This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f33322d3332203d3e203532393436.roa
File:                     323830343a6232633a3a2f33322d3332203d3e203532393436.roa (raw, json)
Hash identifier:          CvgqQ/IQBdOtMO9ImDMYOMa+eCVHs8yPFLF9RpdD4EI=
Subject key identifier:   43:61:4F:AE:DD:19:D6:2F:0D:2E:6A:73:E5:B8:5D:98:3E:73:42:6B
Certificate issuer:       /CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
Certificate serial:       4861C443A55520C24F35EDC9F6D0977A8BC8B44E
Authority key identifier: EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f33322d3332203d3e203532393436.roa
Signing time:             Fri 28 Nov 2025 18:55:00 +0000
ROA not before:           Fri 28 Nov 2025 18:50:00 +0000
ROA not after:            Fri 27 Nov 2026 18:55:00 +0000
asID:                     52946
IP address blocks:        2804:b2c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl
                          rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:61:c4:43:a5:55:20:c2:4f:35:ed:c9:f6:d0:97:7a:8b:c8:b4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
        Validity
            Not Before: Nov 28 18:50:00 2025 GMT
            Not After : Nov 27 18:55:00 2026 GMT
        Subject: CN=43614FAEDD19D62F0D2E6A73E5B85D983E73426B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:dd:f7:8f:a4:c7:45:64:b4:c9:0f:b4:df:
                    a1:63:be:41:86:9d:c1:12:75:a2:4b:27:77:9a:2b:
                    19:fa:05:ba:fe:aa:47:cb:0b:e6:e4:74:56:da:b0:
                    19:80:db:b6:58:05:c2:ae:52:17:cb:26:d2:c0:35:
                    6f:57:66:1f:49:ab:fa:8b:19:51:e2:72:43:74:49:
                    f1:86:07:f6:9d:9a:73:42:46:65:01:9c:5c:2e:cf:
                    44:78:f2:16:c3:a3:c6:39:6f:27:67:29:a7:02:6e:
                    28:10:cb:06:7d:b8:ea:01:78:c9:0b:ae:29:d8:a6:
                    38:00:b1:56:7c:72:9a:5e:eb:ae:a8:0b:e2:ca:1c:
                    b7:4e:75:ea:27:74:a1:73:65:c6:08:ea:72:78:cb:
                    66:60:9f:03:7e:3c:c1:ec:30:82:e4:f4:8a:1b:b1:
                    4f:5c:8f:a2:9c:0f:55:ae:02:ed:11:51:82:3c:40:
                    16:e8:89:3a:5b:00:fa:83:33:15:c7:9e:88:90:8e:
                    13:34:16:e8:1e:f1:2d:f7:86:63:a4:14:d9:3a:64:
                    24:b9:59:c4:db:22:d4:73:ea:03:d2:ef:e9:95:83:
                    d4:7c:9b:20:28:fd:ec:d1:40:6b:e7:72:b0:0d:1b:
                    71:78:b3:5f:68:61:a8:07:c3:ea:5d:d1:78:47:fb:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:61:4F:AE:DD:19:D6:2F:0D:2E:6A:73:E5:B8:5D:98:3E:73:42:6B
            X509v3 Authority Key Identifier:
                keyid:EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f33322d3332203d3e203532393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:1e:4f:d0:c3:53:f3:97:fc:3d:2d:96:8d:1c:cf:83:fc:
         87:64:de:ad:90:cf:93:45:7b:be:cd:36:d5:58:96:62:1b:18:
         1b:c2:59:55:7f:6b:68:d4:01:43:ad:79:96:df:0e:d3:b9:22:
         7a:2f:a4:28:0e:2e:04:99:3b:2d:d5:07:43:7b:5e:35:80:80:
         46:17:14:de:ef:23:66:46:88:53:d0:bf:c2:d0:af:5d:95:1f:
         40:b3:dc:e2:f7:bd:d5:a8:e0:42:c1:b5:c8:ab:31:40:8f:5b:
         d3:28:d8:7f:84:b6:55:de:ff:8b:7c:3d:3f:a2:b8:b9:c4:06:
         29:da:92:1c:40:ad:09:3c:ed:b4:b3:e4:84:16:db:ac:9a:44:
         7d:90:b3:f8:83:71:b0:3b:78:14:f0:ac:05:a6:73:d1:17:5f:
         e0:04:bd:23:ac:b6:ff:4c:83:49:bf:87:7f:13:dc:af:a6:64:
         2c:b6:38:60:8e:83:77:cb:c6:17:39:50:62:60:89:b1:5f:ef:
         b0:c7:18:c1:c4:cd:7f:32:f7:af:5c:8f:54:a4:13:26:a6:13:
         5a:f1:c9:64:e9:c7:aa:8f:5e:b8:d0:95:8a:fd:56:4c:70:01:
         c5:bf:5f:2e:ca:6e:73:a8:f3:5b:36:10:98:ee:bc:c2:a8:2e:
         fc:06:a6:45
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUSGHEQ6VVIMJPNe3J9tCXeovItE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVFRkRGMDU2MUY1MDdGNkE4RUVDMzNENTU2MDREN0Ew
MTFCQjU4ODAeFw0yNTExMjgxODUwMDBaFw0yNjExMjcxODU1MDBaMDMxMTAvBgNV
BAMTKDQzNjE0RkFFREQxOUQ2MkYwRDJFNkE3M0U1Qjg1RDk4M0U3MzQyNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCN33j6THRWS0yQ+036FjvkGG
ncESdaJLJ3eaKxn6Bbr+qkfLC+bkdFbasBmA27ZYBcKuUhfLJtLANW9XZh9Jq/qL
GVHickN0SfGGB/admnNCRmUBnFwuz0R48hbDo8Y5bydnKacCbigQywZ9uOoBeMkL
rinYpjgAsVZ8cppe666oC+LKHLdOdeondKFzZcYI6nJ4y2ZgnwN+PMHsMILk9Iob
sU9cj6KcD1WuAu0RUYI8QBboiTpbAPqDMxXHnoiQjhM0Fuge8S33hmOkFNk6ZCS5
WcTbItRz6gPS7+mVg9R8myAo/ezRQGvncrANG3F4s19oYagHw+pd0XhH+8qlAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUQ2FPrt0Z1i8NLmpz5bhdmD5zQmswHwYDVR0j
BBgwFoAU7u/fBWH1B/ao7sM9VWBNegEbtYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU1rN2o2WURhbk5OWm44TkdnS2dvMzUySmM3NWNCUnZWQ3BEVzdwZlpC
akwvMC9FRUVGREYwNTYxRjUwN0Y2QThFRUMzM0Q1NTYwNEQ3QTAxMUJCNTg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFRUZERjA1NjFGNTA3RjZB
OEVFQzMzRDU1NjA0RDdBMDExQkI1ODguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVNazdqNllEYW5OTlpuOE5HZ0tnbzM1MkpjNzVjQlJ2VkNwRFc3cGZaQmpMLzAv
MzIzODMwMzQzYTYyMzI2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzOTM0
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAssMA0GCSqGSIb3DQEBCwUAA4IBAQCSjR5P0MNT85f8
PS2WjRzPg/yHZN6tkM+TRXu+zTbVWJZiGxgbwllVf2to1AFDrXmW3w7TuSJ6L6Qo
Di4EmTst1QdDe141gIBGFxTe7yNmRohT0L/C0K9dlR9As9zi973VqOBCwbXIqzFA
j1vTKNh/hLZV3v+LfD0/ori5xAYp2pIcQK0JPO20s+SEFtusmkR9kLP4g3GwO3gU
8KwFpnPRF1/gBL0jrLb/TINJv4d/E9yvpmQstjhgjoN3y8YXOVBiYImxX++wxxjB
xM1/MvevXI9UpBMmphNa8clk6ceqj1640JWK/VZMcAHFv18uym5zqPNbNhCY7rzC
qC78BqZF
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:30 2025 by rpki-client