This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          Sn+GqF+mvIJJdVyqS5JDLzdB4qn9nl5v15iRgGSxX70=
Subject key identifier:   18:EF:9A:6F:0A:46:5F:B0:4F:5F:D9:63:A3:45:8F:31:8B:18:D2:2D
Certificate issuer:       /CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Certificate serial:       0B43A0DF083F573C2A56B0D1849B5EDF524ADCA2
Authority key identifier: 89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Wed 26 Nov 2025 15:54:45 +0000
ROA not before:           Wed 26 Nov 2025 15:49:45 +0000
ROA not after:            Wed 25 Nov 2026 15:54:45 +0000
asID:                     264936
IP address blocks:        2804:3034:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:43:a0:df:08:3f:57:3c:2a:56:b0:d1:84:9b:5e:df:52:4a:dc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
        Validity
            Not Before: Nov 26 15:49:45 2025 GMT
            Not After : Nov 25 15:54:45 2026 GMT
        Subject: CN=18EF9A6F0A465FB04F5FD963A3458F318B18D22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ec:38:85:76:b5:33:4e:3b:75:50:2b:79:00:
                    c0:9c:cb:2e:c8:10:ab:d1:32:ae:68:34:ac:50:0e:
                    a5:f8:b6:08:48:d8:f2:81:27:bc:f1:6c:d5:b7:8f:
                    f0:91:34:31:62:45:b8:07:9c:ff:5e:ea:94:6c:26:
                    23:68:05:d8:d6:27:56:1c:f4:b0:1e:e0:9a:8b:af:
                    1f:0b:b6:4f:b7:bc:a0:6b:e7:93:19:28:b5:e9:cb:
                    5a:51:e4:d7:fb:b7:94:b2:1d:38:53:5c:91:ed:74:
                    95:23:9e:60:cb:1e:71:3e:99:90:55:e2:03:0e:2d:
                    e5:2f:a1:f4:8f:2a:61:3c:55:cd:3e:7c:f6:94:1e:
                    da:36:0c:94:fa:3a:c9:ea:85:85:d4:5b:8a:22:6a:
                    e4:f5:3a:26:8b:7c:a2:e2:f9:14:ca:a0:82:72:c1:
                    8c:fb:c7:42:b4:bb:55:60:bd:7a:ea:92:16:cb:06:
                    3c:fa:37:ce:f8:ea:f4:bb:d8:ee:06:51:16:ac:b3:
                    15:93:47:13:d0:5e:23:0a:59:dc:df:fc:48:37:bd:
                    3f:42:84:ca:7e:0c:5a:95:6f:a3:1f:12:1c:2c:e6:
                    19:4c:09:46:9b:fb:ad:93:2b:34:19:ad:0d:cb:c0:
                    50:ec:09:3a:3f:93:ad:73:55:1a:d6:4f:af:5a:57:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EF:9A:6F:0A:46:5F:B0:4F:5F:D9:63:A3:45:8F:31:8B:18:D2:2D
            X509v3 Authority Key Identifier:
                keyid:89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:0d:0b:a1:95:f1:e4:2b:d1:f3:76:88:52:22:a1:be:c1:
         bf:22:31:92:a3:2f:c0:24:a8:dd:06:76:60:19:0a:ad:81:59:
         10:28:89:fc:f3:03:00:a2:aa:ef:7e:88:a1:3d:7f:08:70:06:
         c7:4d:25:4e:27:f0:c3:b3:22:d5:4b:17:92:f2:c8:2d:09:61:
         b5:ad:e0:12:be:39:d6:a5:63:83:05:6e:1b:b0:95:65:bc:c8:
         b8:ad:90:d3:e8:10:ea:14:1e:d7:a3:2f:0b:cc:22:af:a6:a7:
         68:6e:d6:29:2f:2c:30:1c:70:09:a9:ec:fa:5f:ac:43:26:21:
         b4:f9:7d:93:5a:a7:7f:02:40:24:8e:3d:e5:f6:a8:b1:6b:24:
         69:95:50:0c:ad:c3:39:7a:9d:98:9f:49:98:88:12:11:4e:a2:
         e5:51:c5:55:dc:1d:4c:3a:3a:ce:fa:8c:0e:36:31:3b:43:43:
         a8:62:dc:2b:db:dc:07:81:43:41:c4:7b:a9:e4:38:e7:0f:9c:
         81:95:5f:9a:7e:a2:df:60:b6:e2:07:4e:d0:56:3d:6f:a5:23:
         53:c1:28:06:9f:9f:c2:fb:ba:39:26:f9:67:d8:7a:d1:6a:5d:
         fc:a6:aa:cb:c9:cf:79:a6:eb:73:de:b0:00:4e:4e:2d:db:00:
         83:0d:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:06 2025 by rpki-client