This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32342d3234203d3e203532383338.roa
File:                     34352e3136372e3134342e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier:          w94PbPFa0PROFFJ7sJ/7yVw+QDBgkcIJWLK8o5i8SVI=
Subject key identifier:   FB:51:74:89:E9:31:4F:64:F6:99:6B:85:7F:69:CF:F3:A0:45:82:E2
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       3ED3B09475C9D320622CF567F89B35D179F4F572
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32342d3234203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:26:51 +0000
ROA not before:           Wed 03 Dec 2025 00:21:51 +0000
ROA not after:            Wed 02 Dec 2026 00:26:51 +0000
asID:                     52838
IP address blocks:        45.167.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 10:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d3:b0:94:75:c9:d3:20:62:2c:f5:67:f8:9b:35:d1:79:f4:f5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:21:51 2025 GMT
            Not After : Dec  2 00:26:51 2026 GMT
        Subject: CN=FB517489E9314F64F6996B857F69CFF3A04582E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:ee:74:9a:d5:69:ea:0b:43:99:d3:8c:71:
                    f2:02:bb:d5:05:2e:a7:a4:63:ca:cf:ed:7c:32:07:
                    9d:05:78:fe:d0:b1:21:d0:e4:30:27:96:f8:87:3c:
                    dd:54:3c:99:91:50:92:5b:20:69:d8:59:79:72:6a:
                    93:7b:fb:50:61:db:78:37:63:d7:63:dc:b4:3f:f8:
                    2c:5e:cf:b2:7d:2f:95:62:e4:20:da:45:04:69:a1:
                    9d:09:cc:51:a1:35:e3:cb:ae:3c:62:a6:73:40:db:
                    96:e1:5a:9c:ca:33:e4:89:09:c7:ce:a7:2a:56:22:
                    5a:b5:b4:3b:66:61:6b:96:bf:21:6c:6f:11:7b:7a:
                    92:ff:6f:c8:5c:db:5c:ef:62:46:45:98:bf:8c:2c:
                    86:91:13:f6:36:a1:48:a2:4d:f3:d9:b3:92:e1:01:
                    91:96:6f:83:0e:45:09:f8:4b:5c:b4:0b:f7:1d:9a:
                    c3:e0:29:50:5c:30:92:e3:47:9d:c4:6e:2b:c5:08:
                    83:35:e8:0d:71:75:67:08:17:30:c9:a1:d7:97:f6:
                    0a:26:e3:45:cb:38:74:2c:7c:fc:15:28:ef:33:77:
                    08:92:c8:ca:3c:6e:d0:86:57:b2:99:2a:69:80:07:
                    29:f0:df:9f:c2:3c:76:cb:b1:67:b6:0b:af:a6:03:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:51:74:89:E9:31:4F:64:F6:99:6B:85:7F:69:CF:F3:A0:45:82:E2
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32342d3234203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:4f:3f:45:50:e6:08:b3:fd:88:f2:d8:d5:23:83:6c:a7:a9:
         59:87:3b:e1:ac:91:23:fa:1e:c2:1d:34:bc:36:7b:e2:38:44:
         c2:3e:e3:ea:0b:9c:40:c8:ea:7a:02:83:39:69:e4:3c:a5:24:
         b3:a2:eb:46:21:62:c4:61:b3:f3:9e:d7:2f:33:44:78:d9:b4:
         67:01:2f:24:c3:18:16:21:09:95:7a:4e:da:0e:5e:78:23:6d:
         35:27:d1:8b:7f:f2:c5:7b:b9:2e:94:2b:46:f3:cb:5e:98:d3:
         59:75:00:d7:ba:97:04:09:82:3a:93:0c:20:dc:bd:6b:45:47:
         c3:7e:99:4a:24:98:87:c0:92:5f:63:e9:de:7b:d7:9a:e1:6d:
         96:c8:e2:ae:0f:43:c8:88:83:82:6d:c5:17:b3:1c:ea:cc:33:
         9f:3c:27:c1:eb:e5:59:e1:ef:47:33:73:11:ef:8d:a2:de:18:
         49:09:b3:0d:e7:48:c2:50:f7:d4:25:7c:ff:9d:14:30:c4:12:
         34:9b:f4:c0:9c:78:05:b1:79:34:8e:97:d3:ee:13:7c:98:47:
         f1:93:ef:95:0c:8a:d9:d6:52:bc:3d:50:ad:14:6e:21:f8:00:
         b9:08:ed:da:22:9e:89:61:9a:18:95:85:f5:b5:13:4a:b3:80:
         8d:59:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:04 2025 by rpki-client