This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d313238203d3e20323639343636.roa
File:                     323830343a363531303a3a2f33322d313238203d3e20323639343636.roa (raw, json)
Hash identifier:          IhVXrPFKEIWHtVAEadAtRO/+tYkgNfO+5Q1qJim8k+c=
Subject key identifier:   A1:A7:72:74:52:8F:1C:A4:F0:9E:E2:C7:0D:08:0D:5B:E5:A0:81:61
Certificate issuer:       /CN=3E08572651B48EB315F6C01B6E33307FB0A92E5F
Certificate serial:       7854EE36E29C23C6C8CEF2D6629F8D26DE688F88
Authority key identifier: 3E:08:57:26:51:B4:8E:B3:15:F6:C0:1B:6E:33:30:7F:B0:A9:2E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E08572651B48EB315F6C01B6E33307FB0A92E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d313238203d3e20323639343636.roa
Signing time:             Sat 15 Nov 2025 21:51:58 +0000
ROA not before:           Sat 15 Nov 2025 21:46:58 +0000
ROA not after:            Sat 14 Nov 2026 21:51:58 +0000
asID:                     269466
IP address blocks:        2804:6510::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/3E08572651B48EB315F6C01B6E33307FB0A92E5F.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/3E08572651B48EB315F6C01B6E33307FB0A92E5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E08572651B48EB315F6C01B6E33307FB0A92E5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:54:ee:36:e2:9c:23:c6:c8:ce:f2:d6:62:9f:8d:26:de:68:8f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E08572651B48EB315F6C01B6E33307FB0A92E5F
        Validity
            Not Before: Nov 15 21:46:58 2025 GMT
            Not After : Nov 14 21:51:58 2026 GMT
        Subject: CN=A1A77274528F1CA4F09EE2C70D080D5BE5A08161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a0:b9:cd:de:e5:a1:70:d1:67:b8:f9:0a:75:
                    0f:c1:a3:25:1b:69:b6:d0:b6:64:87:4e:51:6c:31:
                    fc:46:19:b4:1d:30:b3:29:6b:e8:69:dc:f5:79:c8:
                    92:36:24:95:10:70:88:2f:09:a3:a4:cb:2e:2d:47:
                    53:82:c4:8a:8b:c7:5d:ba:e1:aa:ba:4c:1b:15:0e:
                    0b:1b:0b:e6:b5:a1:40:ed:4f:56:35:15:be:38:42:
                    b1:09:17:a2:ba:47:70:0c:92:1e:8d:ef:2c:6c:de:
                    b1:d9:82:63:a9:43:36:5a:1f:85:f8:95:57:e0:85:
                    08:c6:82:20:b3:fd:72:5c:63:b6:a7:d4:60:5e:73:
                    d5:45:cd:f1:32:c9:e0:97:a2:20:f4:15:4b:24:52:
                    31:a5:54:68:5e:64:cd:86:fe:97:10:b5:d0:b6:53:
                    ad:62:bb:82:9c:ba:5e:60:fa:cc:0e:87:60:cf:97:
                    ce:f1:c5:a4:49:8f:a0:44:e3:a6:88:04:15:e3:bc:
                    76:c4:84:8e:b6:8c:34:4c:93:4b:e5:3d:b3:66:e5:
                    e0:59:8c:cd:8a:c1:ce:c3:6e:56:50:6f:4a:e4:5e:
                    05:33:57:0a:11:3d:e3:51:6f:1b:3d:3a:8e:a9:7a:
                    91:b4:da:61:48:f7:6d:82:85:c4:f4:8f:11:fc:cc:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A7:72:74:52:8F:1C:A4:F0:9E:E2:C7:0D:08:0D:5B:E5:A0:81:61
            X509v3 Authority Key Identifier:
                keyid:3E:08:57:26:51:B4:8E:B3:15:F6:C0:1B:6E:33:30:7F:B0:A9:2E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/3E08572651B48EB315F6C01B6E33307FB0A92E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E08572651B48EB315F6C01B6E33307FB0A92E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d313238203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6510::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:4d:36:50:82:c3:98:e2:1d:79:b0:f0:74:24:aa:85:23:ce:
         76:69:7a:19:c7:4d:b5:70:df:4c:99:5e:16:31:fc:cd:ab:38:
         ed:1a:7c:e6:ca:46:a4:c3:57:89:ab:dc:d5:c4:85:3d:b1:af:
         f3:bd:60:da:52:3f:a4:e5:97:66:7f:dd:46:8b:75:c3:d4:01:
         bf:45:39:24:07:ea:35:df:e3:55:92:2a:5d:88:7a:90:dd:88:
         8b:fc:2d:bc:85:c0:5b:74:c5:13:cd:19:8e:95:8d:6f:39:dd:
         bc:e8:cd:c5:b0:9d:67:29:3b:89:63:c7:8f:d7:f1:68:a1:86:
         6a:bd:f4:b9:a4:d5:85:45:41:d0:fa:99:b0:da:90:ff:3a:f8:
         13:6f:01:45:41:30:3b:74:3c:1a:48:7b:02:b3:1e:a1:24:1b:
         9b:3d:ca:ce:2a:27:de:f3:f7:d5:9e:c0:98:82:51:99:28:8c:
         21:e8:76:1d:38:1c:39:1a:05:68:ec:25:82:4b:8d:ad:dc:68:
         9a:60:e5:b4:54:03:ae:5d:44:92:bc:90:87:a1:cd:e8:f2:f9:
         03:4f:93:16:ec:99:90:43:31:d4:af:86:27:87:09:a0:31:18:
         57:60:62:ea:70:33:ce:81:fa:6e:7d:01:ca:62:04:65:6f:3a:
         04:f1:20:c6
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUeFTuNuKcI8bIzvLWYp+NJt5oj4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UwODU3MjY1MUI0OEVCMzE1RjZDMDFCNkUzMzMwN0ZC
MEE5MkU1RjAeFw0yNTExMTUyMTQ2NThaFw0yNjExMTQyMTUxNThaMDMxMTAvBgNV
BAMTKEExQTc3Mjc0NTI4RjFDQTRGMDlFRTJDNzBEMDgwRDVCRTVBMDgxNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtoLnN3uWhcNFnuPkKdQ/BoyUb
abbQtmSHTlFsMfxGGbQdMLMpa+hp3PV5yJI2JJUQcIgvCaOkyy4tR1OCxIqLx126
4aq6TBsVDgsbC+a1oUDtT1Y1Fb44QrEJF6K6R3AMkh6N7yxs3rHZgmOpQzZaH4X4
lVfghQjGgiCz/XJcY7an1GBec9VFzfEyyeCXoiD0FUskUjGlVGheZM2G/pcQtdC2
U61iu4Kcul5g+swOh2DPl87xxaRJj6BE46aIBBXjvHbEhI62jDRMk0vlPbNm5eBZ
jM2Kwc7DblZQb0rkXgUzVwoRPeNRbxs9Oo6pepG02mFI922ChcT0jxH8zAxjAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUoadydFKPHKTwnuLHDQgNW+WggWEwHwYDVR0j
BBgwFoAUPghXJlG0jrMV9sAbbjMwf7CpLl8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVJWVVhuYnZyYnlnbVRMWDcxMXloRVlzM0JrTUEyeWNzbjM0cjN5NmJV
N20vMC8zRTA4NTcyNjUxQjQ4RUIzMTVGNkMwMUI2RTMzMzA3RkIwQTkyRTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMDg1NzI2NTFCNDhFQjMx
NUY2QzAxQjZFMzMzMDdGQjBBOTJFNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVSVlVYbmJ2cmJ5Z21UTFg3MTF5aEVZczNCa01BMnljc24zNHIzeTZiVTdtLzAv
MzIzODMwMzQzYTM2MzUzMTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGUQMA0GCSqGSIb3DQEBCwUAA4IBAQBWTTZQ
gsOY4h15sPB0JKqFI852aXoZx021cN9MmV4WMfzNqzjtGnzmykakw1eJq9zVxIU9
sa/zvWDaUj+k5Zdmf91Gi3XD1AG/RTkkB+o13+NVkipdiHqQ3YiL/C28hcBbdMUT
zRmOlY1vOd286M3FsJ1nKTuJY8eP1/FooYZqvfS5pNWFRUHQ+pmw2pD/OvgTbwFF
QTA7dDwaSHsCsx6hJBubPcrOKife8/fVnsCYglGZKIwh6HYdOBw5GgVo7CWCS42t
3GiaYOW0VAOuXUSSvJCHoc3o8vkDT5MW7JmQQzHUr4YnhwmgMRhXYGLqcDPOgfpu
fQHKYgRlbzoE8SDG
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:34 2025 by rpki-client