This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/323830343a326264343a3a2f33322d313238203d3e20323635313738.roa
File:                     323830343a326264343a3a2f33322d313238203d3e20323635313738.roa (raw, json)
Hash identifier:          7ywFgKVjmbXsMwVEoK97oW/1og1m1Xc7qoVNI+k9lyY=
Subject key identifier:   CE:12:2A:63:E1:17:EB:D6:B0:91:2F:C2:0B:0D:97:24:44:06:FB:23
Certificate issuer:       /CN=C6F2F168722913092426893B17EE2FFE4B78B63A
Certificate serial:       4ACE6C18A34E2956705070F09529B68C7B755420
Authority key identifier: C6:F2:F1:68:72:29:13:09:24:26:89:3B:17:EE:2F:FE:4B:78:B6:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/323830343a326264343a3a2f33322d313238203d3e20323635313738.roa
Signing time:             Thu 20 Nov 2025 15:09:16 +0000
ROA not before:           Thu 20 Nov 2025 15:04:16 +0000
ROA not after:            Thu 19 Nov 2026 15:09:16 +0000
asID:                     265178
IP address blocks:        2804:2bd4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.crl
                          rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ce:6c:18:a3:4e:29:56:70:50:70:f0:95:29:b6:8c:7b:75:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F2F168722913092426893B17EE2FFE4B78B63A
        Validity
            Not Before: Nov 20 15:04:16 2025 GMT
            Not After : Nov 19 15:09:16 2026 GMT
        Subject: CN=CE122A63E117EBD6B0912FC20B0D97244406FB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f1:15:99:10:51:be:9c:5c:96:65:cb:8f:3d:
                    dd:36:00:b2:b9:9d:d7:27:be:68:c0:7d:1c:d0:c7:
                    e8:0d:4a:64:9c:11:91:a3:72:e4:09:07:b0:5b:76:
                    5c:0c:d2:85:3a:20:f4:4f:84:64:e1:d3:a4:68:10:
                    a7:6b:3f:79:0c:19:ae:95:88:a4:d1:71:a6:f6:be:
                    a0:29:c2:73:5b:c5:10:58:5c:60:cd:b4:90:ca:ab:
                    83:a5:7f:fd:3a:42:e6:84:c6:d3:d4:56:2b:b3:25:
                    a6:59:04:60:a6:4f:cc:a2:c4:70:c6:61:e3:8a:2b:
                    78:4a:c5:a9:2d:8e:f5:48:bb:61:d5:41:6e:bd:b5:
                    20:d2:6b:3f:83:de:52:fe:d0:42:82:50:66:c2:4a:
                    f7:12:20:38:ad:be:34:57:cc:14:33:39:f1:2d:7a:
                    d6:ec:41:52:de:09:6a:65:a8:da:8c:88:d6:85:52:
                    b6:e1:ef:6b:30:b3:c9:8c:68:51:fe:eb:27:33:a8:
                    26:57:98:fc:68:74:49:e0:51:90:01:64:1f:db:f0:
                    ef:bd:91:11:a8:3d:e4:8c:58:01:3d:61:77:98:7f:
                    fa:9d:24:ce:38:0f:f7:91:c8:4d:3d:b7:c0:3b:29:
                    0c:73:ae:e6:41:33:6f:34:bd:aa:e1:ce:be:a9:b2:
                    61:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:12:2A:63:E1:17:EB:D6:B0:91:2F:C2:0B:0D:97:24:44:06:FB:23
            X509v3 Authority Key Identifier:
                keyid:C6:F2:F1:68:72:29:13:09:24:26:89:3B:17:EE:2F:FE:4B:78:B6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/323830343a326264343a3a2f33322d313238203d3e20323635313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:67:3d:59:eb:9a:94:46:56:d4:86:fe:7e:b2:1c:0a:11:a1:
         8f:72:1c:36:ac:eb:8f:9e:16:6c:9d:89:5c:bc:49:c8:db:32:
         6f:a4:29:ce:d1:a8:d3:4f:73:87:fb:d3:81:02:31:cf:ac:13:
         92:0b:d9:c0:f3:61:35:d8:b1:6e:5e:66:0c:ef:2e:41:7e:30:
         08:a4:cd:78:bd:e3:4e:1f:a2:48:1a:9a:f8:82:c3:af:f0:a1:
         7d:06:6d:a1:3a:41:0c:41:65:7f:c9:ea:23:83:8f:71:89:b3:
         83:94:a2:e9:b6:f1:fd:e1:d5:97:07:e0:9b:26:c0:90:52:c9:
         db:9a:d0:66:c9:45:d4:61:09:a9:9d:be:b0:2d:1f:38:b0:0f:
         ea:2f:f9:15:ac:25:8b:1d:f4:76:08:db:4c:0d:87:08:3c:3d:
         5b:8c:e7:94:a6:2f:96:82:ea:aa:bb:06:99:66:ed:f2:ed:11:
         23:4c:16:fc:1f:4a:db:4a:89:ab:af:dc:fd:4a:ba:03:a8:2e:
         45:a2:36:1e:42:76:3a:6a:57:db:1f:ef:8b:18:46:e8:16:71:
         22:11:1b:ea:bb:af:96:a2:a0:04:36:ea:da:9a:b1:74:21:15:
         22:8b:6e:da:ab:fb:9b:5e:61:93:92:72:2d:5a:ed:85:3a:f0:
         26:2a:06:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:08 2025 by rpki-client