This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          7lOm+Ol7Z4E2q32oYEIkAe97y+xsQeHgmU5Vd7EDHpc=
Subject key identifier:   00:06:AD:71:C6:6F:72:2D:D7:AB:F6:E7:40:C9:C9:8E:E1:6E:0E:53
Certificate issuer:       /CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Certificate serial:       7CCBEC3F880DEC80D4BB228086DFE8285438FDC4
Authority key identifier: 89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Wed 26 Nov 2025 15:54:45 +0000
ROA not before:           Wed 26 Nov 2025 15:49:45 +0000
ROA not after:            Wed 25 Nov 2026 15:54:45 +0000
asID:                     264936
IP address blocks:        2804:3034:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cb:ec:3f:88:0d:ec:80:d4:bb:22:80:86:df:e8:28:54:38:fd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
        Validity
            Not Before: Nov 26 15:49:45 2025 GMT
            Not After : Nov 25 15:54:45 2026 GMT
        Subject: CN=0006AD71C66F722DD7ABF6E740C9C98EE16E0E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:8f:f2:98:8e:9f:9e:0b:a3:67:25:7d:17:
                    52:97:cf:1c:f5:41:68:73:03:c8:13:2a:9a:42:56:
                    fc:fb:b6:5a:8e:57:d9:3c:bd:98:10:7b:df:b5:c9:
                    92:fc:35:5a:5d:f8:95:be:42:8f:d4:39:cf:37:26:
                    07:45:d2:da:3a:b4:0c:b0:e9:94:79:26:a9:f1:9a:
                    1c:98:5b:03:3a:80:a5:27:07:0c:57:59:8b:6c:78:
                    d8:ae:dc:7b:f8:99:dc:59:3c:95:00:a8:12:7a:91:
                    e4:28:59:6c:30:2e:41:86:a1:84:85:2e:24:3b:05:
                    b6:45:bf:32:7d:4a:97:4d:a6:a7:23:d2:6e:8f:07:
                    8f:81:82:39:a4:60:25:72:46:d3:b6:e5:e4:5b:44:
                    09:26:47:36:22:7b:1f:85:e1:9d:22:85:53:93:f6:
                    74:2d:3f:55:26:32:02:df:e2:1d:e5:2c:1a:d7:6c:
                    03:f9:ef:34:96:bb:46:7c:2f:34:e5:78:1f:af:0e:
                    fc:3e:d2:69:54:27:94:20:1a:e7:aa:0c:0c:14:44:
                    34:90:47:d9:ef:4d:7f:a2:94:88:f5:1c:e4:2f:c6:
                    50:5c:6c:1b:f6:79:62:d2:05:a4:7b:43:bd:ec:42:
                    cb:52:01:10:55:cb:2c:98:6c:1e:f5:6a:26:5a:27:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:06:AD:71:C6:6F:72:2D:D7:AB:F6:E7:40:C9:C9:8E:E1:6E:0E:53
            X509v3 Authority Key Identifier:
                keyid:89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:5f:4e:fb:16:2e:9b:e3:9f:3d:2f:e9:b2:b1:e8:93:d4:
         a5:3a:7f:a7:c7:04:e0:8a:0d:97:fd:0d:77:9d:2e:c1:f0:06:
         8d:a8:6c:52:c7:78:d9:dc:df:f5:a1:61:2c:c5:71:a6:62:15:
         d6:d7:83:e0:66:87:3a:f9:d7:46:2f:20:d4:f9:75:54:48:eb:
         a7:4c:86:25:ed:61:78:53:1c:b9:f4:1f:62:f7:44:1a:5b:88:
         2c:05:be:aa:29:2b:c5:45:a0:52:7c:0e:2d:1f:3a:e3:8f:a6:
         83:c3:0e:e4:e9:12:3b:22:53:1c:f1:72:58:52:59:5f:27:6e:
         c4:91:b5:a8:3b:a1:0d:27:35:67:0a:65:41:18:bb:73:ec:14:
         1e:b9:64:1c:c5:d5:5e:9f:d9:54:08:00:02:58:fc:d9:f2:d2:
         b9:85:2a:f6:b8:c0:10:a2:15:68:2f:b6:32:98:fc:09:70:12:
         7d:03:91:e6:a0:ed:b4:cb:5e:ee:b1:93:30:13:8d:d3:2f:c6:
         d1:dd:e1:8f:4f:e7:55:af:9c:16:1f:0b:11:f4:65:72:44:ee:
         a3:88:24:29:d3:3e:b6:d7:4b:1c:ba:61:47:87:12:6a:e8:2d:
         17:18:33:f7:bc:d7:1f:ee:95:de:c3:cb:1b:a1:23:66:9b:d5:
         42:31:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:11 2025 by rpki-client