This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35332e302f32342d3234203d3e20323639303533.roa
File:                     34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (raw, json)
Hash identifier:          K9WqDVoOC9+J/ZxCcup5mVeeWECoZyoed0UuxFFCPmc=
Subject key identifier:   91:D8:9A:5A:A3:5A:6A:EF:48:34:B1:02:C9:2B:30:BA:61:73:8C:6B
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       090B2FB45593DA930CFB7A48E2F07D39E8E195BE
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35332e302f32342d3234203d3e20323639303533.roa
Signing time:             Sun 07 Dec 2025 11:49:09 +0000
ROA not before:           Sun 07 Dec 2025 11:44:09 +0000
ROA not after:            Sun 06 Dec 2026 11:49:09 +0000
asID:                     269053
IP address blocks:        45.179.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 06:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0b:2f:b4:55:93:da:93:0c:fb:7a:48:e2:f0:7d:39:e8:e1:95:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Dec  7 11:44:09 2025 GMT
            Not After : Dec  6 11:49:09 2026 GMT
        Subject: CN=91D89A5AA35A6AEF4834B102C92B30BA61738C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1e:b4:28:b6:3a:e9:2a:17:18:79:64:50:a9:
                    c1:05:59:be:36:42:0e:1e:7b:d0:17:a0:21:a6:7f:
                    20:54:05:47:0c:a0:59:b4:54:74:06:c5:c3:6a:2a:
                    a5:6e:2e:72:fd:67:4b:8e:8f:ee:26:fa:73:3a:be:
                    8f:2e:9d:63:43:de:45:e2:47:38:55:b7:d7:a8:ed:
                    ea:58:5e:c9:b9:e9:1c:d5:43:96:9d:a6:c0:0e:cf:
                    79:a2:88:c1:ff:f0:09:4a:bf:78:fc:45:3d:fc:48:
                    59:5b:25:31:58:8d:cf:ad:86:d2:88:ef:e5:c6:2a:
                    05:fb:8e:88:98:d9:86:7b:66:52:9c:c2:7c:05:be:
                    58:4e:c3:b6:95:79:9b:fd:3c:0f:54:44:0d:df:2e:
                    67:82:03:9d:dc:84:8a:d5:f8:fa:78:3d:de:a3:08:
                    49:40:fc:68:f8:90:7f:1d:ff:33:a9:59:cc:06:3d:
                    27:81:8c:d0:f2:3f:11:5c:73:dd:d0:24:a5:5d:ab:
                    ee:f4:65:7f:51:d6:11:86:94:61:a4:9a:4d:f7:3b:
                    10:50:b1:30:aa:5b:03:dd:cc:da:d9:0c:73:7d:6e:
                    60:a6:a8:b1:9b:f2:c2:67:ed:aa:ff:31:d0:5f:6f:
                    dc:84:51:e3:00:b4:21:14:f5:62:bd:5d:12:1a:91:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D8:9A:5A:A3:5A:6A:EF:48:34:B1:02:C9:2B:30:BA:61:73:8C:6B
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35332e302f32342d3234203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:eb:c8:73:bd:19:ef:45:db:02:a6:16:0b:39:14:2f:62:34:
         d5:75:e7:7f:aa:35:2c:cd:ab:c9:7d:97:69:a7:f1:2a:0d:e3:
         94:01:33:60:4d:30:ca:95:91:06:7f:2a:d2:ea:66:6a:60:21:
         78:59:4e:d1:9d:c6:9a:8a:3c:c2:72:6f:ca:cd:ad:17:5d:c5:
         bb:7a:21:5e:3d:94:24:18:50:07:6d:73:a1:ff:ba:82:0e:05:
         bc:a8:57:ea:e2:38:cf:68:55:fa:04:c6:a6:5a:eb:75:7b:a8:
         f6:51:cb:fa:2e:c1:e8:d0:4e:0e:0d:14:26:bf:d2:b7:e8:25:
         f7:ff:69:e0:12:75:ae:9b:5d:55:b1:c0:15:77:2b:31:b8:f3:
         8d:86:ab:ea:07:54:16:3d:75:4e:4f:9b:29:d9:94:8e:e0:f5:
         a3:6c:13:29:a4:bd:0e:f3:77:62:d8:d5:37:ec:4e:d5:02:f3:
         f4:1f:8e:f8:90:27:52:68:b3:61:ca:80:8a:81:84:00:37:cd:
         a9:69:5e:d1:85:81:07:ed:16:c5:7f:8b:4e:c0:0c:0f:33:8a:
         b6:ef:e4:d9:83:bf:63:f5:6e:fa:83:ad:f9:27:5d:cf:5a:86:
         ac:4c:cd:9a:03:01:7c:bd:91:48:84:c8:87:25:87:f6:5a:39:
         6a:1d:0b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 10:27:36 2025 by rpki-client