This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a383030303a3a2f33332d3333203d3e203532363632.roa
File:                     323830343a333362303a383030303a3a2f33332d3333203d3e203532363632.roa (raw, json)
Hash identifier:          8qrK0Iiiisc98wWbQAC664gESDrU5JtBhe3GJIsjvAo=
Subject key identifier:   7D:17:18:18:64:AE:6D:04:11:52:02:03:E4:7B:AF:66:DA:CE:58:16
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       04FC4688B5BCE9D863A7ED331B0FE4DE58429CF7
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a383030303a3a2f33332d3333203d3e203532363632.roa
Signing time:             Tue 25 Nov 2025 17:17:56 +0000
ROA not before:           Tue 25 Nov 2025 17:12:56 +0000
ROA not after:            Tue 24 Nov 2026 17:17:56 +0000
asID:                     52662
IP address blocks:        2804:33b0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fc:46:88:b5:bc:e9:d8:63:a7:ed:33:1b:0f:e4:de:58:42:9c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Nov 25 17:12:56 2025 GMT
            Not After : Nov 24 17:17:56 2026 GMT
        Subject: CN=7D17181864AE6D0411520203E47BAF66DACE5816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:a6:ba:c6:62:93:d3:2d:55:1d:7e:80:0f:
                    41:83:57:0e:43:21:d2:f7:df:81:9f:f6:c8:b7:48:
                    77:26:f4:1f:17:11:66:2e:0c:c2:a7:89:23:a4:bc:
                    0d:5e:00:ba:fc:00:2a:4c:d4:e9:14:a5:3c:de:55:
                    af:c0:37:af:40:b4:db:09:8c:7d:c5:cf:d0:2e:e5:
                    3b:31:63:9f:c7:ef:10:6d:f8:ed:1e:44:aa:1e:a5:
                    63:6c:63:c7:68:7f:df:5f:51:3f:ab:38:ba:a8:0d:
                    41:46:59:61:73:7d:c5:50:f8:ac:28:aa:12:85:60:
                    78:b0:a4:11:75:39:76:ca:e6:1e:20:c5:1c:3c:a6:
                    83:5c:64:57:c2:a2:83:21:5d:1a:22:14:46:52:c6:
                    dd:44:88:41:05:8f:8b:01:3b:b9:d0:b2:cf:17:66:
                    dc:81:58:48:d4:9d:39:3b:89:94:db:f0:cc:5a:8a:
                    59:8f:58:79:f8:65:48:96:dd:14:8e:3c:c7:0a:61:
                    1f:4b:ca:a1:02:be:57:73:df:4b:17:d4:24:ad:01:
                    aa:0b:51:88:5f:11:67:7c:26:c1:d3:26:e7:70:6a:
                    bc:55:c2:65:5d:1b:12:39:94:ce:3f:fe:f3:c7:e5:
                    0d:13:31:00:fd:a5:5b:04:bf:6e:ba:f2:66:6e:fe:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:17:18:18:64:AE:6D:04:11:52:02:03:E4:7B:AF:66:DA:CE:58:16
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a383030303a3a2f33332d3333203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:28:ab:13:f5:77:99:b3:75:a0:93:04:63:a9:5b:2f:59:36:
         7a:70:91:f4:82:51:96:09:6b:81:76:8d:aa:1c:b7:1a:14:30:
         b3:24:5f:55:2c:53:0a:dc:01:b5:c5:00:b2:c3:66:53:0a:c3:
         26:76:bd:76:e2:1f:45:98:35:fd:be:e9:c9:a4:40:99:dd:f6:
         5d:cb:4e:91:ec:92:e7:58:65:d7:cf:37:f0:df:5f:df:3f:a7:
         cf:dc:02:f2:b4:eb:b2:dd:9a:3b:0c:bf:0d:02:88:4c:7b:5a:
         a8:4c:5f:5c:2a:7a:2d:73:17:0a:3e:be:75:f2:7c:73:8a:e4:
         25:90:a1:d5:7d:30:92:48:75:79:0f:b0:46:9c:d8:4d:14:2b:
         6d:d6:4d:bd:70:a0:cf:7f:cc:c3:14:18:45:83:38:c8:26:de:
         79:f2:7b:5a:c6:28:db:57:1a:90:6d:3f:42:09:16:21:03:6b:
         eb:d2:5c:d1:58:77:e3:13:29:ef:55:1d:bc:d1:ee:54:a6:5c:
         9b:d8:a4:3b:00:0c:f2:4f:d4:4b:21:8a:75:c7:99:d9:42:a7:
         00:34:7c:3b:37:c9:c4:88:c2:85:71:08:68:e8:f6:1f:6a:78:
         40:c3:70:4c:52:d5:63:8a:96:84:b3:a1:19:51:26:94:e8:40:
         eb:ad:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:36 2025 by rpki-client