This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e322e302f32342d3234203d3e20323838333438.roa
File:                     34352e3233392e322e302f32342d3234203d3e20323838333438.roa (raw, json)
Hash identifier:          SNdm+xTrERJRASdVVTfjgLDhBuzYN0HGIOjd6/NQFgY=
Subject key identifier:   25:D0:88:E1:E0:85:E9:4E:88:36:E1:A1:7A:1B:1E:7F:80:D0:63:9F
Certificate issuer:       /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Certificate serial:       371A4444D6F2316298C7E9FD8E361B670F162B1A
Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e322e302f32342d3234203d3e20323838333438.roa
Signing time:             Fri 12 Dec 2025 15:03:46 +0000
ROA not before:           Fri 12 Dec 2025 14:58:46 +0000
ROA not after:            Fri 11 Dec 2026 15:03:46 +0000
asID:                     288348
IP address blocks:        45.239.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl
                          rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 14:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1a:44:44:d6:f2:31:62:98:c7:e9:fd:8e:36:1b:67:0f:16:2b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
        Validity
            Not Before: Dec 12 14:58:46 2025 GMT
            Not After : Dec 11 15:03:46 2026 GMT
        Subject: CN=25D088E1E085E94E8836E1A17A1B1E7F80D0639F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:c4:fd:c5:e2:b3:d3:e6:d0:f7:b6:c7:6d:
                    fc:a3:21:76:ac:70:6e:cc:d6:79:64:f8:96:08:42:
                    38:70:2c:93:ed:cf:62:82:14:cd:b3:e7:8c:23:b5:
                    c7:88:19:9a:1e:92:82:06:3c:dd:6e:a8:cd:64:14:
                    9d:fb:ab:4a:74:a5:b7:40:e8:6e:da:a7:de:bb:e8:
                    c5:2a:3d:c2:f5:c8:54:a5:34:9c:a5:53:a4:93:4a:
                    11:94:25:11:26:a0:2a:27:be:51:3f:db:9f:4b:ea:
                    a7:54:61:ca:6a:c0:bd:2d:a4:7c:d6:23:a9:20:68:
                    84:9a:0e:a8:29:4f:f5:0f:f2:95:be:91:f3:7e:a2:
                    b7:a8:3c:88:69:9a:29:29:89:7a:de:24:fe:23:f5:
                    ff:cc:f4:5b:22:b9:39:a2:ef:08:57:a4:99:b5:d8:
                    cd:c6:40:67:35:fb:78:f8:63:28:ce:5c:8b:aa:3b:
                    bd:2e:09:21:97:36:e3:d9:de:0c:91:f0:57:07:49:
                    9a:99:bf:f2:08:21:14:60:8d:aa:df:2d:c0:ab:d6:
                    b4:ab:93:f0:b2:8e:d8:07:f2:9a:f4:12:4a:12:8a:
                    9f:80:99:41:4b:2a:a6:11:59:b1:48:e4:44:72:47:
                    61:a1:7d:83:57:a1:f1:7b:9b:9c:10:b3:57:68:13:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D0:88:E1:E0:85:E9:4E:88:36:E1:A1:7A:1B:1E:7F:80:D0:63:9F
            X509v3 Authority Key Identifier:
                keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e322e302f32342d3234203d3e20323838333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:91:ae:2b:66:f3:f9:f0:b8:f5:9e:2d:d2:e0:41:be:1e:
         93:f8:1d:9e:a1:de:b6:bb:8b:e2:ac:0a:c7:6a:35:00:c2:d0:
         f1:94:95:46:87:a8:3a:d9:41:ae:cf:7f:a4:24:61:3b:83:00:
         97:c2:9a:62:80:4b:86:47:9d:63:c2:21:b6:3f:56:c3:61:d0:
         17:37:26:b7:3e:15:d6:de:1f:ce:a6:ed:01:bb:2d:4e:80:bf:
         08:8d:d0:c4:4b:e6:b7:06:8a:fe:1d:4f:b2:67:ea:5f:24:db:
         0c:10:a9:c3:5a:c1:02:ef:72:75:b4:d6:cd:f4:f2:ac:5b:1a:
         04:7b:1c:10:10:cd:ae:07:3f:57:79:1f:10:8f:dd:89:0b:8e:
         1f:b3:c2:a3:3a:45:0f:27:62:89:e2:22:57:c7:ca:be:c7:de:
         98:75:03:34:80:0b:e9:2d:cc:fb:a9:96:97:d4:ef:30:26:2c:
         ab:d3:a7:08:00:2d:99:18:17:7f:55:1d:d0:d6:81:1a:21:77:
         ab:84:a9:cb:fd:d8:46:1e:72:ba:17:dc:f7:66:42:84:bb:68:
         c0:a9:8c:7e:36:48:28:75:0a:56:5f:25:6e:95:0b:0d:db:55:
         9a:3c:d7:0a:f0:dc:14:f2:04:67:3f:93:58:91:01:c2:09:bd:
         11:19:75:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:05:10 2025 by rpki-client