This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa
File:                     34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa (raw, json)
Hash identifier:          WpsG3KArExUdoPX1+EU4Oa+2b5UCKUo9Pud77RA2n60=
Subject key identifier:   E0:FD:CA:B9:B4:57:65:1A:07:46:73:1E:32:C9:9E:A5:DB:0C:DB:42
Certificate issuer:       /CN=027E5989BE9C86C746877442F729BCCF804DAC18
Certificate serial:       20FD19A4013F0C570AE6D3852404B4703FDC5D9B
Authority key identifier: 02:7E:59:89:BE:9C:86:C7:46:87:74:42:F7:29:BC:CF:80:4D:AC:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa
Signing time:             Thu 18 Dec 2025 12:36:00 +0000
ROA not before:           Thu 18 Dec 2025 12:31:00 +0000
ROA not after:            Thu 17 Dec 2026 12:36:00 +0000
asID:                     269626
IP address blocks:        45.190.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fd:19:a4:01:3f:0c:57:0a:e6:d3:85:24:04:b4:70:3f:dc:5d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027E5989BE9C86C746877442F729BCCF804DAC18
        Validity
            Not Before: Dec 18 12:31:00 2025 GMT
            Not After : Dec 17 12:36:00 2026 GMT
        Subject: CN=E0FDCAB9B457651A0746731E32C99EA5DB0CDB42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bd:ca:ee:a6:fc:9a:3a:b2:7b:73:87:89:c7:
                    e6:b0:46:28:1b:ca:d5:4b:f6:d6:9f:58:20:3a:a7:
                    1c:07:9d:34:94:ca:0b:9e:dc:ed:4d:73:ed:64:ae:
                    d0:28:e5:68:12:42:10:77:28:e6:59:c8:55:b6:87:
                    b9:a4:b6:29:35:42:c5:9e:4d:a3:ea:4d:5a:c3:2d:
                    4c:4e:11:03:9f:4a:61:0d:9e:dd:db:d0:e2:a8:68:
                    aa:43:f2:e7:6e:a6:5b:af:ef:42:45:3e:ff:7e:3c:
                    a5:5c:f2:11:e2:b5:5b:2b:f6:62:55:e3:b7:d6:4b:
                    70:6b:40:b6:a7:cc:10:bc:8e:b8:5e:7e:0e:b8:2d:
                    74:f0:3f:2e:e4:61:b5:53:ee:df:3b:88:39:7b:d0:
                    b7:9a:99:21:f5:74:f0:75:58:c6:9a:33:37:55:5d:
                    e4:8d:9d:fd:fd:e5:15:11:3f:17:21:7c:4c:0a:92:
                    08:9d:3a:32:63:7d:98:6b:c3:1c:7f:d9:9f:f4:51:
                    2c:fd:89:03:cc:ce:d0:a0:53:33:5c:f4:01:38:79:
                    9f:b8:22:bd:17:c6:64:64:2c:50:7a:1c:14:8f:58:
                    35:68:4c:ab:7b:b7:f2:95:81:16:26:5e:76:df:8b:
                    f7:99:fa:5a:fb:99:38:7d:f8:4e:76:97:77:0d:62:
                    73:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FD:CA:B9:B4:57:65:1A:07:46:73:1E:32:C9:9E:A5:DB:0C:DB:42
            X509v3 Authority Key Identifier:
                keyid:02:7E:59:89:BE:9C:86:C7:46:87:74:42:F7:29:BC:CF:80:4D:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:02:81:e9:b6:fb:3d:33:57:ce:db:12:c7:1f:36:ae:3a:f9:
         10:67:25:13:00:1a:43:e6:1e:dd:69:39:c0:e6:13:ea:91:66:
         8d:2c:70:7f:c2:c2:09:dc:82:dc:4a:54:3e:39:7b:76:97:77:
         40:8b:83:60:60:fc:4d:23:4b:26:b2:71:11:12:80:31:3c:1f:
         d4:62:28:ed:eb:0e:18:68:23:71:28:0b:d8:f9:d2:34:99:df:
         90:77:23:df:cf:36:27:80:b4:72:f0:c1:cf:c5:c9:18:c2:95:
         59:ae:01:d0:00:ed:32:d0:49:da:29:fe:f4:b6:96:4d:87:56:
         3e:bf:f2:fe:f2:fa:d2:ff:44:2e:48:5d:04:43:37:67:32:88:
         93:00:82:50:3d:9b:50:fe:86:dc:b2:72:35:7a:16:85:d5:e2:
         90:bc:a8:0c:72:18:ba:52:85:a9:bf:f9:40:8f:f2:f4:71:9d:
         8e:4a:c2:4e:19:c9:d6:85:e4:15:c7:29:5a:21:ef:89:0b:13:
         a1:86:af:04:b4:27:d3:cf:3d:63:76:1a:52:ed:5f:88:27:7e:
         7b:39:41:c8:4b:f0:61:63:44:50:04:f5:b5:f1:e5:c6:14:4b:
         e4:08:bd:14:04:97:6d:fc:88:5f:d8:e8:bd:1a:30:02:f1:12:
         b1:9d:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:32:07 2025 by rpki-client