This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa
File:                     34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa (raw, json)
Hash identifier:          NEDggsAxrDn4scYf33sBLyKxAL34d7UifE+/gMCvd+8=
Subject key identifier:   E5:02:2A:C3:F2:EA:E1:07:7D:AF:10:44:CA:53:AA:E7:15:5B:AD:9E
Certificate issuer:       /CN=027E5989BE9C86C746877442F729BCCF804DAC18
Certificate serial:       31F8651529509A383EFC9E450871F73E2F8D878B
Authority key identifier: 02:7E:59:89:BE:9C:86:C7:46:87:74:42:F7:29:BC:CF:80:4D:AC:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa
Signing time:             Thu 18 Dec 2025 12:36:00 +0000
ROA not before:           Thu 18 Dec 2025 12:31:00 +0000
ROA not after:            Thu 17 Dec 2026 12:36:00 +0000
asID:                     269626
IP address blocks:        45.190.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f8:65:15:29:50:9a:38:3e:fc:9e:45:08:71:f7:3e:2f:8d:87:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027E5989BE9C86C746877442F729BCCF804DAC18
        Validity
            Not Before: Dec 18 12:31:00 2025 GMT
            Not After : Dec 17 12:36:00 2026 GMT
        Subject: CN=E5022AC3F2EAE1077DAF1044CA53AAE7155BAD9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:3a:8e:eb:8f:e1:cf:33:25:75:9d:aa:a6:
                    c0:93:a1:dd:fe:b8:6d:66:e5:37:f5:f8:94:5f:54:
                    70:a2:dd:fb:20:82:c0:1b:88:0f:2e:22:17:61:2a:
                    99:39:c3:a4:4e:9a:95:b6:e7:7c:f9:c3:ca:d8:75:
                    9e:3e:bb:14:7d:eb:87:56:30:8a:3c:16:27:3b:ba:
                    a5:b7:07:b0:7b:00:78:10:e2:79:7a:15:3a:80:49:
                    fc:d2:35:9a:40:2a:6f:4e:15:bc:15:c5:5a:c7:ce:
                    81:96:4f:6a:9b:22:ea:67:1f:c6:d6:f0:ed:03:4d:
                    c1:60:9a:5c:00:5e:c1:08:b1:87:49:78:82:fd:30:
                    20:c1:7e:a6:ea:8c:dc:7a:b4:7e:54:3b:93:b7:c5:
                    81:9b:60:1c:24:9e:02:6a:b7:e7:ea:29:37:c3:05:
                    41:c3:52:5b:3f:d6:a3:ee:04:13:fe:79:26:22:5d:
                    7f:d3:ce:7a:5d:a4:27:7a:60:81:f7:dc:56:85:af:
                    ea:60:03:84:dd:31:a6:be:2a:94:58:f9:85:9f:12:
                    1d:4c:58:92:63:7d:3e:77:c4:05:c3:10:48:46:2f:
                    c0:22:e1:18:2f:c0:8a:4f:58:87:af:60:f1:5f:8d:
                    d3:c2:fe:2f:28:7f:85:45:fb:ee:5d:86:85:3d:81:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:02:2A:C3:F2:EA:E1:07:7D:AF:10:44:CA:53:AA:E7:15:5B:AD:9E
            X509v3 Authority Key Identifier:
                keyid:02:7E:59:89:BE:9C:86:C7:46:87:74:42:F7:29:BC:CF:80:4D:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:93:45:4d:29:79:95:fc:19:9d:5c:c5:db:d1:7c:91:75:ba:
         8b:ee:de:ee:52:27:54:3a:8f:66:ea:3f:50:9c:34:43:ee:53:
         8f:39:45:23:6f:fd:ed:58:b8:76:24:0e:15:da:6b:d0:42:8e:
         58:1d:de:f1:d7:5a:c9:bc:62:45:11:3b:b2:a2:f4:4b:59:63:
         a5:65:3c:9e:ca:5f:d3:24:bf:20:a5:e5:11:ae:74:7d:ce:59:
         56:14:fd:5f:27:01:df:d0:00:fd:4e:ca:ae:cc:25:07:6f:55:
         7d:ba:7d:41:9c:de:85:7e:7b:c1:42:f9:73:bd:ba:fe:2c:7d:
         13:be:64:3a:0f:5e:93:cd:97:44:8b:ef:fb:ec:a1:12:d6:99:
         14:94:b3:91:a0:0e:30:05:37:36:f4:dc:22:28:b6:4e:7a:65:
         07:19:ac:52:3a:24:5a:13:59:03:a2:24:57:3a:39:c7:24:2e:
         3a:b8:4a:b4:1b:fa:ab:e4:6a:5c:14:1d:bd:53:91:63:48:19:
         23:12:a1:01:5c:7b:d7:dc:19:f7:a5:59:0b:fc:52:df:ea:58:
         23:d8:b5:67:ba:da:58:61:d6:c6:9a:9a:a3:2e:72:ee:bf:37:
         08:e6:7b:51:52:af:9b:88:f1:31:49:71:25:8e:9f:14:9e:a0:
         d6:e6:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:32:07 2025 by rpki-client