This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/323830343a366165343a3a2f33322d3438203d3e20323730333634.roa
File:                     323830343a366165343a3a2f33322d3438203d3e20323730333634.roa (raw, json)
Hash identifier:          0CPCaNu9M6nROdEDI768V6uiHfOkf0WhE14dP31nTLw=
Subject key identifier:   D7:E1:53:F6:BD:5E:B7:8B:EA:9A:EC:B0:44:78:7E:4E:82:37:47:F2
Certificate issuer:       /CN=A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2
Certificate serial:       190C0C28A06B9317B04220E4842155E5AB4E5614
Authority key identifier: A6:DF:F8:A1:77:EF:8C:C0:DC:74:24:5A:C0:C5:55:AA:DD:A1:53:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/323830343a366165343a3a2f33322d3438203d3e20323730333634.roa
Signing time:             Wed 03 Dec 2025 12:44:31 +0000
ROA not before:           Wed 03 Dec 2025 12:39:31 +0000
ROA not after:            Wed 02 Dec 2026 12:44:31 +0000
asID:                     270364
IP address blocks:        2804:6ae4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.crl
                          rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0c:0c:28:a0:6b:93:17:b0:42:20:e4:84:21:55:e5:ab:4e:56:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2
        Validity
            Not Before: Dec  3 12:39:31 2025 GMT
            Not After : Dec  2 12:44:31 2026 GMT
        Subject: CN=D7E153F6BD5EB78BEA9AECB044787E4E823747F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:7b:49:d9:91:30:d0:fb:d8:b9:cd:6b:48:
                    87:4c:45:2f:65:81:fa:cb:e9:1e:ae:52:a9:4f:4c:
                    22:dc:7e:02:e7:7c:b7:60:40:92:29:e1:41:60:a0:
                    ea:0b:70:25:23:55:c5:f6:c5:c5:b8:cc:1c:48:39:
                    f1:de:4e:c5:b3:8c:fa:e0:17:41:4b:53:19:b3:66:
                    ee:4c:af:03:ea:cf:33:8b:5d:4c:74:2c:65:b9:bb:
                    e8:dc:3a:36:27:4b:2c:97:22:ec:84:54:e6:f7:d3:
                    9a:a7:c1:e2:b6:80:00:a5:9d:9f:a7:a5:e4:6c:43:
                    b9:cb:d7:d2:4a:cb:ba:99:89:72:9f:c5:0f:ea:a1:
                    f7:c4:07:22:31:05:ef:45:2a:dc:ff:3e:3d:84:aa:
                    e7:ea:5b:1e:bc:e8:54:64:de:4e:8b:9a:c3:2c:04:
                    6b:88:23:0c:81:04:4a:9a:99:d4:67:12:a6:bb:31:
                    e8:ab:2c:92:f8:f1:97:7e:3e:22:9a:60:8e:17:c7:
                    a5:32:03:53:82:6d:f8:1b:92:b3:8d:65:75:6e:95:
                    fa:3d:91:d9:de:1d:2c:e7:72:11:51:ff:18:e9:f1:
                    e0:2e:da:e9:3a:a9:50:80:60:a8:41:f4:d2:83:89:
                    40:51:e3:b4:84:68:2d:b5:5b:8b:26:43:ba:ff:98:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E1:53:F6:BD:5E:B7:8B:EA:9A:EC:B0:44:78:7E:4E:82:37:47:F2
            X509v3 Authority Key Identifier:
                keyid:A6:DF:F8:A1:77:EF:8C:C0:DC:74:24:5A:C0:C5:55:AA:DD:A1:53:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6DFF8A177EF8CC0DC74245AC0C555AADDA153B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/323830343a366165343a3a2f33322d3438203d3e20323730333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ae4::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:73:45:0a:f3:1a:d3:b9:25:20:3f:f5:d2:06:1f:c0:92:b3:
         9a:a0:8f:ac:92:2a:43:80:eb:59:1e:29:6d:f3:f6:cb:ff:46:
         86:0e:d7:cf:99:70:ab:08:2c:49:8e:c2:5c:bd:83:4d:59:b4:
         4a:1e:81:05:2b:6a:bd:a3:7d:00:9d:8f:a9:a1:6d:8c:60:82:
         83:d9:b2:04:9d:a0:02:13:52:f6:98:05:2d:37:c5:bc:52:9b:
         d3:ca:2a:44:57:d8:b5:f6:72:cc:9d:5f:6b:98:82:a4:18:99:
         7b:92:4a:46:57:5e:91:f2:14:1b:0a:dc:d3:e6:f3:36:e1:8b:
         96:1f:0c:5b:bc:c9:be:35:d5:db:61:35:53:b4:23:b1:be:57:
         de:a3:f8:ef:60:5b:68:ce:1e:c2:24:a8:1a:33:0b:75:dc:18:
         f4:5b:9f:31:94:7b:21:54:06:2c:b9:f7:ad:06:2a:a3:9c:e4:
         13:7e:8f:5c:15:13:50:8a:95:31:07:73:fd:f0:8e:8f:c4:4b:
         75:af:09:14:1a:11:f4:ac:76:a5:ae:7f:8f:97:e3:45:b5:11:
         ab:93:a0:e7:f6:02:23:95:26:61:da:18:f5:ea:85:20:80:42:
         c6:26:ff:f5:70:6e:25:57:fe:f2:ac:6d:86:e1:bf:56:6c:ca:
         ce:7d:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:52 2025 by rpki-client