This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f34342d3434203d3e203532393436.roa
File:                     323830343a6232633a3a2f34342d3434203d3e203532393436.roa (raw, json)
Hash identifier:          f1iXpw0ISV4XJpehYig4Gu/H7p2A+YgQoh7G0Slf3kU=
Subject key identifier:   84:8A:3F:C5:D1:15:93:DE:A7:86:68:79:31:1F:05:6B:FE:C0:C9:B8
Certificate issuer:       /CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
Certificate serial:       5309015D270D9F4BB83AB1764BE4F5585ECF9240
Authority key identifier: EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f34342d3434203d3e203532393436.roa
Signing time:             Fri 28 Nov 2025 18:56:17 +0000
ROA not before:           Fri 28 Nov 2025 18:51:17 +0000
ROA not after:            Fri 27 Nov 2026 18:56:17 +0000
asID:                     52946
IP address blocks:        2804:b2c::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl
                          rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:09:01:5d:27:0d:9f:4b:b8:3a:b1:76:4b:e4:f5:58:5e:cf:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
        Validity
            Not Before: Nov 28 18:51:17 2025 GMT
            Not After : Nov 27 18:56:17 2026 GMT
        Subject: CN=848A3FC5D11593DEA7866879311F056BFEC0C9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:78:f4:eb:69:26:23:fe:09:87:35:61:7d:
                    ea:91:2f:55:9c:57:bb:68:4f:32:c3:02:52:58:6f:
                    63:cd:60:17:22:3c:c1:1f:47:2e:05:5a:8e:cd:93:
                    43:af:c6:bd:60:44:c6:9e:38:6e:43:14:44:a5:79:
                    13:3b:f0:18:1f:b9:62:5b:ae:7c:33:fc:52:9e:3d:
                    36:b0:52:84:d8:93:20:3b:10:f9:cb:58:9c:15:c6:
                    0b:db:e0:da:50:c3:2c:69:8d:d5:5d:6d:c1:f3:c7:
                    e9:d3:5c:28:ae:6c:e3:b8:7e:22:a2:ba:1a:11:ed:
                    99:d3:6b:f6:df:14:5c:6d:45:84:0e:2d:f5:7e:17:
                    aa:f5:b4:c3:09:0c:0e:f9:c3:59:38:d0:d2:a1:58:
                    56:66:b6:1e:5c:41:aa:00:45:5e:67:59:89:ec:85:
                    f6:b7:38:0b:b4:89:ba:c1:d5:25:7d:cf:11:ba:40:
                    95:a9:c1:bd:33:37:dc:d5:d6:f9:6e:a2:b3:36:66:
                    f0:da:e4:37:f6:1d:97:c8:29:1b:a9:77:68:a2:da:
                    4e:e1:57:49:84:a8:5b:53:14:e0:8d:7e:d0:4b:52:
                    d4:2d:ab:28:26:c0:b1:b1:e1:f4:9a:53:65:88:bc:
                    f6:92:7e:d4:76:aa:fe:b2:96:5b:2e:f2:8d:1b:51:
                    ec:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8A:3F:C5:D1:15:93:DE:A7:86:68:79:31:1F:05:6B:FE:C0:C9:B8
            X509v3 Authority Key Identifier:
                keyid:EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f34342d3434203d3e203532393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b2c::/44

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:8c:9f:9e:a5:c5:27:a5:b7:40:f7:27:e3:0a:fd:cc:da:
         97:f0:a4:bb:bd:10:75:ee:f3:96:dd:b4:f8:f4:aa:c4:de:35:
         54:52:18:7c:2f:df:30:3e:83:97:8e:4c:79:3a:d9:e5:65:db:
         79:94:bf:4b:1f:aa:6e:87:b9:7b:6a:ee:50:4b:12:df:86:e5:
         9c:dc:2c:d8:23:53:bc:ed:59:ca:a5:b2:4f:c0:16:f5:55:a8:
         8f:f4:98:08:f5:a2:4b:48:76:88:f9:aa:1d:45:cf:17:a4:90:
         26:fd:fe:b7:04:36:fd:7f:09:74:a1:27:6a:34:13:c3:fa:2f:
         b0:09:d5:40:63:b3:3e:74:b8:09:d5:e2:90:00:ae:30:21:c2:
         21:7f:4f:9d:81:1d:cf:b5:18:54:d1:e9:0c:ad:02:57:8d:95:
         1b:b0:fd:b0:0e:d4:33:d3:a8:f8:72:ac:90:bb:34:07:cb:46:
         79:e7:13:61:f1:2d:0b:ac:4c:75:ad:de:ec:b3:8d:fd:e2:f9:
         e1:5d:86:2a:43:ab:67:d2:97:d1:44:3a:3e:bf:c8:4a:86:47:
         fc:b0:95:3b:e1:da:a5:68:0b:eb:d3:a4:20:c5:50:3d:8e:9c:
         0f:28:75:1c:fe:c8:be:26:3b:e7:47:8c:71:4e:c1:f7:c9:3f:
         18:e7:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:32 2025 by rpki-client