This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/34352e3139312e3231362e302f32322d3234203d3e20323639363838.roa
File:                     34352e3139312e3231362e302f32322d3234203d3e20323639363838.roa (raw, json)
Hash identifier:          J/BTi6W6iqd4XJnGO0BqKkQ2XF4uKSBJE7xiHPN4WqY=
Subject key identifier:   39:7C:74:87:D2:0C:38:94:A7:17:06:E7:26:1D:94:4F:CA:31:85:86
Certificate issuer:       /CN=364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA
Certificate serial:       78DF5AAEC9835D7C62CB397BBE4C8D18A386D3A0
Authority key identifier: 36:4C:C6:EA:CD:A2:90:A3:F1:61:DF:11:EF:6B:A7:6F:D4:0E:D8:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/34352e3139312e3231362e302f32322d3234203d3e20323639363838.roa
Signing time:             Sat 06 Dec 2025 12:13:02 +0000
ROA not before:           Sat 06 Dec 2025 12:08:02 +0000
ROA not after:            Sat 05 Dec 2026 12:13:02 +0000
asID:                     269688
IP address blocks:        45.191.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.crl
                          rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 16:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:df:5a:ae:c9:83:5d:7c:62:cb:39:7b:be:4c:8d:18:a3:86:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA
        Validity
            Not Before: Dec  6 12:08:02 2025 GMT
            Not After : Dec  5 12:13:02 2026 GMT
        Subject: CN=397C7487D20C3894A71706E7261D944FCA318586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:fc:91:4b:9e:44:a7:e8:ff:ef:25:5f:68:
                    09:cf:d4:3d:eb:97:0a:64:54:2e:ab:5e:1d:29:52:
                    d4:4b:f6:73:71:c8:d5:78:f7:8a:b3:9c:dc:da:16:
                    7b:6c:6e:52:ea:98:94:6b:a7:b8:15:b2:74:88:bf:
                    06:fd:19:3e:91:d0:45:3d:9f:6d:b0:a7:13:61:9e:
                    0d:50:6e:44:44:7e:ed:94:55:62:f4:21:7d:57:86:
                    6d:c1:ca:a9:80:fd:54:f0:72:6d:0b:eb:5d:57:ec:
                    e3:a0:f2:23:40:19:da:1e:9a:75:92:67:78:a7:9a:
                    73:fb:1e:4c:a2:09:0a:2e:1e:0e:58:65:95:39:6e:
                    38:87:ff:01:cf:dc:ce:c4:96:49:50:42:5a:c2:a8:
                    2a:8f:a5:56:d2:ac:72:c1:49:c8:2c:57:13:33:fe:
                    fa:61:8e:95:af:b4:98:1d:41:5d:3d:0e:b1:f3:71:
                    3e:43:70:96:36:39:7b:4a:12:3c:10:93:8b:03:b3:
                    b0:cf:06:73:dd:c6:94:bd:8e:c0:ce:e9:ad:5e:12:
                    40:6b:dc:2a:a6:b3:b6:76:84:09:a0:4c:2d:4b:1d:
                    5e:87:fa:de:64:a3:65:eb:f2:c4:ab:0d:f6:75:53:
                    5c:f9:43:6b:ed:f0:41:b4:f5:60:2d:08:6e:ec:5d:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:74:87:D2:0C:38:94:A7:17:06:E7:26:1D:94:4F:CA:31:85:86
            X509v3 Authority Key Identifier:
                keyid:36:4C:C6:EA:CD:A2:90:A3:F1:61:DF:11:EF:6B:A7:6F:D4:0E:D8:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/34352e3139312e3231362e302f32322d3234203d3e20323639363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:1b:46:f5:d5:51:a8:4a:f7:94:2b:97:99:40:6b:f1:d1:e9:
         d5:a2:dd:d0:03:fe:02:2e:26:4f:e3:37:e1:b7:a6:ef:f8:da:
         17:f1:aa:0b:2f:c6:5b:a9:c3:fd:ce:d3:9c:d1:47:78:8b:44:
         34:6a:18:4c:7b:4a:b5:a1:d6:c6:ca:2d:59:1c:00:7c:f0:16:
         e1:3b:70:4e:a0:90:58:23:7b:38:38:13:19:65:fa:5f:53:75:
         f0:fc:1c:85:36:f3:12:ba:d0:b3:27:67:78:37:56:7e:47:9c:
         0a:4b:d9:f9:69:99:1f:50:32:59:93:32:8c:a0:da:2f:fd:90:
         8f:74:58:a9:f0:08:98:c9:43:fc:a5:05:1b:32:e5:c0:88:d5:
         70:66:0c:26:71:46:36:bf:cc:6b:07:6e:f9:b7:1a:35:43:1d:
         50:74:1a:e2:d9:b6:9c:b0:db:19:06:49:81:57:f2:e0:2c:db:
         d0:84:17:3a:52:61:ca:a2:fb:74:97:b5:c0:4b:19:5d:d2:8f:
         82:2d:35:7a:e7:10:98:58:57:07:dd:c4:09:69:b0:6b:ff:5f:
         bc:44:ad:42:4e:5a:0d:29:45:25:4f:0e:08:d9:01:61:43:9b:
         f0:03:b2:a9:ab:f6:66:38:1a:15:a2:0d:db:63:4d:aa:5b:ae:
         0a:da:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 16:56:39 2025 by rpki-client