This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa
File:                     34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa (raw, json)
Hash identifier:          Pg070LoSWH1rceEJDPPKf7BI36fvYYXG1Q5Yx7Z0wAw=
Subject key identifier:   6E:12:67:77:9D:D4:76:9A:B4:C5:49:61:88:2C:30:1D:41:C0:AB:E2
Certificate issuer:       /CN=13B9BF94E2FD892DA216F1A29D9509519CBCF439
Certificate serial:       3105CE95E4449569A5684BDAC3B65DE4CDA0D1E7
Authority key identifier: 13:B9:BF:94:E2:FD:89:2D:A2:16:F1:A2:9D:95:09:51:9C:BC:F4:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B9BF94E2FD892DA216F1A29D9509519CBCF439.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa
Signing time:             Tue 06 Jan 2026 12:59:52 +0000
ROA not before:           Tue 06 Jan 2026 12:54:52 +0000
ROA not after:            Tue 05 Jan 2027 12:59:52 +0000
asID:                     267933
IP address blocks:        45.165.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/13B9BF94E2FD892DA216F1A29D9509519CBCF439.crl
                          rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/13B9BF94E2FD892DA216F1A29D9509519CBCF439.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B9BF94E2FD892DA216F1A29D9509519CBCF439.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 13:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:05:ce:95:e4:44:95:69:a5:68:4b:da:c3:b6:5d:e4:cd:a0:d1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B9BF94E2FD892DA216F1A29D9509519CBCF439
        Validity
            Not Before: Jan  6 12:54:52 2026 GMT
            Not After : Jan  5 12:59:52 2027 GMT
        Subject: CN=6E1267779DD4769AB4C54961882C301D41C0ABE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:e3:41:d7:21:6e:a5:93:32:e9:d4:e4:2a:
                    42:4b:e7:d0:1f:df:3f:fd:81:6a:98:9f:e2:72:05:
                    fe:71:28:46:6d:b8:83:78:b1:69:84:95:4b:d3:b4:
                    0b:fd:b6:c4:89:74:40:4b:00:7d:c8:cc:99:26:15:
                    7a:bb:f6:06:2e:ee:09:a3:84:61:9f:3d:b7:77:8c:
                    af:68:12:60:02:fc:d5:5f:a1:dc:80:7d:85:74:8a:
                    63:e3:1d:5a:05:62:bb:8e:e1:5d:f2:eb:57:98:75:
                    c9:07:ac:73:c6:cc:4d:00:3e:c8:cd:06:e4:21:c9:
                    99:1a:dc:7f:0c:bf:b0:64:e3:31:93:e1:5d:4e:fe:
                    ab:37:c0:59:70:98:08:27:2b:6b:8c:13:86:0b:d7:
                    c6:70:30:b1:bd:bc:4a:03:04:9d:21:d8:f9:34:74:
                    dd:1f:ab:9b:91:38:0b:dc:0b:86:b3:df:1e:8c:c5:
                    d7:a0:ca:22:eb:ba:e7:c3:48:d5:21:13:c0:10:94:
                    18:a4:22:65:d9:9d:c6:74:03:7c:18:cd:fb:87:e3:
                    d3:87:e8:a4:c7:c1:0b:2a:33:82:e9:af:39:22:1a:
                    2e:c3:a0:ba:98:42:60:4d:c3:53:07:b2:fa:8d:9b:
                    a5:74:5c:aa:cb:c5:9a:b6:76:ae:51:07:53:3f:c3:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:12:67:77:9D:D4:76:9A:B4:C5:49:61:88:2C:30:1D:41:C0:AB:E2
            X509v3 Authority Key Identifier:
                keyid:13:B9:BF:94:E2:FD:89:2D:A2:16:F1:A2:9D:95:09:51:9C:BC:F4:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/13B9BF94E2FD892DA216F1A29D9509519CBCF439.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B9BF94E2FD892DA216F1A29D9509519CBCF439.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/34352e3136352e3232302e302f32322d3234203d3e20323637393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:3f:6d:9a:f1:25:47:c8:fb:33:9d:18:11:67:02:4f:45:21:
         80:8a:e9:15:e4:9d:45:08:ab:d2:aa:24:b8:be:69:64:75:0d:
         9a:0b:14:fb:49:8b:24:36:6b:91:55:3a:d3:71:a8:0a:52:a9:
         76:8d:bc:8e:28:14:2d:d9:94:be:c7:61:36:b5:67:1a:df:16:
         f6:30:d9:8a:19:cf:77:9a:21:3c:3a:7b:50:4d:79:51:73:4c:
         d0:a3:1a:3e:ee:be:5b:67:57:10:0c:e7:e8:06:95:92:cb:99:
         d2:24:fc:f3:79:1e:01:fe:aa:f3:f8:8f:3e:00:46:44:4d:79:
         56:2b:89:de:eb:ca:aa:6e:a2:e1:86:20:07:51:4f:e6:33:7f:
         fc:1e:82:9f:05:b2:59:71:63:98:c7:1c:d9:a0:8a:98:c2:51:
         ef:b4:59:c8:2a:b4:2b:f9:0e:cf:f4:68:27:cb:bf:a9:8e:94:
         22:03:fe:d7:b4:52:3a:f5:fe:2d:dc:6b:16:ae:c7:15:a9:7f:
         77:00:be:45:9d:87:71:e2:58:00:ae:3c:34:c0:4c:0e:fe:29:
         8b:92:49:dd:90:d5:2d:40:49:4c:a4:4f:27:0a:1d:60:60:29:
         d4:86:57:2a:2e:59:72:ae:79:96:36:4b:83:ab:0f:83:bc:15:
         ab:2c:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 20:55:01 2026 by rpki-client