This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/323830343a316264303a3a2f33322d313238203d3e203631373532.roa
File:                     323830343a316264303a3a2f33322d313238203d3e203631373532.roa (raw, json)
Hash identifier:          w69dzCxkPM5PeVGmvcjOTWmd/mzMwkPRNqcTL+zotac=
Subject key identifier:   8C:A9:0D:78:EC:CC:7E:4C:26:F9:F3:D9:76:FA:2B:B1:57:B7:5C:C5
Certificate issuer:       /CN=89EE77ABB23DCB5286D0583CA0650F9A630F7D2E
Certificate serial:       4229ABE343FAC0B81DE5B5A7EB4710A5D34738F3
Authority key identifier: 89:EE:77:AB:B2:3D:CB:52:86:D0:58:3C:A0:65:0F:9A:63:0F:7D:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/323830343a316264303a3a2f33322d313238203d3e203631373532.roa
Signing time:             Wed 12 Nov 2025 22:15:00 +0000
ROA not before:           Wed 12 Nov 2025 22:10:00 +0000
ROA not after:            Wed 11 Nov 2026 22:15:00 +0000
asID:                     61752
IP address blocks:        2804:1bd0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.crl
                          rsync://rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:29:ab:e3:43:fa:c0:b8:1d:e5:b5:a7:eb:47:10:a5:d3:47:38:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EE77ABB23DCB5286D0583CA0650F9A630F7D2E
        Validity
            Not Before: Nov 12 22:10:00 2025 GMT
            Not After : Nov 11 22:15:00 2026 GMT
        Subject: CN=8CA90D78ECCC7E4C26F9F3D976FA2BB157B75CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:48:4b:80:88:21:bc:e0:1a:33:06:0d:77:00:
                    82:25:27:5f:04:5d:4d:f0:48:06:63:93:2e:e9:6a:
                    0e:42:ca:11:e0:24:0a:d4:c0:3a:e5:be:ca:bb:92:
                    af:cc:1e:08:2d:30:4d:af:af:30:6d:b2:07:1c:1a:
                    ec:74:2e:90:59:b5:79:ce:c2:5e:e9:cd:cc:e7:46:
                    29:37:3c:cc:df:e8:a9:bb:9c:09:a2:b2:35:3f:4e:
                    48:ad:d0:e6:2f:18:96:d3:7f:80:fe:85:3c:f1:6b:
                    6d:37:ba:f1:48:88:88:b2:9a:36:2f:e4:02:62:0b:
                    0c:a2:02:14:e6:b3:f2:70:93:7f:45:de:a3:d7:08:
                    fc:95:68:42:94:67:f3:02:47:64:20:b3:d9:19:ee:
                    aa:ee:f7:ac:68:05:22:e3:27:af:92:7c:48:73:46:
                    25:1e:0d:1c:a8:9f:70:9f:f1:48:ce:f3:3d:75:85:
                    1d:37:d7:b1:c4:ab:92:65:ff:85:95:53:2c:1d:e3:
                    06:c2:d5:d5:36:60:a5:9b:a7:33:34:7d:85:a5:6e:
                    e5:d7:9a:1b:91:36:73:9f:ea:a4:79:fa:aa:0f:ca:
                    4d:d6:09:ed:02:fc:17:35:44:16:b1:c1:9c:0f:52:
                    67:a4:24:86:f3:c7:9f:d7:b5:b2:ea:25:6a:8a:b8:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A9:0D:78:EC:CC:7E:4C:26:F9:F3:D9:76:FA:2B:B1:57:B7:5C:C5
            X509v3 Authority Key Identifier:
                keyid:89:EE:77:AB:B2:3D:CB:52:86:D0:58:3C:A0:65:0F:9A:63:0F:7D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EE77ABB23DCB5286D0583CA0650F9A630F7D2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wD281GU9f8iv3BKxvs7UN3bv4DFpARinZnChvarhrzi/0/323830343a316264303a3a2f33322d313238203d3e203631373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:02:42:21:65:e9:28:e5:0a:5b:1d:dd:5f:52:ba:cc:c2:41:
         4a:c1:a8:46:f6:92:d4:69:ea:00:b1:e7:f9:28:c0:01:07:bc:
         95:94:f1:2c:00:54:34:13:5f:86:4e:20:e7:cf:03:ae:10:40:
         f6:a7:6c:bd:3e:97:48:be:c0:3f:f0:e2:64:8d:ba:a5:9d:b7:
         fa:97:53:0d:48:62:71:83:ad:66:d6:18:64:c9:72:5d:bd:85:
         08:b1:db:65:b5:c9:30:ff:32:ab:6d:4d:34:05:04:8a:13:e5:
         50:f9:b3:5c:7d:4f:5f:2f:3b:9c:69:4d:08:ef:1b:0a:5e:fa:
         12:1e:15:ff:3e:5e:03:21:e9:6a:0e:eb:e6:a2:32:84:51:ba:
         66:0e:58:c6:cf:12:76:23:c1:85:d2:3b:d9:a1:88:c7:e7:bd:
         f6:4d:16:f0:af:d8:74:93:db:3f:8e:a3:f4:08:55:55:15:ad:
         64:e7:89:1d:60:d0:77:47:ec:7f:ba:cc:9d:7a:50:33:fb:85:
         9f:0b:bd:ae:7b:88:d1:3b:4a:de:f0:ef:0b:c4:29:8e:ed:8e:
         12:4f:a8:04:eb:f2:fb:38:39:2a:b5:f3:1e:64:6d:c7:4d:26:
         22:28:90:79:f5:5b:8f:06:f4:94:3c:37:0e:d9:35:1d:07:75:
         b0:13:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:35 2025 by rpki-client