This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/323830343a333163303a3a2f33322d3438203d3e20323632343338.roa
File:                     323830343a333163303a3a2f33322d3438203d3e20323632343338.roa (raw, json)
Hash identifier:          RuLwpb36Mc/aQP5+sXykZeAX0jgsnSK9Ur8mUN1VxfU=
Subject key identifier:   7F:FC:0A:4A:99:2E:4E:02:D5:61:77:2C:D8:F0:66:AE:D5:14:E2:9D
Certificate issuer:       /CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Certificate serial:       496DEED764E51AE57945F7402D1157DE0298BC1D
Authority key identifier: AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/323830343a333163303a3a2f33322d3438203d3e20323632343338.roa
Signing time:             Mon 24 Nov 2025 16:21:06 +0000
ROA not before:           Mon 24 Nov 2025 16:16:06 +0000
ROA not after:            Mon 23 Nov 2026 16:21:06 +0000
asID:                     262438
IP address blocks:        2804:31c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl
                          rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6d:ee:d7:64:e5:1a:e5:79:45:f7:40:2d:11:57:de:02:98:bc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
        Validity
            Not Before: Nov 24 16:16:06 2025 GMT
            Not After : Nov 23 16:21:06 2026 GMT
        Subject: CN=7FFC0A4A992E4E02D561772CD8F066AED514E29D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:a5:9c:52:e3:20:b3:db:5e:79:18:d8:7e:
                    e0:92:c0:56:b2:7f:68:a7:5f:13:15:f6:53:47:ec:
                    64:70:04:01:0a:2a:a1:50:49:95:6d:d0:97:23:e4:
                    aa:b0:9c:20:fd:4a:cc:56:c9:01:60:a1:3a:31:e5:
                    16:ca:b3:99:36:1e:a8:94:ca:13:a0:07:ca:d3:4f:
                    7a:da:1d:fa:14:25:4e:bf:09:65:0e:09:a5:4b:80:
                    fb:c1:de:70:9c:69:b6:60:cc:33:60:cd:67:87:cf:
                    03:a2:94:46:8d:4a:68:49:56:5f:d3:9c:9b:5f:38:
                    39:cf:5e:4d:fb:c2:07:80:67:9e:e3:23:99:44:1b:
                    78:45:5a:e7:1a:e5:10:c4:e0:3c:32:e6:bf:6c:51:
                    2d:76:f4:76:f3:93:ea:44:33:8b:75:b2:57:ce:ac:
                    48:49:80:4d:13:e2:dd:2b:cd:8b:71:73:1f:0c:be:
                    23:e8:2e:e0:90:5a:31:6a:e4:ad:d8:91:70:8a:10:
                    69:bd:8a:9e:cf:8c:fa:ac:76:b4:90:3b:4c:73:0b:
                    9d:78:33:ed:83:16:a8:24:eb:06:ab:16:ac:8d:d4:
                    bb:a8:a8:06:49:01:a6:ca:bb:9f:62:2d:4a:10:40:
                    42:80:06:58:8e:0a:32:32:7d:b2:0d:5f:8f:9e:0e:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FC:0A:4A:99:2E:4E:02:D5:61:77:2C:D8:F0:66:AE:D5:14:E2:9D
            X509v3 Authority Key Identifier:
                keyid:AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/323830343a333163303a3a2f33322d3438203d3e20323632343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:2f:aa:13:f1:29:08:31:7d:c2:32:24:9a:ea:dc:1d:56:
         e4:7c:fb:59:ed:9e:e2:2b:1e:d0:c9:b7:a9:14:a3:a8:54:f3:
         96:86:d6:6c:c3:2f:4a:ca:86:32:bc:c0:8f:3c:77:af:bc:4e:
         1c:9b:2e:93:52:be:3e:e9:67:21:85:71:06:71:f7:1b:82:f2:
         59:fb:35:12:a0:10:04:e2:11:12:d1:0b:d2:d4:14:fd:86:2b:
         06:89:2f:da:03:2e:cb:1a:f7:04:2f:9d:2e:bb:f0:64:5b:8b:
         32:03:a7:c4:56:61:d1:e7:cc:f2:c4:28:5f:77:fa:b1:f3:1e:
         5d:f1:97:16:8f:45:87:03:31:1e:19:f1:25:1f:22:9d:37:d1:
         72:98:c8:6a:53:7e:71:74:7a:ee:19:5a:12:9b:c5:a4:d2:73:
         ec:f2:22:23:7e:ee:c0:a6:0d:18:b8:a8:75:65:e4:2d:10:4b:
         fa:f4:c2:74:5a:17:5f:08:d9:56:18:10:29:ab:d0:b8:38:18:
         5f:33:a1:02:a4:f2:fd:04:3b:86:99:29:f0:0a:1f:0f:81:ad:
         e8:30:eb:f7:f5:b4:9b:b4:da:23:79:3b:1d:22:04:fc:04:ff:
         32:b4:a1:e2:ee:51:03:61:08:24:1d:69:6e:dd:c8:7b:34:72:
         8a:8a:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:13 2025 by rpki-client