This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32332d3233203d3e203532383338.roa
File:                     34352e3136372e3134342e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier:          yk+ytOrKsUmVdJBiyHJ9lZif0pTUPW93YltYQX0czYE=
Subject key identifier:   F7:F8:93:9C:32:AC:0D:F4:D4:BE:28:BF:C3:03:94:87:60:A9:E3:00
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       6BB22FAC9471F5FD65334737F9CCC37B0B05273F
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32332d3233203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:25:50 +0000
ROA not before:           Wed 03 Dec 2025 00:20:50 +0000
ROA not after:            Wed 02 Dec 2026 00:25:50 +0000
asID:                     52838
IP address blocks:        45.167.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 10:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b2:2f:ac:94:71:f5:fd:65:33:47:37:f9:cc:c3:7b:0b:05:27:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:20:50 2025 GMT
            Not After : Dec  2 00:25:50 2026 GMT
        Subject: CN=F7F8939C32AC0DF4D4BE28BFC303948760A9E300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b9:36:ca:1f:4d:a0:19:38:77:ed:da:0c:5a:
                    85:66:92:45:8f:10:ce:56:25:4e:65:6a:0b:c0:9b:
                    e3:41:58:2c:20:0b:6d:8c:08:03:11:20:68:9b:d0:
                    f6:da:65:10:8f:ae:41:55:f1:b2:58:1e:10:ab:ba:
                    69:27:db:94:29:52:9d:9d:ae:6c:e5:6f:da:62:68:
                    52:ec:b1:cd:3e:0b:40:fc:41:d7:77:b1:1e:32:00:
                    50:bf:dc:6a:b5:10:53:95:0c:19:db:d1:7c:0b:e9:
                    ad:80:98:83:8c:c4:14:d8:9a:f9:cf:9e:2a:2c:12:
                    12:b2:7c:47:75:72:84:69:46:2e:b6:1e:5b:7b:f9:
                    ea:f9:d2:29:75:1a:84:ec:b3:85:0a:51:cf:0b:b3:
                    df:8e:8e:0b:14:5d:73:95:e3:72:96:e0:55:15:b7:
                    6a:7a:e2:70:3c:30:2f:62:36:2f:2f:0b:4a:a5:b8:
                    0f:21:a9:50:78:5f:13:6b:d8:e6:49:ed:f0:27:44:
                    3a:89:02:1c:13:5c:80:96:00:88:ac:3e:92:33:22:
                    95:69:06:02:33:e5:65:1a:02:9b:0b:d2:07:f7:21:
                    b4:d2:75:92:8a:e4:a6:14:ba:25:95:e8:0e:de:48:
                    e5:0d:fb:66:29:4f:dd:3c:af:7f:67:7f:50:10:3c:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F8:93:9C:32:AC:0D:F4:D4:BE:28:BF:C3:03:94:87:60:A9:E3:00
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32332d3233203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:12:38:d5:8e:c0:b4:9e:74:04:21:5d:8d:0f:ab:f7:2a:ad:
         99:44:c3:ff:c2:ce:63:14:f6:96:2c:be:b1:0b:ea:eb:06:45:
         5d:cf:40:88:a8:76:cc:a9:c5:42:cc:bd:4e:74:c7:21:ab:00:
         32:a9:fe:7b:83:07:7c:ba:19:d7:7f:77:79:f5:9b:8f:23:ea:
         63:59:81:aa:96:9b:a0:d5:f0:b0:fd:9f:69:83:49:b0:f2:0f:
         72:fc:8c:2c:1a:5b:2b:06:d1:08:eb:3c:0f:f9:62:59:78:fe:
         6f:f2:9f:e8:e2:5c:c1:90:e1:97:1e:55:de:0e:4f:bf:04:17:
         ec:b1:86:24:72:2b:70:0d:0e:21:75:8b:4e:9d:df:90:c8:1e:
         a2:c8:a0:d8:7e:51:59:2a:d3:5a:c5:76:9c:d9:26:ed:22:7f:
         ce:34:cb:63:7c:80:ea:c7:b4:55:0e:f3:e3:6c:8d:45:e6:96:
         b2:51:53:85:2c:9e:69:4b:b3:57:0f:6f:52:be:07:ec:58:50:
         1d:b4:85:14:c7:8e:ef:7b:98:44:ac:5e:db:4d:b2:70:b2:35:
         bb:9d:1e:a4:1a:37:c5:67:d2:f9:c2:ba:f5:2b:31:e7:60:31:
         70:a1:d9:37:ac:2c:54:8e:1f:88:c5:30:c1:00:d1:38:ed:f9:
         2f:fb:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:05 2025 by rpki-client