This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/323830343a393438383a3a2f33322d3332203d3e20323734343634.roa
File:                     323830343a393438383a3a2f33322d3332203d3e20323734343634.roa (raw, json)
Hash identifier:          rwwxvyIXRwmJfjAnguCApcMWv9gWB+wrUmjt+JBgBII=
Subject key identifier:   E2:74:41:08:B7:28:6C:A8:7B:31:54:86:FC:3C:0E:81:87:37:4F:14
Certificate issuer:       /CN=5BD9E4DF292A678071B59785706268C92A671EA2
Certificate serial:       2396348252EB91679BE8A1AC5AE70E4C73D42053
Authority key identifier: 5B:D9:E4:DF:29:2A:67:80:71:B5:97:85:70:62:68:C9:2A:67:1E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD9E4DF292A678071B59785706268C92A671EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/323830343a393438383a3a2f33322d3332203d3e20323734343634.roa
Signing time:             Mon 10 Nov 2025 14:01:51 +0000
ROA not before:           Mon 10 Nov 2025 13:56:51 +0000
ROA not after:            Mon 09 Nov 2026 14:01:51 +0000
asID:                     274464
IP address blocks:        2804:9488::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.crl
                          rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD9E4DF292A678071B59785706268C92A671EA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:96:34:82:52:eb:91:67:9b:e8:a1:ac:5a:e7:0e:4c:73:d4:20:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9E4DF292A678071B59785706268C92A671EA2
        Validity
            Not Before: Nov 10 13:56:51 2025 GMT
            Not After : Nov  9 14:01:51 2026 GMT
        Subject: CN=E2744108B7286CA87B315486FC3C0E8187374F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:16:a2:0e:90:a9:40:bf:be:e1:13:f2:ac:
                    21:d3:7d:32:d4:7d:1d:f4:32:04:14:f6:81:80:21:
                    3c:b9:17:3e:98:b5:b2:e3:0b:70:ed:06:87:6e:fe:
                    3d:86:c0:e9:62:c4:d9:3b:46:b5:c1:89:83:bf:fe:
                    cc:5c:bf:c7:8d:21:85:05:2c:07:95:f0:43:ca:6b:
                    b7:4e:8e:23:78:58:4a:47:d1:49:f7:e4:32:21:85:
                    19:17:a6:f3:79:06:38:2a:b9:eb:09:e8:e0:f3:40:
                    70:cd:9b:c2:77:33:0d:60:d6:b9:3c:ce:0c:7f:e3:
                    33:e5:a7:b3:3e:2f:8f:c3:29:4f:77:39:ab:3f:59:
                    89:72:86:d7:40:b3:07:91:df:77:6d:49:f3:af:58:
                    ed:53:79:4f:6b:f9:59:24:04:6f:27:33:02:1a:ae:
                    49:6c:18:d8:9c:87:46:08:21:25:da:3d:c6:01:cb:
                    9f:46:16:b6:7c:13:66:44:7b:73:20:53:4f:df:79:
                    b4:b3:09:62:5f:a9:1e:e6:40:0f:e2:bc:22:1e:b8:
                    6e:18:d5:1d:b4:0a:cf:56:c1:54:1b:09:fb:92:c0:
                    5c:08:2a:da:f1:09:e4:00:cc:c7:af:40:d4:7f:ea:
                    7f:2a:89:fb:16:e5:7a:65:d3:ec:88:4d:0f:2d:72:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:74:41:08:B7:28:6C:A8:7B:31:54:86:FC:3C:0E:81:87:37:4F:14
            X509v3 Authority Key Identifier:
                keyid:5B:D9:E4:DF:29:2A:67:80:71:B5:97:85:70:62:68:C9:2A:67:1E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD9E4DF292A678071B59785706268C92A671EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/323830343a393438383a3a2f33322d3332203d3e20323734343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9488::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:b0:b0:d7:de:91:a9:fe:13:40:01:7a:8e:c1:35:64:07:76:
         39:db:42:70:df:3a:01:f4:f5:84:bd:d2:8c:3e:8e:9d:ce:e8:
         3a:5e:48:66:8f:f4:8f:90:08:ae:89:32:90:2b:60:b9:db:a0:
         cc:c1:4f:9c:b4:e3:63:7b:2e:4c:e3:21:9e:3d:41:33:6e:2d:
         e0:dc:2b:49:df:d2:b9:b7:3e:ba:1f:d8:7a:db:9e:c7:14:76:
         97:57:dd:3a:e3:9b:7a:35:78:dd:a7:8b:ac:62:fc:52:15:96:
         dc:c5:4e:36:96:7e:0a:54:84:04:59:7b:f3:9c:c6:57:13:d6:
         6c:01:0d:e5:84:ef:d2:23:30:79:6e:f2:04:83:1f:4a:fc:af:
         c6:e8:f7:13:c4:70:2b:59:de:a7:f5:49:38:c4:f3:04:95:ff:
         1e:e0:45:ed:46:d3:21:02:01:9d:2f:0d:d5:ad:6f:14:6f:15:
         da:d1:d0:1f:c3:11:62:c1:fc:99:70:32:10:c4:62:84:e8:10:
         10:01:72:28:ce:20:18:a8:f2:44:18:2f:a5:ad:2d:14:44:79:
         03:0c:7d:a1:ab:cc:03:d8:2e:83:b2:07:3c:67:8f:9b:02:0a:
         76:00:3d:ce:8c:22:59:8c:ff:0b:15:8f:2b:5d:1d:e7:20:d0:
         bd:af:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:17:13 2025 by rpki-client