This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a616161613a3a2f34382d3438203d3e20323635333834.roa
File:                     323830343a333334303a616161613a3a2f34382d3438203d3e20323635333834.roa (raw, json)
Hash identifier:          CLQkrYyCF4UfIHzlHANmCr1YFJReaJC69m8D68Uuz+o=
Subject key identifier:   6B:B8:7E:C9:92:5C:3C:10:53:F1:E7:40:58:C8:55:63:4F:91:6A:C8
Certificate issuer:       /CN=2AAD0546D869051DF88F8860A3540C3582BA1456
Certificate serial:       266FC5ECE4D9934812C314A54EDDA89C99282FC3
Authority key identifier: 2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a616161613a3a2f34382d3438203d3e20323635333834.roa
Signing time:             Wed 03 Dec 2025 15:17:25 +0000
ROA not before:           Wed 03 Dec 2025 15:12:25 +0000
ROA not after:            Wed 02 Dec 2026 15:17:25 +0000
asID:                     265384
IP address blocks:        2804:3340:aaaa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6f:c5:ec:e4:d9:93:48:12:c3:14:a5:4e:dd:a8:9c:99:28:2f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAD0546D869051DF88F8860A3540C3582BA1456
        Validity
            Not Before: Dec  3 15:12:25 2025 GMT
            Not After : Dec  2 15:17:25 2026 GMT
        Subject: CN=6BB87EC9925C3C1053F1E74058C855634F916AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:a3:0d:55:5e:94:27:95:12:c6:99:ac:b4:
                    18:9f:d0:a1:ed:fd:74:e2:5d:d4:5f:40:b2:c3:8a:
                    f7:1e:9d:cf:1b:a1:f4:35:97:82:dc:3f:f7:1c:ad:
                    35:3a:6f:e5:47:d1:f3:1e:85:f0:07:dd:4f:96:6e:
                    72:4c:50:0d:67:2b:8d:09:4a:cc:2a:1a:0b:99:61:
                    b6:59:11:cd:44:ac:27:08:cc:1f:b7:4b:b6:84:93:
                    a6:61:c2:36:60:c8:c9:0c:e4:15:65:ee:0a:fc:7c:
                    c2:ab:93:70:9d:95:fc:05:d7:da:ce:07:d2:be:1e:
                    a0:ef:6d:4f:46:33:10:7a:0c:af:a0:04:17:e8:86:
                    0c:60:20:73:2c:cd:f9:5e:68:a3:b5:8f:9f:39:38:
                    43:ff:ae:95:70:b3:74:35:cb:f8:3f:09:33:10:cc:
                    e3:b4:53:20:00:c7:fe:5a:6a:08:87:64:11:f6:4f:
                    6f:c7:d1:8f:45:ef:20:48:73:be:ae:aa:ef:4a:01:
                    ff:6e:d9:73:1d:99:28:00:07:73:60:dd:51:58:7d:
                    47:12:93:10:37:49:6a:4b:23:af:11:72:e4:12:d6:
                    82:c8:38:bf:ff:89:ae:6b:f4:5a:b8:4a:92:5b:f1:
                    f0:bf:30:4b:97:12:e4:5b:cf:b6:7e:f2:2c:52:cd:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B8:7E:C9:92:5C:3C:10:53:F1:E7:40:58:C8:55:63:4F:91:6A:C8
            X509v3 Authority Key Identifier:
                keyid:2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a616161613a3a2f34382d3438203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340:aaaa::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:01:e7:ae:83:4a:41:3b:17:b9:ce:fe:bd:5d:17:5a:36:
         35:fa:e5:52:f0:33:3a:e7:48:31:c5:5a:c6:35:26:88:3e:01:
         dc:b1:c7:6d:be:13:93:7b:72:dc:d2:7a:e8:ab:83:e5:d9:32:
         88:5c:43:a8:35:63:62:3a:2d:6d:1f:de:f0:63:60:28:1a:19:
         d7:d3:72:f3:2f:5d:f1:34:81:97:8c:cc:ea:69:56:37:f2:fe:
         4c:27:d0:d9:4d:4d:c5:67:dc:27:24:72:53:9c:af:c5:33:e6:
         7b:58:60:9f:55:65:84:bd:9e:80:52:11:df:8e:91:ad:ee:9c:
         68:1a:52:e1:fb:8c:4a:ba:20:07:4c:85:0e:fd:d8:66:3c:df:
         53:9f:e9:ea:f2:82:21:58:31:50:7c:ec:c8:1c:e1:94:69:9b:
         2c:5c:ca:2d:b7:1d:87:0c:2a:94:f1:71:0b:07:e0:d1:01:1d:
         58:bf:de:be:87:0c:6e:2d:2c:aa:ab:1a:d7:a7:59:d0:24:1e:
         47:1c:b2:7a:13:0b:d9:6a:33:ff:6e:a0:89:fe:16:5d:8c:a0:
         78:fe:eb:21:6b:dd:3d:5f:03:a7:37:9c:4d:4f:6c:89:51:d5:
         aa:f2:fe:c9:90:c4:6e:18:42:ea:3f:98:0a:c5:ed:67:e4:3d:
         91:0f:49:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:28 2025 by rpki-client