This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa
File:                     34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa (raw, json)
Hash identifier:          9bw3nOSVujQTJio7RWcxOljnydXZwnc57eER4W41FTY=
Subject key identifier:   58:76:1F:2A:C3:38:5C:09:12:27:91:B8:37:75:29:59:A9:7E:5C:C6
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       19EDF2279AE87D1057A93C0744C218E4FE6D00F7
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa
Signing time:             Mon 15 Dec 2025 12:56:01 +0000
ROA not before:           Mon 15 Dec 2025 12:51:01 +0000
ROA not after:            Mon 14 Dec 2026 12:56:01 +0000
asID:                     268144
IP address blocks:        45.168.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 03:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ed:f2:27:9a:e8:7d:10:57:a9:3c:07:44:c2:18:e4:fe:6d:00:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:01 2025 GMT
            Not After : Dec 14 12:56:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:41:e8:93:b6:15:3e:d2:5e:71:cc:fd:94:
                    d4:d1:f8:6a:30:99:66:77:8a:93:3d:72:d4:23:24:
                    11:a2:4b:32:fe:2a:c7:40:72:aa:60:a8:01:82:8e:
                    41:d5:49:d2:9c:c5:74:a5:e0:f5:1a:93:49:e3:ca:
                    9a:3f:23:8f:6e:97:b7:0a:78:9a:db:91:ed:7a:95:
                    13:52:29:9e:43:44:cc:6e:87:a5:7d:40:45:31:47:
                    43:8f:51:1e:a5:2d:2c:a7:84:a9:a2:eb:b5:1d:46:
                    a1:b7:fb:de:d9:1c:df:33:92:1e:27:2c:41:8b:46:
                    c1:ce:78:ce:eb:29:12:97:49:56:cb:10:ec:c9:ee:
                    59:a6:da:05:bc:16:a2:fe:52:de:5f:1c:d1:d6:1f:
                    38:a1:ec:10:44:c4:a1:6a:77:6d:0f:25:64:6c:09:
                    94:f9:28:65:35:c4:91:ca:11:78:be:de:21:4c:c1:
                    8e:84:f4:6d:f4:5e:b2:cf:7c:dd:c4:20:f5:d1:ee:
                    90:27:12:a4:88:4e:a0:84:43:b0:7f:94:91:82:ea:
                    ef:8c:9d:23:cc:b8:38:64:df:10:80:b4:92:41:37:
                    92:e3:22:36:f6:2f:89:9f:79:22:2c:28:04:da:b2:
                    8b:bc:2c:70:0e:22:05:ea:e9:12:b7:eb:31:91:1c:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:76:1F:2A:C3:38:5C:09:12:27:91:B8:37:75:29:59:A9:7E:5C:C6
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:58:4f:be:57:e0:9e:a7:dc:b3:fd:a6:e6:fb:16:85:22:06:
         26:ca:7c:61:5b:c6:c8:89:65:ac:f5:a2:1f:f8:e4:54:9f:b2:
         a2:a7:08:4d:cb:b1:bc:ec:83:fb:80:0b:af:b0:5e:9c:ab:5e:
         e1:4e:a4:f8:d8:76:0b:e4:81:e5:12:1a:98:f8:e2:84:b0:ca:
         55:99:d9:59:4f:27:27:34:89:f5:7d:f7:d3:6e:f6:ed:94:1d:
         36:5c:e7:1b:b1:41:a2:0f:91:b2:38:31:23:23:f9:24:31:0a:
         44:50:7c:f4:d5:ff:7a:41:93:26:b3:e8:75:f6:b7:d1:11:ca:
         01:52:28:20:c6:70:27:ae:4e:14:2d:03:01:a7:80:d7:ee:a1:
         f6:b7:c2:07:0d:e5:40:ce:e3:7f:69:cb:2a:1c:e6:fb:46:02:
         94:d2:c6:62:14:e2:da:64:59:f0:5d:10:a3:69:f7:5b:70:84:
         bf:3c:ee:2d:f8:e1:8e:2a:92:48:05:a1:82:0d:b0:e0:b4:cb:
         93:43:d8:16:13:14:24:ab:60:c7:c4:60:d3:1c:64:0d:22:55:
         d4:49:fb:f8:18:c8:5b:5c:d5:e0:2d:60:98:3d:69:94:9b:35:
         ff:6c:76:c5:08:5a:c2:4d:58:78:fe:72:34:0a:df:6f:59:6a:
         55:88:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:07:43 2025 by rpki-client