:d9:3b:52:6c:03:
                    51:3c:f8:c3:91:21:c3:38:0a:27:88:97:e8:82:cb:
                    a0:56:f6:5d:b2:91:bd:99:60:f5:35:78:6b:08:87:
                    f8:f7:5a:92:0c:68:bf:76:d0:0d:9a:13:17:43:80:
                    8b:7b:57:2f:f4:3c:ce:a7:d2:09:de:c8:b8:ae:4a:
                    f7:22:2d:35:0f:60:ba:81:59:6b:52:20:e6:d0:fa:
                    ce:6c:ce:91:77:7b:b1:6d:ce:27:ca:ea:cc:8b:0b:
                    20:cd:0e:d8:31:d1:77:ca:3f:9c:01:c1:2d:f5:62:
                    f8:c5:84:da:8a:a1:4d:d4:ef:d8:99:f5:95:c2:02:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FF:9F:35:A5:0B:AE:29:6E:07:DE:17:D0:88:79:19:18:EA:7D:3D
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230302e302f32322d3232203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:85:a2:19:dc:71:cc:7a:6e:52:28:96:4a:ae:56:65:25:86:
         12:b7:3b:a7:89:a4:48:a4:a8:be:79:d0:1f:f6:2e:53:22:14:
         00:de:d8:e8:3a:ad:f7:a2:17:36:b7:6e:33:6f:b3:22:ec:e7:
         12:27:52:0b:67:5e:77:d6:57:5d:8a:55:65:1c:8a:a4:28:97:
         85:cb:7e:f0:2e:b6:98:f8:33:2a:02:12:1c:52:9f:ef:b5:31:
         9f:c1:7e:9f:56:cd:8b:94:9d:06:ef:02:bf:c5:02:8e:c9:c8:
         b1:8f:c4:03:ee:36:79:dd:bd:a8:3e:e8:4b:b8:51:1e:de:44:
         e1:bf:3a:cb:88:ef:5b:5d:9f:38:75:5f:5a:d5:91:86:4c:92:
         3f:f3:77:09:19:18:a8:89:e3:2b:17:1b:bd:8a:b1:30:6d:42:
         2b:8b:75:63:cb:76:56:b4:f6:f1:59:9c:5c:8d:51:bb:86:c4:
         ac:ff:a5:26:a0:d6:cc:40:d4:c0:c5:19:1c:af:2c:ab:4e:5c:
         fc:4c:d3:02:be:90:eb:fb:76:f3:c4:04:e8:04:34:57:2b:d7:
         85:d7:64:21:7c:66:9e:27:25:fa:1e:c9:b9:2f:db:cc:a2:43:
         25:45:60:35:1b:b1:06:e7:f5:63:e4:a9:87:be:17:6a:50:ed:
         ce:d1:40:37
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUXBSPthIewPxR5uKttubbx6j5GI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4OTVDODJGNTczQkUwRTRERjM4NDlBMTIxRDg3ODNB
QzZBRTIyQzAeFw0yNTEyMTUxMjUxMDRaFw0yNjEyMTQxMjU2MDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQ3MTE4QzZCRjVBNjY5QkQ5
OEUwQkRDRTZFNjVBMEQ3M0EzQ0VEMTdBMzFEMTU2Rjk5RUVFNTg2NjA5MjM4MTc1
NEE1MkQ0RUNGNEZCMjE5RTJDODdEQTAwRDI2QjM0OTIwQzA5M0E0RTcxRDE2QTdC
RENBMTIwNkI1Mjc1MkNBQkJDQjI3OEE4Q0E2QjZBRDY0QTE4NEYyRTRDODFCNjIx
QkVFMzhDMTU5OTg3QUM0MzgxNjQxOTQ5QzQwRTlFQjIyRDYxMkQzMjAwQUMxRTU1
QjY1QjUyNURENUYxQkQ0NTg5ODUxRkE1QzA4MDU4RTEwMkFEMUU3Q0MwOTJENjIx
RDkzQjUyNkMwMzUxM0NGOEMzOTEyMUMzMzgwQTI3ODg5N0U4ODJDQkEwNTZGNjVE
QjI5MUJEOTk2MEY1MzU3ODZCMDg4N0Y4Rjc1QTkyMEM2OEJGNzZEMDBEOUExMzE3
NDM4MDhCN0I1NzJGRjQzQ0NFQTdEMjA5REVDOEI4QUU0QUY3MjIyRDM1MEY2MEJB
ODE1OTZCNTIyMEU2RDBGQUNFNkNDRTkxNzc3QkIxNkRDRTI3Q0FFQUNDOEIwQjIw
Q0QwRUQ4MzFEMTc3Q0EzRjlDMDFDMTJERjU2MkY4QzU4NERBOEFBMTRERDRFRkQ4
OTlGNTk1QzIwMkFEMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvXEYxr9aZpvZjgvc5uZaDXOjztF6MdFW+Z7uWGYJI4F1SlLU7PT7
IZ4sh9oA0ms0kgwJOk5x0Wp73KEga1J1LKu8snioymtq1koYTy5MgbYhvuOMFZmH
rEOBZBlJxA6esi1hLTIArB5VtltSXdXxvUWJhR+lwIBY4QKtHnzAktYh2TtSbANR
PPjDkSHDOAoniJfogsugVvZdspG9mWD1NXhrCIf491qSDGi/dtANmhMXQ4CLe1cv
9DzOp9IJ3si4rkr3Ii01D2C6gVlrUiDm0PrObM6Rd3uxbc4nyurMiwsgzQ7YMdF3
yj+cAcEt9WL4xYTaiqFN1O/YmfWVwgKtCQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJf/nzWlC64pbgfeF9CIeRkY6n09MB8GA1UdIwQYMBaAFP+JXIL1c74OTfOEmhId
h4OsauIsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlIanRnOWR2RFU3U0hS
aUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzEvRkY4OTVDODJGNTczQkUw
RTRERjM4NDlBMTIxRDg3ODNBQzZBRTIyQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GRjg5NUM4MkY1NzNCRTBFNERGMzg0OUExMjFEODc4M0FDNkFF
MjJDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SGp0ZzlkdkRVN1NIUmlLdG91
N3M4czl5YkNWTk5pM0p0Q3hXQ0d6QVl6bi8xLzM0MzUyZTMxMzYzODJlMzIzMDMw
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4MzEzNDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LajIMA0GCSqGSIb3DQEBCwUAA4IBAQAghaIZ3HHMem5SKJZKrlZlJYYStzuniaRI
pKi+edAf9i5TIhQA3tjoOq33ohc2t24zb7Mi7OcSJ1ILZ1531lddilVlHIqkKJeF
y37wLraY+DMqAhIcUp/vtTGfwX6fVs2LlJ0G7wK/xQKOycixj8QD7jZ53b2oPuhL
uFEe3kThvzrLiO9bXZ84dV9a1ZGGTJI/83cJGRioieMrFxu9irEwbUIri3Vjy3ZW
tPbxWZxcjVG7hsSs/6UmoNbMQNTAxRkcryyrTlz8TNMCvpDr+3bzxAToBDRXK9eF
12QhfGaeJyX6Hsm5L9vMokMlRWA1G7EG5/Vj5KmHvhdqUO3O0UA3
-----END CERTIFICATE-----