This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/323830343a373065383a3a2f33322d313238203d3e20323730373535.roa
File:                     323830343a373065383a3a2f33322d313238203d3e20323730373535.roa (raw, json)
Hash identifier:          WFfr+TvX6VUyN+uU+tX9cJIIbzk37xHd/Sm9iaqDzc4=
Subject key identifier:   08:E5:E7:31:5F:41:98:2E:83:95:74:10:77:63:16:2D:38:42:8C:A7
Certificate issuer:       /CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
Certificate serial:       7202EF87501380BC91F719EE1BC4D22D5F557730
Authority key identifier: 7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/323830343a373065383a3a2f33322d313238203d3e20323730373535.roa
Signing time:             Sat 22 Nov 2025 14:46:12 +0000
ROA not before:           Sat 22 Nov 2025 14:41:12 +0000
ROA not after:            Sat 21 Nov 2026 14:46:12 +0000
asID:                     270755
IP address blocks:        2804:70e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl
                          rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 05:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:02:ef:87:50:13:80:bc:91:f7:19:ee:1b:c4:d2:2d:5f:55:77:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
        Validity
            Not Before: Nov 22 14:41:12 2025 GMT
            Not After : Nov 21 14:46:12 2026 GMT
        Subject: CN=08E5E7315F41982E839574107763162D38428CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:29:54:b8:bd:2f:ed:2e:75:59:9f:4f:4c:
                    e1:7f:9b:a1:7c:b1:56:c6:d0:f8:55:9b:89:75:c1:
                    dd:f0:40:b3:52:27:d4:ed:76:1f:e6:37:2e:e4:30:
                    e8:7a:3c:db:f5:de:26:7f:e1:a6:b9:fc:58:38:42:
                    65:55:e1:50:70:15:3d:c9:22:59:94:51:af:e1:b0:
                    72:84:84:18:6a:11:b5:ba:62:5c:11:86:bd:d3:b4:
                    d5:e6:81:3f:84:a3:0b:bf:00:83:3e:4b:75:02:0a:
                    45:ac:31:7f:3a:5e:dc:68:51:81:36:3c:48:46:c3:
                    b9:05:f1:ae:a1:b1:55:c2:96:49:3d:e2:9f:85:1c:
                    76:f9:32:3c:66:0b:1b:2d:c6:f2:20:4a:dc:3d:a9:
                    15:2f:10:36:0d:57:41:cd:37:7c:29:e3:be:d5:00:
                    11:56:5f:4a:23:46:ac:e7:3d:ab:74:5d:e1:ad:cb:
                    54:d9:13:fe:8e:05:c5:55:e6:d9:1b:36:9f:13:6d:
                    ee:19:6d:36:5f:b9:0a:b9:18:c7:7f:db:3a:e5:67:
                    93:75:34:15:bc:4b:5c:81:05:a5:04:f5:ed:0d:30:
                    02:51:d8:05:5f:f1:bd:f4:39:f0:5f:f4:81:33:45:
                    75:54:84:c0:f5:a4:e6:bb:1a:68:54:be:d1:ac:00:
                    0d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E5:E7:31:5F:41:98:2E:83:95:74:10:77:63:16:2D:38:42:8C:A7
            X509v3 Authority Key Identifier:
                keyid:7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/323830343a373065383a3a2f33322d313238203d3e20323730373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:98:bb:aa:a0:1b:b0:79:20:b6:7c:05:56:18:47:d2:4c:b6:
         ed:87:cc:85:50:d4:c3:6c:b7:6a:01:12:b2:a8:59:85:80:50:
         ff:fd:7b:6a:2d:93:f2:f7:de:23:68:b1:04:cc:9d:2b:51:a2:
         15:9a:e6:88:ac:97:6f:79:af:e6:b4:ed:8d:7c:81:9a:18:d8:
         5c:9a:21:45:b3:3c:5e:e6:a3:7d:10:08:c9:11:0f:69:b3:e3:
         60:77:5b:77:bf:c7:36:62:cf:95:50:98:d9:c2:69:80:33:f0:
         fe:3a:ac:dd:8f:80:47:3d:a4:8d:4f:3b:31:18:a4:54:0a:36:
         cd:44:21:88:1e:1d:5e:cd:95:94:fa:1f:2e:43:51:3a:17:fb:
         f7:08:8e:0f:1e:58:53:b7:25:de:e5:59:ee:a6:36:a3:46:69:
         3d:50:53:b5:09:a1:79:00:f9:b0:24:e8:b8:4d:01:88:51:7f:
         f7:94:03:80:cc:cf:7d:47:3f:a6:98:33:67:71:61:38:21:54:
         db:f2:07:c8:bf:f7:5c:40:0c:9e:1a:5d:9a:2b:74:82:62:22:
         ce:ec:f2:01:b1:96:51:61:dc:22:bc:f1:3a:e6:2a:d1:12:ba:
         b8:6e:87:b4:47:65:12:70:4c:fa:0f:37:ca:4c:ea:a2:f8:2e:
         49:4b:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:04:24 2025 by rpki-client