This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38302e302f32342d3234203d3e20323731363237.roa
File:                     34352e3137382e38302e302f32342d3234203d3e20323731363237.roa (raw, json)
Hash identifier:          vr8fz4SA92k3cLs7KPQKjKQlx73PD+Ew8g6rwcjmT7U=
Subject key identifier:   98:FE:8D:92:0B:17:AD:9E:1B:F9:9F:A8:AE:B9:C0:44:1A:3F:7C:7C
Certificate issuer:       /CN=97BD08F65EE9CED01EAC61A0D095B170713D00DD
Certificate serial:       69F5DB2ADC37D1E6284E3734B05DC13EAD7BBD87
Authority key identifier: 97:BD:08:F6:5E:E9:CE:D0:1E:AC:61:A0:D0:95:B1:70:71:3D:00:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97BD08F65EE9CED01EAC61A0D095B170713D00DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38302e302f32342d3234203d3e20323731363237.roa
Signing time:             Thu 11 Dec 2025 18:47:54 +0000
ROA not before:           Thu 11 Dec 2025 18:42:54 +0000
ROA not after:            Thu 10 Dec 2026 18:47:54 +0000
asID:                     271627
IP address blocks:        45.178.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.crl
                          rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97BD08F65EE9CED01EAC61A0D095B170713D00DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f5:db:2a:dc:37:d1:e6:28:4e:37:34:b0:5d:c1:3e:ad:7b:bd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97BD08F65EE9CED01EAC61A0D095B170713D00DD
        Validity
            Not Before: Dec 11 18:42:54 2025 GMT
            Not After : Dec 10 18:47:54 2026 GMT
        Subject: CN=98FE8D920B17AD9E1BF99FA8AEB9C0441A3F7C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:70:fc:dc:6a:65:be:3f:f0:7a:c9:e9:2e:
                    21:62:db:00:f6:1e:f4:3c:ed:73:1d:e3:9c:2f:ef:
                    d6:e1:b3:90:50:c5:9e:a7:35:09:cd:6f:9a:3f:83:
                    e7:2b:9c:ee:bf:34:f1:2b:3a:41:c4:58:c4:a3:1c:
                    a3:b8:63:8a:5b:06:9b:ad:3d:39:87:94:e1:0e:91:
                    47:57:b5:ca:ea:d7:5b:55:dd:74:e0:7a:6a:9b:92:
                    47:c1:12:5a:f5:83:43:3e:50:96:f0:3f:ac:df:00:
                    67:d0:ea:a4:d3:4f:c9:cb:d8:37:3d:f6:5d:79:22:
                    ab:07:20:d9:fd:0a:f6:0e:cd:91:c7:df:75:c5:43:
                    86:55:82:80:a0:b0:90:59:85:fa:d1:85:68:01:ce:
                    22:a2:73:b5:55:f7:49:68:20:b9:97:fa:18:52:a1:
                    90:04:53:09:2f:7f:f0:d8:d1:86:5b:de:0b:ad:33:
                    cc:ec:0a:5d:8d:ec:a0:97:05:17:6e:e4:82:57:c7:
                    1f:ac:20:6d:c8:b5:cb:88:64:c2:37:bb:d6:cc:53:
                    0b:c0:44:9c:af:52:61:cf:fc:76:df:0a:79:e4:5e:
                    3a:1f:0b:39:f3:5b:14:55:86:58:3f:d0:5d:22:d7:
                    a9:c9:7e:56:f1:4d:7c:5d:8a:fb:6e:c7:aa:8c:4c:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FE:8D:92:0B:17:AD:9E:1B:F9:9F:A8:AE:B9:C0:44:1A:3F:7C:7C
            X509v3 Authority Key Identifier:
                keyid:97:BD:08:F6:5E:E9:CE:D0:1E:AC:61:A0:D0:95:B1:70:71:3D:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97BD08F65EE9CED01EAC61A0D095B170713D00DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38302e302f32342d3234203d3e20323731363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:5c:67:33:70:3b:87:91:44:d9:00:32:9f:8b:7d:07:06:e7:
         f9:86:a4:67:a1:3c:54:4d:14:58:94:ee:57:29:d6:c6:49:61:
         f5:ea:01:fd:ae:22:7d:ca:ec:33:b1:86:82:fb:ed:09:30:44:
         ec:a5:ec:11:21:cd:3a:32:28:60:55:1c:b4:62:6f:ec:35:ab:
         8a:72:a2:d6:6b:1d:14:d1:0a:85:b8:c9:23:eb:91:a5:72:ca:
         d1:d8:d2:5d:9b:b9:1c:58:13:5e:24:c3:ee:1a:15:9b:c1:2e:
         3d:dc:e3:aa:73:ed:50:78:c5:8c:7f:b2:b0:5b:a6:2c:46:e1:
         31:7b:13:6d:c6:bb:68:5d:22:d1:6f:04:fe:44:e7:e6:d4:da:
         cc:de:e5:b8:22:54:6d:02:bb:f0:17:77:cb:91:6c:58:41:c0:
         04:e6:40:17:04:3f:53:6c:5f:28:03:44:14:70:b4:a1:ef:92:
         c9:ff:b7:4f:fe:93:70:ff:3a:31:67:74:d5:ac:90:f1:9f:b9:
         72:0a:4a:7a:e5:c8:49:d6:d7:84:c9:bc:07:ed:23:1e:e3:88:
         f7:2b:b9:92:aa:69:d1:ef:5e:e2:e3:dc:88:22:99:eb:f2:e4:
         f5:54:36:4f:2a:25:24:f5:a6:7a:94:06:02:47:c9:4d:18:40:
         4b:36:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:24:04 2025 by rpki-client