This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa
File:                     323830343a316539343a3a2f33322d3336203d3e20323634343337.roa (raw, json)
Hash identifier:          /nNhbzcMxocWb8NpfSdXH2YaAvGuJQfnKApielj8ed8=
Subject key identifier:   C3:C6:33:EB:99:DE:8D:02:1E:32:6E:F9:33:EF:D7:6B:28:73:B9:79
Certificate issuer:       /CN=C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D
Certificate serial:       2EA1D54A33ADE337F1A5DBE16F4A4F78B079198E
Authority key identifier: C3:EB:30:A1:53:10:A6:A8:DC:30:7B:E0:3C:15:13:ED:B5:F0:7C:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa
Signing time:             Mon 10 Nov 2025 18:48:53 +0000
ROA not before:           Mon 10 Nov 2025 18:43:53 +0000
ROA not after:            Mon 09 Nov 2026 18:48:53 +0000
asID:                     264437
IP address blocks:        2804:1e94::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.crl
                          rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a1:d5:4a:33:ad:e3:37:f1:a5:db:e1:6f:4a:4f:78:b0:79:19:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D
        Validity
            Not Before: Nov 10 18:43:53 2025 GMT
            Not After : Nov  9 18:48:53 2026 GMT
        Subject: CN=C3C633EB99DE8D021E326EF933EFD76B2873B979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:c4:e3:cd:9d:32:26:6a:3b:73:d5:4a:97:
                    2a:f5:d3:44:33:a4:89:6c:fb:18:75:81:ff:fa:eb:
                    9a:c0:43:d0:42:ad:34:39:d1:f5:42:12:c9:fa:14:
                    59:2b:67:f1:00:f7:14:50:e8:d3:78:72:92:4d:67:
                    9c:ba:9c:04:41:1c:2c:f6:ff:a3:8a:04:e6:27:d5:
                    ac:8e:f1:2d:60:e7:cf:57:04:52:18:d5:bf:8a:76:
                    95:4d:c7:44:4d:da:8b:14:1f:99:9e:0c:ec:34:24:
                    c8:c4:f3:29:2b:44:d1:37:59:25:11:d0:e7:a2:15:
                    8c:5f:60:e7:7f:0f:b5:ad:aa:3a:d3:56:8a:cb:96:
                    e2:07:da:65:4c:55:9e:85:30:47:0c:1e:24:20:bc:
                    f7:8e:45:83:01:f1:a3:66:b0:bc:bf:ea:ee:ea:4f:
                    c5:36:53:21:83:42:e7:fe:82:cf:b4:db:d7:63:8f:
                    70:ba:fe:6a:29:a9:ea:c3:df:69:b1:7f:f1:09:4d:
                    53:4d:3b:9c:e5:29:9b:58:98:a0:86:4a:1b:b2:5a:
                    7d:ed:1e:73:77:1b:ed:90:1f:fd:37:c5:56:07:9d:
                    66:39:75:5d:02:8c:02:b8:08:70:34:56:c9:75:ea:
                    5a:20:9b:75:c9:16:63:31:0b:0f:b3:c6:db:ba:dd:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C6:33:EB:99:DE:8D:02:1E:32:6E:F9:33:EF:D7:6B:28:73:B9:79
            X509v3 Authority Key Identifier:
                keyid:C3:EB:30:A1:53:10:A6:A8:DC:30:7B:E0:3C:15:13:ED:B5:F0:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e94::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:cc:8c:6e:9e:71:01:40:66:54:b6:88:9f:59:3c:e3:ba:5b:
         06:1c:8c:77:c0:8f:67:ef:5b:3b:12:2d:55:c5:fb:cd:c0:31:
         33:3c:72:24:52:45:5d:2b:2d:20:8c:fd:3b:08:e7:f2:47:15:
         bd:fe:9e:79:a1:87:f7:2c:f4:f3:3b:2f:8e:ec:fa:c7:7f:c2:
         53:4a:01:ed:d4:1a:ab:82:c2:e9:88:f9:01:3a:3f:4c:1b:cd:
         8b:d5:a8:42:68:ee:65:19:5e:51:e4:61:fa:9d:e0:de:a7:68:
         f7:e7:ea:60:b4:c9:f3:60:91:7c:48:17:40:0e:cb:14:41:5b:
         d8:8a:73:9e:0c:4d:9f:19:77:84:98:b8:c1:95:91:2a:7c:24:
         f5:0b:66:0a:bb:25:ca:ef:48:de:2c:03:ac:bb:19:55:e5:c7:
         0b:04:26:26:83:55:96:d9:84:a9:c3:5d:bf:86:e5:78:51:cf:
         46:20:bf:f0:dd:b4:6d:6f:3a:b7:b6:41:4b:44:b4:8e:ed:5d:
         21:20:36:51:ea:89:d4:10:fd:b2:28:78:25:e4:b3:4d:78:01:
         3a:0f:2b:c7:bc:e2:ca:a0:9f:5e:5a:0f:61:c3:bc:81:4e:2a:
         0c:10:a0:d9:15:47:a6:1c:cf:81:b6:96:2c:2c:ef:25:00:37:
         a2:82:c6:08
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULqHVSjOt4zfxpdvhb0pPeLB5GY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNFQjMwQTE1MzEwQTZBOERDMzA3QkUwM0MxNTEzRURC
NUYwN0MwRDAeFw0yNTExMTAxODQzNTNaFw0yNjExMDkxODQ4NTNaMDMxMTAvBgNV
BAMTKEMzQzYzM0VCOTlERThEMDIxRTMyNkVGOTMzRUZENzZCMjg3M0I5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCsTjzZ0yJmo7c9VKlyr100Qz
pIls+xh1gf/665rAQ9BCrTQ50fVCEsn6FFkrZ/EA9xRQ6NN4cpJNZ5y6nARBHCz2
/6OKBOYn1ayO8S1g589XBFIY1b+KdpVNx0RN2osUH5meDOw0JMjE8ykrRNE3WSUR
0OeiFYxfYOd/D7WtqjrTVorLluIH2mVMVZ6FMEcMHiQgvPeORYMB8aNmsLy/6u7q
T8U2UyGDQuf+gs+029djj3C6/mopqerD32mxf/EJTVNNO5zlKZtYmKCGShuyWn3t
HnN3G+2QH/03xVYHnWY5dV0CjAK4CHA0Vsl16logm3XJFmMxCw+zxtu63TndAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUw8Yz65nejQIeMm75M+/XayhzuXkwHwYDVR0j
BBgwFoAUw+swoVMQpqjcMHvgPBUT7bXwfA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VLZ3FXYXNZV2NXY2tFM2QxWkFObUw3RVRVTm1LOGZ5czRLTnVSVUJt
TDcvMC9DM0VCMzBBMTUzMTBBNkE4REMzMDdCRTAzQzE1MTNFREI1RjA3QzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzRUIzMEExNTMxMEE2QThE
QzMwN0JFMDNDMTUxM0VEQjVGMDdDMEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVS2dxV2FzWVdjV2NrRTNkMVpBTm1MN0VUVU5tSzhmeXM0S051UlVCbUw3LzAv
MzIzODMwMzQzYTMxNjUzOTM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM0
MzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQelDANBgkqhkiG9w0BAQsFAAOCAQEAAsyMbp5x
AUBmVLaIn1k847pbBhyMd8CPZ+9bOxItVcX7zcAxMzxyJFJFXSstIIz9Owjn8kcV
vf6eeaGH9yz08zsvjuz6x3/CU0oB7dQaq4LC6Yj5ATo/TBvNi9WoQmjuZRleUeRh
+p3g3qdo9+fqYLTJ82CRfEgXQA7LFEFb2IpzngxNnxl3hJi4wZWRKnwk9QtmCrsl
yu9I3iwDrLsZVeXHCwQmJoNVltmEqcNdv4bleFHPRiC/8N20bW86t7ZBS0S0ju1d
ISA2UeqJ1BD9sih4JeSzTXgBOg8rx7ziyqCfXloPYcO8gU4qDBCg2RVHphzPgbaW
LCzvJQA3ooLGCA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:31:06 2025 by rpki-client