This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32332d3233203d3e20323639303533.roa
File:                     34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (raw, json)
Hash identifier:          9l/70hTQnj9cn5gJDSkLTYu0XIiUnFExA0SmD6ik6eI=
Subject key identifier:   7F:2C:E8:61:26:9D:71:73:41:25:9F:BF:53:C1:1D:D2:66:93:23:E0
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       1DF05083C476514FD3C43DF856BFC45512B38059
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32332d3233203d3e20323639303533.roa
Signing time:             Sun 07 Dec 2025 10:49:07 +0000
ROA not before:           Sun 07 Dec 2025 10:44:07 +0000
ROA not after:            Sun 06 Dec 2026 10:49:07 +0000
asID:                     269053
IP address blocks:        45.179.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 06:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f0:50:83:c4:76:51:4f:d3:c4:3d:f8:56:bf:c4:55:12:b3:80:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Dec  7 10:44:07 2025 GMT
            Not After : Dec  6 10:49:07 2026 GMT
        Subject: CN=7F2CE861269D717341259FBF53C11DD2669323E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:5c:11:31:b4:0e:c3:fd:0b:17:9a:ad:91:
                    a1:b3:a2:ac:78:50:72:f3:b8:a5:9d:9e:b1:e5:b3:
                    37:39:42:4f:0b:f4:6f:fb:22:57:2e:ad:fc:85:2f:
                    e2:4e:d0:b6:ab:18:f8:dd:cb:8a:25:92:b2:5d:ed:
                    78:dc:e6:e5:fb:4b:e4:8f:e7:ab:fa:f8:30:fb:f3:
                    00:e8:b3:51:30:59:b0:e2:bb:1c:6f:b2:e1:d4:17:
                    47:e9:44:66:d9:c4:82:20:f1:2f:cb:74:2e:f9:27:
                    48:17:c0:b4:5c:2c:5a:52:2f:bb:ab:b1:8a:c2:6d:
                    a9:41:37:21:c5:fc:4e:2e:53:1e:1d:1f:94:d8:b1:
                    ca:7d:0b:98:8e:6c:2a:c5:06:9c:48:5d:31:ba:36:
                    f6:89:16:83:5d:b7:03:09:c2:bf:a7:2b:c4:b2:88:
                    51:c8:ab:67:81:79:b8:9b:b7:8e:85:8a:5e:31:01:
                    11:e3:9a:65:1d:56:0e:58:5a:eb:cd:87:b2:65:ce:
                    b9:cc:f1:17:59:62:e7:a6:b9:4d:4e:61:12:07:e8:
                    e0:10:23:a1:0f:1a:ec:8d:80:67:e1:21:cf:9b:0e:
                    95:ab:a8:1b:61:89:85:bb:63:50:cc:82:2d:1a:de:
                    4a:52:a4:39:8e:9c:65:25:4b:d6:b9:9d:26:8a:16:
                    c4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2C:E8:61:26:9D:71:73:41:25:9F:BF:53:C1:1D:D2:66:93:23:E0
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32332d3233203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:b7:b5:a2:e6:73:fc:58:2d:7c:a9:9f:99:60:c2:e2:07:
         08:3b:40:1a:6b:39:f5:1e:d0:23:2a:b0:10:fc:4f:ae:24:df:
         69:49:97:d8:2b:c5:b9:ed:70:e5:c5:d9:ad:e9:41:c4:a1:ca:
         db:8d:4a:72:4f:28:71:71:51:98:fe:41:61:2b:07:cf:9b:0b:
         55:7f:cb:b7:80:51:dc:20:98:25:dc:c3:e5:b4:8a:5f:25:31:
         2c:47:80:61:f8:5e:f2:4e:bd:9c:27:50:3b:60:1c:22:a4:bb:
         37:7f:8b:30:7d:d3:08:f2:35:a0:ce:a9:c9:3e:5d:ad:9d:3b:
         ec:68:7f:66:af:a1:a0:eb:d9:c3:d5:10:81:ff:3b:57:9a:65:
         99:13:01:16:7a:ec:82:f9:e1:70:dd:c7:e1:11:c9:6d:3a:06:
         2f:bf:57:a5:09:5f:6b:ab:7c:28:30:e6:70:10:2f:12:d6:fa:
         d9:29:4b:98:67:6d:9d:09:24:db:c6:b0:ec:95:54:70:56:3b:
         ff:33:d5:ff:f5:4f:98:80:e9:27:22:b2:5a:a6:71:1d:ef:56:
         57:99:50:f3:e0:07:e3:4c:88:e0:8d:45:95:36:bf:c8:da:19:
         f5:90:7e:b1:cc:fb:af:d8:73:75:17:66:38:b0:89:8a:c8:b1:
         43:fb:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 10:25:47 2025 by rpki-client