This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/34352e3138342e3131322e302f32322d3234203d3e20323639333936.roa
File:                     34352e3138342e3131322e302f32322d3234203d3e20323639333936.roa (raw, json)
Hash identifier:          mk64sxFBCumXd3moyfm0ov7yh/3lIQybxkf3SZr+hjk=
Subject key identifier:   F6:85:28:AF:CD:06:2E:39:5F:AE:86:86:A8:44:A1:FA:30:4A:F2:E1
Certificate issuer:       /CN=CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4
Certificate serial:       092924A6AC2826068FB464EBAD0A7D37577E0F7D
Authority key identifier: CA:FB:3F:D5:BF:98:78:D8:18:3A:B3:AD:06:18:B5:AE:D2:3F:DC:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/34352e3138342e3131322e302f32322d3234203d3e20323639333936.roa
Signing time:             Tue 06 Jan 2026 21:17:01 +0000
ROA not before:           Tue 06 Jan 2026 21:12:01 +0000
ROA not after:            Tue 05 Jan 2027 21:17:01 +0000
asID:                     269396
IP address blocks:        45.184.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl
                          rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Feb 2026 01:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:29:24:a6:ac:28:26:06:8f:b4:64:eb:ad:0a:7d:37:57:7e:0f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4
        Validity
            Not Before: Jan  6 21:12:01 2026 GMT
            Not After : Jan  5 21:17:01 2027 GMT
        Subject: CN=F68528AFCD062E395FAE8686A844A1FA304AF2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:b6:b0:fa:fc:7a:a2:44:10:64:a1:e5:4b:
                    21:b6:38:b7:03:46:0f:bc:98:07:f0:6e:6b:dd:b0:
                    3a:78:9d:6c:e2:b5:da:3b:43:3d:89:f4:c5:13:62:
                    f7:1e:9e:10:9c:64:01:5f:5b:51:53:3f:78:d7:03:
                    82:97:18:e9:fa:19:26:ea:9c:a8:71:7b:ed:0f:b9:
                    73:0e:a1:b7:3d:65:c0:b7:78:99:60:c0:95:bb:45:
                    af:ce:06:57:fd:eb:0e:45:20:ff:ee:7f:a5:e8:37:
                    8c:8e:b2:15:90:5c:69:28:7e:26:b8:49:3f:40:46:
                    a4:81:64:16:d4:94:09:72:14:c6:bf:9f:82:3c:0f:
                    d0:24:7b:fc:0a:cf:24:e7:a8:48:d8:ea:4d:ec:55:
                    3b:2e:74:58:46:4d:4f:d0:c0:6b:df:6a:df:db:c6:
                    5c:63:5a:c1:5b:66:d6:8a:bf:0a:61:fa:0c:78:66:
                    4a:03:2c:75:8f:5b:43:9b:2f:e0:be:6a:76:0b:79:
                    c5:d9:1f:04:74:17:d9:20:de:15:e2:a4:b0:78:02:
                    3e:a6:6d:e1:6e:ee:54:0e:c3:ed:67:f3:f6:cd:09:
                    e8:76:c8:46:4b:c4:9e:64:41:5b:4d:5d:18:90:42:
                    b6:db:46:82:6d:8a:e1:86:c6:5b:8e:b0:d7:74:d5:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:85:28:AF:CD:06:2E:39:5F:AE:86:86:A8:44:A1:FA:30:4A:F2:E1
            X509v3 Authority Key Identifier:
                keyid:CA:FB:3F:D5:BF:98:78:D8:18:3A:B3:AD:06:18:B5:AE:D2:3F:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/34352e3138342e3131322e302f32322d3234203d3e20323639333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:16:83:93:4a:c4:69:f3:0a:f5:b2:8a:b8:05:78:6b:ca:49:
         70:74:f3:1a:74:5f:88:99:16:d9:06:0d:af:f5:05:38:1d:67:
         37:50:13:0a:69:38:a9:20:2e:30:d8:e3:06:ff:0e:05:4b:bb:
         54:00:ed:6b:13:58:e1:79:16:f3:80:85:33:6e:c6:43:ec:5d:
         2a:1e:2e:bf:c0:78:cc:bb:ca:8e:32:97:90:01:28:0b:cc:f0:
         44:25:8c:32:a9:55:7d:3c:72:37:88:ee:07:4b:a3:d7:86:4d:
         87:6e:0b:ab:97:bf:9e:21:7d:9e:a4:bf:9d:36:46:9a:54:ed:
         64:ca:98:9a:65:ef:85:27:a0:d2:f2:e4:bd:60:ac:99:09:77:
         49:57:a9:a1:d2:62:f5:3c:61:a5:39:81:02:9a:7d:b9:24:4c:
         bb:5f:0b:e3:01:01:e5:9a:d2:2f:58:3d:f8:a7:25:0b:6d:16:
         90:15:01:17:bf:cb:a1:8b:58:24:8a:fa:a6:ee:ca:56:50:cb:
         5d:6f:81:b7:2b:f0:4d:6f:09:9b:83:55:f0:f6:86:d0:aa:99:
         75:98:54:81:e4:3a:e9:d4:93:dc:a0:a9:7f:db:6f:73:87:50:
         7c:7e:ac:2a:9a:b6:68:9b:eb:fc:01:e4:ee:4b:f9:40:dd:e8:
         5b:34:f6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:25:34 2026 by rpki-client