This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3136332e3135322e302f32322d3234203d3e20313938393439.roa
File:                     34352e3136332e3135322e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          YV5jaDwuAKScD3UcnBxv8KbFlUKYdIEhvWTEUkd3Bjo=
Subject key identifier:   BC:04:AA:AD:48:5A:93:B0:B3:1B:23:F2:7A:B2:B6:7B:FF:70:21:55
Certificate issuer:       /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial:       62BCA8A220B39B5FFFE5CD4238D9F74C2FCD6BDA
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3136332e3135322e302f32322d3234203d3e20313938393439.roa
Signing time:             Tue 06 Jan 2026 17:00:13 +0000
ROA not before:           Tue 06 Jan 2026 16:55:13 +0000
ROA not after:            Tue 05 Jan 2027 17:00:13 +0000
asID:                     198949
IP address blocks:        45.163.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Jan 2026 13:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bc:a8:a2:20:b3:9b:5f:ff:e5:cd:42:38:d9:f7:4c:2f:cd:6b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
        Validity
            Not Before: Jan  6 16:55:13 2026 GMT
            Not After : Jan  5 17:00:13 2027 GMT
        Subject: CN=BC04AAAD485A93B0B31B23F27AB2B67BFF702155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:76:3d:55:18:f8:80:f5:f4:17:57:b3:a8:c3:
                    90:c6:8b:ad:0c:6b:2c:be:34:3e:7e:6c:11:51:af:
                    42:dc:62:cc:f9:18:38:d0:f4:49:82:27:40:49:93:
                    ae:32:e0:01:09:d5:e6:f0:ca:2b:ab:4d:9f:73:23:
                    e0:be:d1:cd:3e:4a:e9:04:0e:ce:f5:3d:f0:61:a2:
                    80:7c:1f:66:75:cc:c3:19:9d:df:f8:b6:50:de:bc:
                    3d:01:67:ee:1d:2b:1f:49:1a:b0:4c:1a:1d:d1:c9:
                    89:dd:62:55:af:87:97:24:97:2c:0a:7f:46:0a:15:
                    0c:ba:77:64:be:46:e3:2e:a4:d5:e2:f6:2d:ae:da:
                    1f:42:0e:e5:be:91:40:65:20:cf:3d:a9:dd:24:00:
                    24:f4:38:db:81:84:51:66:7e:06:bc:44:6a:8b:fd:
                    9a:51:fb:df:f8:4c:68:b6:34:fe:1d:ec:fa:55:a4:
                    19:c3:8b:e5:1c:80:7b:b2:ba:4e:b2:f5:3b:e7:ec:
                    9d:d9:c6:e7:57:6d:96:6b:1f:37:37:c9:f9:36:95:
                    c0:20:0f:6c:57:51:38:14:db:d2:b4:78:26:de:90:
                    c0:be:10:96:63:bc:8b:86:56:e5:a3:2d:4e:5c:68:
                    ce:b3:ce:97:17:81:14:e1:dc:b2:78:a1:25:4f:67:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:04:AA:AD:48:5A:93:B0:B3:1B:23:F2:7A:B2:B6:7B:FF:70:21:55
            X509v3 Authority Key Identifier:
                keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3136332e3135322e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:bd:7a:84:75:f2:46:4d:71:88:e5:91:75:98:7d:98:63:94:
         d6:5e:13:6e:db:67:1e:38:00:e2:e8:18:e9:90:49:1a:c6:79:
         a9:69:ee:82:19:29:eb:1b:47:de:07:17:a1:35:86:2d:7b:7b:
         33:d2:54:b6:05:0b:9b:e0:fc:07:61:16:01:aa:2f:7e:5c:e9:
         6d:be:65:2d:73:08:02:02:e6:92:62:32:30:b4:15:aa:89:4c:
         f7:06:c2:db:2f:e4:5e:e6:3c:d3:a7:ae:c0:95:39:19:a2:26:
         0d:aa:e3:2f:57:e3:8a:c7:37:e8:bd:c7:04:24:12:f0:56:1f:
         1e:84:fa:0f:f2:18:7f:a1:50:09:c5:58:f0:f6:a6:b7:9e:2e:
         75:ab:70:38:3d:1d:78:ca:47:d7:8b:a8:73:d7:ca:eb:7f:3a:
         9a:70:4d:de:17:96:a6:40:95:06:5f:3d:35:5b:a2:4a:11:74:
         35:18:6e:09:97:83:e0:2a:97:b7:c0:2d:03:34:00:da:12:e4:
         dc:fe:75:fe:c9:04:39:cf:d4:86:53:75:f2:3d:30:5e:54:43:
         8e:1e:ac:db:8d:8f:69:e5:f7:0a:6b:e6:0c:29:7f:50:0c:8b:
         04:26:75:d3:a5:68:2d:65:7a:a9:d4:71:cf:8b:80:97:b7:bd:
         e5:28:72:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:31:06 2026 by rpki-client