This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/323830343a343330633a3a2f33322d3438203d3e20323637353435.roa
File:                     323830343a343330633a3a2f33322d3438203d3e20323637353435.roa (raw, json)
Hash identifier:          afHIkl2ux+0OhHP19wiq8+BBqQcCDLyCoRnxbTi2ebc=
Subject key identifier:   4D:F8:1F:5F:F9:56:EF:46:81:C7:CA:03:6D:92:9A:74:EE:3E:C6:52
Certificate issuer:       /CN=939548073F543A96CBE8D1DFAAA6AC3DEAE05A18
Certificate serial:       75E1DE927F790E87E75077FF679CF85EF8BF16FB
Authority key identifier: 93:95:48:07:3F:54:3A:96:CB:E8:D1:DF:AA:A6:AC:3D:EA:E0:5A:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/323830343a343330633a3a2f33322d3438203d3e20323637353435.roa
Signing time:             Mon 01 Dec 2025 19:18:28 +0000
ROA not before:           Mon 01 Dec 2025 19:13:28 +0000
ROA not after:            Mon 30 Nov 2026 19:18:28 +0000
asID:                     267545
IP address blocks:        2804:430c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.crl
                          rsync://rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 01:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e1:de:92:7f:79:0e:87:e7:50:77:ff:67:9c:f8:5e:f8:bf:16:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=939548073F543A96CBE8D1DFAAA6AC3DEAE05A18
        Validity
            Not Before: Dec  1 19:13:28 2025 GMT
            Not After : Nov 30 19:18:28 2026 GMT
        Subject: CN=4DF81F5FF956EF4681C7CA036D929A74EE3EC652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:29:ed:7b:95:df:c5:21:34:b8:80:f7:ce:
                    e3:fb:7a:3e:3d:bc:47:6f:c1:2b:5d:4e:0f:be:d6:
                    9b:ae:fd:ec:e7:fd:f5:5f:94:8c:86:e6:ed:47:c9:
                    7b:ec:21:57:b4:9b:69:30:be:c5:af:ad:72:2f:32:
                    04:0c:75:85:bb:c4:60:76:da:78:2b:8c:3c:d4:5a:
                    82:a0:b6:d3:42:ce:e4:90:d0:1d:2e:fd:27:a2:ae:
                    6b:55:6f:5a:36:93:09:b6:98:aa:ad:1d:3d:42:e6:
                    6e:f3:4b:6f:cf:39:56:d5:8e:e0:de:64:32:3b:ff:
                    1c:95:93:a7:15:d4:d9:81:11:cf:0f:62:e2:e2:a5:
                    0e:78:24:c9:97:6b:df:0c:4c:0b:a4:ef:cd:14:ea:
                    1b:09:9b:18:9c:aa:ba:26:58:c4:9a:dd:4b:ac:5d:
                    93:a6:21:87:7c:83:ea:03:38:fa:fd:b6:41:cb:f7:
                    8e:a1:fb:3a:b9:39:df:ff:ac:40:5b:18:53:f5:08:
                    fa:39:46:5b:bc:50:74:1b:4a:ce:8c:a6:da:30:67:
                    eb:81:16:ce:01:1b:ff:cd:3e:a6:f7:76:26:59:f4:
                    f9:7b:a1:cb:e1:9e:41:c8:16:9d:51:b9:a6:75:65:
                    85:7d:72:c8:e3:50:55:29:85:14:dd:4a:06:af:aa:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F8:1F:5F:F9:56:EF:46:81:C7:CA:03:6D:92:9A:74:EE:3E:C6:52
            X509v3 Authority Key Identifier:
                keyid:93:95:48:07:3F:54:3A:96:CB:E8:D1:DF:AA:A6:AC:3D:EA:E0:5A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939548073F543A96CBE8D1DFAAA6AC3DEAE05A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/275zbDwmXArqELRQWZBpccf1f4XP1SpEdpU9phgeByuj/0/323830343a343330633a3a2f33322d3438203d3e20323637353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:430c::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:d8:14:ec:e6:70:f8:b5:58:0c:3d:05:47:22:41:76:40:62:
         10:1f:5e:76:90:ba:49:89:b8:74:38:84:c4:e9:89:38:88:68:
         b8:e5:68:af:63:04:fd:86:ee:f2:20:91:cc:00:04:86:9c:c3:
         02:55:3f:28:1b:3d:82:53:b3:9a:bf:fd:8c:38:e3:6d:43:29:
         d5:0f:a5:2c:95:fb:d7:60:ce:4e:9d:a7:ce:f1:8a:0e:44:67:
         b7:23:d8:3c:3a:15:e8:e4:06:97:d2:ea:4b:1d:a8:ba:8b:ba:
         69:48:f8:64:21:05:ec:d6:37:3d:82:47:15:ff:c2:98:47:55:
         19:fc:05:f9:54:c2:f1:60:37:bf:c3:cb:09:63:84:a0:e6:ec:
         d8:eb:97:ca:b1:d3:4a:f1:4a:47:8d:bb:09:cc:eb:a5:f2:c6:
         8f:2d:91:d8:e2:7a:c3:cd:58:67:56:d5:52:9e:67:28:71:de:
         c3:43:39:f2:41:7b:5a:78:64:31:50:2c:a6:e9:f4:75:63:5a:
         52:1a:3a:15:0c:27:5d:99:e3:f3:c6:5e:82:3c:b2:6d:ec:a1:
         a7:da:be:79:f9:82:3d:33:c2:db:9f:9e:fd:4d:e5:2c:70:99:
         05:2a:2a:e6:0b:e5:e4:c3:86:33:c8:7c:c4:38:c8:ce:2d:12:
         1a:de:08:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:57:04 2025 by rpki-client