This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa
File:                     323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa (raw, json)
Hash identifier:          N3mCp++MDinHFuWUQ+R+VRsBroxsU4b7yMGKueReEsc=
Subject key identifier:   8C:CD:E5:94:A7:F0:15:B3:7C:FD:58:8B:DF:EC:C3:C4:2B:AA:CD:A9
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       041D6671C853244AB47E9B595A70D73152C12B59
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa
Signing time:             Tue 02 Dec 2025 19:03:44 +0000
ROA not before:           Tue 02 Dec 2025 18:58:44 +0000
ROA not after:            Tue 01 Dec 2026 19:03:44 +0000
asID:                     61587
IP address blocks:        2804:3300:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1d:66:71:c8:53:24:4a:b4:7e:9b:59:5a:70:d7:31:52:c1:2b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec  2 18:58:44 2025 GMT
            Not After : Dec  1 19:03:44 2026 GMT
        Subject: CN=8CCDE594A7F015B37CFD588BDFECC3C42BAACDA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d7:2d:07:49:ff:f2:e0:c7:1f:75:d7:1d:b5:
                    34:33:2d:dc:2d:9c:2d:d0:93:1d:4c:e5:03:51:bb:
                    75:2f:e8:3a:c6:bc:8b:fc:a7:d5:81:7d:b3:b6:27:
                    8a:b5:c2:79:a3:39:c3:cb:89:cb:64:93:1a:b2:d6:
                    6f:0c:7f:35:8c:04:c2:4c:b2:a4:ed:4c:da:23:ad:
                    18:76:c4:c1:36:15:bd:d1:a4:b0:a6:03:0d:82:35:
                    ce:e0:10:25:b4:f7:0e:25:fb:76:39:1c:e5:06:52:
                    df:37:9d:34:b6:32:5d:78:88:d9:44:e8:fc:af:0a:
                    ce:03:1f:cb:8b:7f:ed:81:c8:3a:a6:f9:a4:46:3b:
                    07:f3:88:83:e6:7f:a2:9d:03:ce:76:eb:05:76:53:
                    99:12:ca:51:df:98:e1:2b:0f:fc:d6:ba:ec:99:08:
                    f1:da:23:f6:42:48:c9:01:50:f3:53:fc:33:f7:0a:
                    33:ef:00:cf:d9:36:6f:80:8c:93:42:db:33:21:98:
                    52:28:a3:f4:62:66:ba:02:d1:15:ce:88:97:90:aa:
                    b7:99:85:24:b3:7f:d5:a9:a0:a6:80:b8:f9:ae:b3:
                    c4:7c:c8:ad:2c:43:83:33:b8:58:8b:dd:c4:2e:2f:
                    d8:26:92:07:f1:05:52:af:cc:4a:52:83:a2:fa:ca:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CD:E5:94:A7:F0:15:B3:7C:FD:58:8B:DF:EC:C3:C4:2B:AA:CD:A9
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:43:4e:53:3f:10:e2:51:84:97:2c:d3:c6:7e:98:77:6e:
         b3:e4:cb:32:43:36:9c:dd:87:54:1b:58:7a:f2:8c:e9:4a:7d:
         10:6f:e3:c9:04:c7:d5:3e:f7:62:e6:c1:13:e1:f1:d0:00:e3:
         ef:db:c0:f8:1f:7f:ba:b4:b9:e4:e5:e6:f3:04:6c:da:1a:51:
         45:b6:ed:a5:7f:e3:de:d6:87:a0:02:09:df:2c:ca:54:ed:0c:
         16:34:ed:af:7a:23:41:3d:d0:63:26:84:05:91:9e:7b:d6:1a:
         eb:85:f3:c9:46:87:ce:9b:fa:6e:f5:2d:f6:c5:c3:b6:5c:ae:
         ab:3a:52:3c:77:a6:ad:ff:69:20:e6:11:40:5e:64:a8:dd:c5:
         be:6a:47:b3:4c:bb:8a:67:4d:2c:f6:45:d6:61:1e:6e:28:05:
         93:8f:34:25:8a:77:71:ed:29:90:4f:12:a4:9e:05:07:20:b6:
         7a:eb:2f:ec:d1:56:92:bf:a6:de:5f:b6:12:67:24:f9:f8:de:
         5d:d5:6e:64:ee:c8:f8:17:f8:28:92:13:0c:bc:2c:e6:bc:dd:
         96:5f:56:53:e4:ac:2d:43:b6:62:0f:46:3b:80:f0:b1:c3:fc:
         5b:fd:ec:42:cb:2b:ed:21:a8:b9:16:23:12:65:31:d3:47:dd:
         ab:2c:9c:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBB1mcchTJEq0fptZWnDXMVLBK1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2
RjVFRjEwQjAeFw0yNTEyMDIxODU4NDRaFw0yNjEyMDExOTAzNDRaMDMxMTAvBgNV
BAMTKDhDQ0RFNTk0QTdGMDE1QjM3Q0ZENTg4QkRGRUNDM0M0MkJBQUNEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt1y0HSf/y4McfddcdtTQzLdwt
nC3Qkx1M5QNRu3Uv6DrGvIv8p9WBfbO2J4q1wnmjOcPLictkkxqy1m8MfzWMBMJM
sqTtTNojrRh2xME2Fb3RpLCmAw2CNc7gECW09w4l+3Y5HOUGUt83nTS2Ml14iNlE
6PyvCs4DH8uLf+2ByDqm+aRGOwfziIPmf6KdA8526wV2U5kSylHfmOErD/zWuuyZ
CPHaI/ZCSMkBUPNT/DP3CjPvAM/ZNm+AjJNC2zMhmFIoo/RiZroC0RXOiJeQqreZ
hSSzf9WpoKaAuPmus8R8yK0sQ4MzuFiL3cQuL9gmkgfxBVKvzEpSg6L6ytNrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjM3llKfwFbN8/ViL3+zDxCuqzakwHwYDVR0j
BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx
NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzIzODMwMzQzYTMzMzMzMDMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBDMAgDANBgkqhkiG9w0BAQsFAAOC
AQEAj1tDTlM/EOJRhJcs08Z+mHdus+TLMkM2nN2HVBtYevKM6Up9EG/jyQTH1T73
YubBE+Hx0ADj79vA+B9/urS55OXm8wRs2hpRRbbtpX/j3taHoAIJ3yzKVO0MFjTt
r3ojQT3QYyaEBZGee9Ya64XzyUaHzpv6bvUt9sXDtlyuqzpSPHemrf9pIOYRQF5k
qN3FvmpHs0y7imdNLPZF1mEebigFk480JYp3ce0pkE8SpJ4FByC2eusv7NFWkr+m
3l+2Emck+fjeXdVuZO7I+Bf4KJITDLws5rzdll9WU+SsLUO2Yg9GO4DwscP8W/3s
Qssr7SGouRYjEmUx00fdqyycjw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:41:32 2025 by rpki-client