This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa
File:                     34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa (raw, json)
Hash identifier:          4APmUhiCe2ExU5ExSciTh8lR4yT8x1l1H5+N7VXcVAM=
Subject key identifier:   59:A3:28:71:EE:A3:E2:8E:9C:36:93:01:07:CA:99:01:C7:BA:69:09
Certificate issuer:       /CN=027E5989BE9C86C746877442F729BCCF804DAC18
Certificate serial:       2428FD6B5FE2E2D546AAE9BA1F8FDBE15070954F
Authority key identifier: 02:7E:59:89:BE:9C:86:C7:46:87:74:42:F7:29:BC:CF:80:4D:AC:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa
Signing time:             Thu 18 Dec 2025 12:36:00 +0000
ROA not before:           Thu 18 Dec 2025 12:31:00 +0000
ROA not after:            Thu 17 Dec 2026 12:36:00 +0000
asID:                     269626
IP address blocks:        45.190.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:28:fd:6b:5f:e2:e2:d5:46:aa:e9:ba:1f:8f:db:e1:50:70:95:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027E5989BE9C86C746877442F729BCCF804DAC18
        Validity
            Not Before: Dec 18 12:31:00 2025 GMT
            Not After : Dec 17 12:36:00 2026 GMT
        Subject: CN=59A32871EEA3E28E9C36930107CA9901C7BA6909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:00:b5:c1:45:2a:6f:6d:8b:48:bd:8f:e8:
                    06:53:12:1c:fb:01:5d:25:b6:96:27:f3:47:9c:00:
                    17:77:3f:e0:bb:13:86:07:ae:a8:4b:84:50:0f:e6:
                    b8:77:d7:6f:55:94:dd:e9:4f:c5:4b:41:91:32:c8:
                    58:ec:40:ec:b2:f6:7e:19:28:b6:6d:de:1a:d5:55:
                    d3:b1:02:2d:16:f1:1e:b8:dd:00:62:15:c5:c0:8c:
                    f9:99:78:f1:f4:0b:37:a6:84:1b:89:32:6f:08:86:
                    91:8d:3b:bb:ec:72:2e:93:08:0d:80:dd:13:37:ff:
                    ac:74:0b:0d:5c:56:2a:74:11:a4:88:ac:57:ad:13:
                    91:9d:aa:cd:33:0a:f2:e3:fe:8c:98:d4:0d:62:b8:
                    19:12:22:83:ca:30:2b:37:b1:9e:c2:b5:42:6f:5d:
                    bd:a8:46:1b:85:61:c0:2d:0c:11:d4:0d:07:70:31:
                    3d:c2:0d:e3:aa:05:23:19:4c:9b:71:ce:df:52:04:
                    db:da:75:77:fb:26:2d:19:a7:fa:cd:36:4e:54:95:
                    4a:02:04:38:20:2f:5e:51:53:5a:13:cc:33:1a:02:
                    20:76:39:44:22:81:53:7f:8a:68:fa:94:60:db:a8:
                    5f:19:9d:dd:e0:5f:dd:57:98:ff:3c:fb:d5:3d:41:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A3:28:71:EE:A3:E2:8E:9C:36:93:01:07:CA:99:01:C7:BA:69:09
            X509v3 Authority Key Identifier:
                keyid:02:7E:59:89:BE:9C:86:C7:46:87:74:42:F7:29:BC:CF:80:4D:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:0c:db:fa:85:20:ed:fd:63:f6:c0:d9:c7:c3:08:6a:a4:ae:
         7c:9c:ad:33:23:47:35:2a:f3:ea:8e:4b:82:4d:8b:2e:5a:6b:
         c1:7d:fb:40:1b:e9:a3:00:92:db:45:55:4d:10:f3:b6:d1:84:
         00:37:a3:fe:cb:54:74:ad:66:a8:c7:9e:ec:e6:4c:d6:c7:4f:
         f7:24:2b:e9:91:3a:88:1d:c9:a0:26:07:c6:af:4a:e7:a3:2b:
         ff:64:94:d7:1d:ac:49:df:d7:22:05:b6:1b:35:45:d8:df:a2:
         e8:0d:1c:3e:a1:2a:9a:69:38:75:f8:74:46:52:14:96:e6:d1:
         12:5d:29:84:3c:21:b2:dd:02:d6:a7:d6:9c:ce:0e:f5:df:3b:
         65:4f:e1:94:3a:8b:97:03:51:32:b8:a9:78:ca:cc:36:08:09:
         e6:b5:e2:eb:de:85:19:9c:45:88:36:b6:9b:65:58:5f:6a:1a:
         c4:f1:76:46:3b:d4:9b:b2:42:f1:c8:bb:62:62:d3:a7:ff:e0:
         fd:b3:50:59:e0:30:5d:ac:67:a9:c6:81:21:15:a9:a8:a9:90:
         3e:21:44:5b:a9:b3:6e:b0:ec:30:af:b3:aa:48:13:3d:08:7b:
         e6:ed:8d:c5:94:d4:4f:ec:a0:11:e4:5e:f7:75:9f:3f:39:b8:
         c6:60:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:32:06 2025 by rpki-client