This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233322e302f32332d3233203d3e203532383338.roa
File:                     34352e3233312e3233322e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier:          n0TsnzwSUdRCL78XYzVT9ycxAxYXT6HGkK7DtP57q0Y=
Subject key identifier:   28:9A:1D:47:0B:05:0A:79:57:0C:32:6A:D9:9E:FC:B2:7E:3C:A2:59
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       53738A8C0624629F5928C9720192CFB24514EC5B
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233322e302f32332d3233203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:29:52 +0000
ROA not before:           Wed 03 Dec 2025 00:24:52 +0000
ROA not after:            Wed 02 Dec 2026 00:29:52 +0000
asID:                     52838
IP address blocks:        45.231.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 10:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:73:8a:8c:06:24:62:9f:59:28:c9:72:01:92:cf:b2:45:14:ec:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:24:52 2025 GMT
            Not After : Dec  2 00:29:52 2026 GMT
        Subject: CN=289A1D470B050A79570C326AD99EFCB27E3CA259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:e5:9d:07:0b:b8:18:32:06:be:6b:db:31:
                    6e:61:e7:24:cb:dc:6a:63:b5:2d:7f:92:d0:e2:19:
                    f4:96:b7:01:12:07:80:86:ba:42:80:b8:54:7a:0b:
                    d5:62:f1:88:eb:98:30:56:cb:d4:ab:bf:fb:44:ea:
                    ba:4f:e0:c0:23:67:ce:37:24:75:e2:cd:12:28:75:
                    ff:f1:9a:f1:a6:c4:a2:61:af:ef:ac:1e:2a:b4:34:
                    f8:93:30:9a:66:11:eb:7e:fc:66:f8:0b:49:41:ec:
                    9e:b7:c2:c6:e7:8a:dd:68:35:56:58:70:0b:df:79:
                    df:dc:f3:08:91:62:36:32:96:9b:63:21:c0:2a:fb:
                    33:4d:f6:bc:f3:0f:9c:d3:df:f0:d2:a8:ce:4c:fb:
                    00:4d:61:86:1d:f7:eb:f7:6e:10:05:dd:ab:3e:5f:
                    79:e0:ff:30:71:d3:c5:33:2b:b5:45:30:05:18:c4:
                    06:e0:f3:fc:e2:5f:ef:ba:70:52:f6:30:e3:6d:52:
                    f6:d5:ea:fe:ce:1c:a1:e4:6a:aa:4d:d5:ad:d2:a2:
                    90:c3:26:5c:9d:c9:3a:74:2e:52:ee:59:d3:81:be:
                    58:0a:37:35:4d:88:ad:72:ab:b9:8f:89:c4:87:96:
                    94:8c:38:dd:ee:2e:af:92:15:e1:48:9a:2f:c2:a2:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9A:1D:47:0B:05:0A:79:57:0C:32:6A:D9:9E:FC:B2:7E:3C:A2:59
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233322e302f32332d3233203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:e6:34:1b:34:42:b7:5a:1a:43:e7:1d:7d:1d:5f:9a:67:ff:
         44:e8:9c:ca:ee:96:b6:23:71:58:f9:59:6c:f9:0b:73:1a:37:
         e3:9d:61:e7:c3:72:59:67:c6:f5:89:f7:3a:61:c3:e3:c7:eb:
         47:2b:14:62:aa:c7:4a:fd:ac:57:fb:ea:9c:45:e1:cc:88:7b:
         32:65:8e:cf:80:a0:e0:fe:5a:1e:ae:6c:b7:d1:aa:c2:17:dd:
         93:40:92:ea:c0:ad:7a:63:d3:2e:97:66:7a:a4:2e:a7:8f:86:
         f9:78:d5:1b:c2:99:17:c5:e4:9e:6d:86:62:52:25:22:c2:58:
         35:bd:1d:f4:90:6e:d3:61:b2:cf:1d:dc:19:6c:50:06:7b:f3:
         bb:48:04:eb:97:43:ed:8a:17:44:95:34:c8:3e:a4:2b:05:72:
         1f:63:a4:f2:19:eb:77:07:ea:cb:22:b2:ce:c5:71:a6:8d:63:
         37:7e:11:9f:70:1a:c5:f3:ba:96:81:ff:ac:91:0e:e0:9a:b4:
         fc:96:7e:29:93:c0:40:9d:2d:2e:8b:c0:2d:4d:a1:1b:3f:58:
         cf:8f:5d:34:2c:cb:3b:e6:c3:51:85:ee:ff:b5:74:45:2f:e3:
         c1:90:dd:78:3e:7e:32:c4:91:8d:49:f8:5d:18:97:8c:fd:f8:
         d7:f7:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:03 2025 by rpki-client