This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/323830343a346136343a3a2f33322d313238203d3e20323637323337.roa
File:                     323830343a346136343a3a2f33322d313238203d3e20323637323337.roa (raw, json)
Hash identifier:          8q3GWj2ClxrPW1nj4CaW3qJODzSAtO2cGLHGS45JIvs=
Subject key identifier:   81:77:00:BE:F3:48:D8:4E:EC:43:31:10:F2:0E:2C:61:1E:08:5C:3C
Certificate issuer:       /CN=E5A6F5B562DEC887693E66CDECF5C507DD15FFF8
Certificate serial:       2EBADB95347D2721B458A1E7BE58AEFB15C4F6C9
Authority key identifier: E5:A6:F5:B5:62:DE:C8:87:69:3E:66:CD:EC:F5:C5:07:DD:15:FF:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5A6F5B562DEC887693E66CDECF5C507DD15FFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/323830343a346136343a3a2f33322d313238203d3e20323637323337.roa
Signing time:             Wed 12 Nov 2025 14:47:29 +0000
ROA not before:           Wed 12 Nov 2025 14:42:29 +0000
ROA not after:            Wed 11 Nov 2026 14:47:29 +0000
asID:                     267237
IP address blocks:        2804:4a64::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/E5A6F5B562DEC887693E66CDECF5C507DD15FFF8.crl
                          rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/E5A6F5B562DEC887693E66CDECF5C507DD15FFF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5A6F5B562DEC887693E66CDECF5C507DD15FFF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ba:db:95:34:7d:27:21:b4:58:a1:e7:be:58:ae:fb:15:c4:f6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A6F5B562DEC887693E66CDECF5C507DD15FFF8
        Validity
            Not Before: Nov 12 14:42:29 2025 GMT
            Not After : Nov 11 14:47:29 2026 GMT
        Subject: CN=817700BEF348D84EEC433110F20E2C611E085C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:82:d7:68:ff:10:16:eb:0d:12:1c:2b:ac:
                    2c:74:0c:32:e6:c1:75:6e:d9:6c:49:36:11:5f:c4:
                    6e:36:62:a6:91:a1:ae:d3:fd:47:ce:de:fa:1e:6b:
                    62:05:44:a1:73:80:02:c2:97:5f:cf:32:d5:67:13:
                    b9:96:a4:bc:c5:46:81:40:08:6e:4f:ad:de:31:b8:
                    1a:b5:a4:8d:98:60:cc:85:35:29:ca:7d:5e:f5:d7:
                    2f:c2:51:37:d3:fa:e6:eb:99:cf:4d:fc:63:8b:4e:
                    11:f4:f9:68:ae:fe:22:77:c6:84:88:4a:35:fe:32:
                    d5:dd:c9:1b:4b:e7:15:de:be:71:f5:fc:fc:32:4a:
                    06:03:07:c8:24:f9:3e:fd:5b:44:40:fc:1a:7b:13:
                    a3:d8:5d:22:69:b8:bc:7f:3a:12:b5:79:63:cb:5c:
                    2c:c5:42:60:66:d2:84:e7:27:e8:e0:c8:c3:87:ad:
                    93:44:d3:d5:7e:95:02:fa:6a:22:ab:30:46:1e:a0:
                    37:6b:0e:ba:58:67:9a:73:e6:5f:6f:03:3c:57:76:
                    77:ca:da:01:c1:ba:00:90:c0:44:47:b2:b3:52:b4:
                    e9:6b:cd:fd:71:e0:58:96:04:1e:45:cd:18:95:db:
                    b7:8b:00:21:4f:71:91:5c:61:c5:3d:48:fa:ce:ee:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:77:00:BE:F3:48:D8:4E:EC:43:31:10:F2:0E:2C:61:1E:08:5C:3C
            X509v3 Authority Key Identifier:
                keyid:E5:A6:F5:B5:62:DE:C8:87:69:3E:66:CD:EC:F5:C5:07:DD:15:FF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/E5A6F5B562DEC887693E66CDECF5C507DD15FFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5A6F5B562DEC887693E66CDECF5C507DD15FFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/323830343a346136343a3a2f33322d313238203d3e20323637323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:f8:c2:27:9d:7d:a3:da:65:c5:7f:a3:03:00:62:85:a5:c1:
         3a:f4:e5:ce:35:2c:ba:e6:57:ae:d0:6e:25:c7:9e:15:d2:a3:
         98:3c:46:ca:8a:9c:71:38:4d:5f:18:b3:60:b0:ca:a0:36:ab:
         66:9e:1e:98:49:0f:3b:88:29:89:d3:de:18:f3:bc:af:ea:9f:
         44:74:c8:29:4a:4d:07:3b:eb:50:a9:f6:bf:eb:ef:b5:a7:3a:
         ab:02:ca:1e:73:88:44:16:2d:46:63:2d:e1:1e:d1:05:fd:1c:
         aa:3e:00:9a:ab:ff:fd:7b:41:11:14:18:54:96:3a:25:af:c1:
         fa:f3:b9:47:2a:38:63:79:ea:a2:eb:0e:e0:cf:b8:1a:37:f1:
         9e:1e:f5:7a:2c:b3:b5:4b:7f:d1:d1:68:d0:1e:67:04:48:8a:
         42:0d:24:29:57:4c:93:7b:e0:f3:b6:e5:e3:79:46:3b:ce:c8:
         19:15:c5:63:20:40:99:ea:25:c0:32:2e:b5:ea:24:b1:50:84:
         2a:c9:07:3a:c7:35:8b:67:4d:9a:32:a8:24:e3:00:aa:9d:a2:
         c8:66:63:6c:62:b7:a6:53:9a:57:d8:c4:c8:a0:52:79:27:7d:
         db:6b:6a:dc:51:4f:e7:34:e4:08:4a:7c:80:36:bc:0c:8a:34:
         a1:92:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:28 2025 by rpki-client