This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3438203d3e20323731313130.roa
File:                     323830343a373636383a3a2f33322d3438203d3e20323731313130.roa (raw, json)
Hash identifier:          vb9YUlejfRTr7kI1aYxQHYliUllejevQ+kOX2MTtokM=
Subject key identifier:   58:17:E9:68:7A:60:C8:D6:3B:85:0E:AE:05:8A:F7:CD:4C:61:33:69
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       1DF07E789987311F34D76A15E9067C8320C235B1
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3438203d3e20323731313130.roa
Signing time:             Wed 05 Nov 2025 20:04:26 +0000
ROA not before:           Wed 05 Nov 2025 19:59:26 +0000
ROA not after:            Wed 04 Nov 2026 20:04:26 +0000
asID:                     271110
IP address blocks:        2804:7668::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f0:7e:78:99:87:31:1f:34:d7:6a:15:e9:06:7c:83:20:c2:35:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Nov  5 19:59:26 2025 GMT
            Not After : Nov  4 20:04:26 2026 GMT
        Subject: CN=5817E9687A60C8D63B850EAE058AF7CD4C613369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:08:bb:4d:a1:2d:bc:1c:20:cd:c6:e4:bd:
                    10:aa:85:3f:52:a7:c3:41:16:41:33:f7:57:c3:8a:
                    98:98:0f:41:ce:57:97:ab:ec:75:b1:5f:b7:2a:6a:
                    de:4e:31:ee:61:91:37:a3:9e:7c:89:04:34:96:fe:
                    7c:c5:9e:19:f9:88:95:db:55:0a:db:b3:a4:4e:f9:
                    c5:77:cb:50:80:60:82:5a:46:a2:cc:1c:16:6a:a1:
                    83:87:f6:db:14:46:cb:4f:19:da:54:d2:3d:52:f3:
                    6e:81:8b:94:f4:ef:ef:86:98:8c:4d:e9:aa:f5:cc:
                    80:97:30:2d:93:a8:fa:a4:59:05:c8:38:a5:11:c9:
                    1b:a5:5b:29:ef:c3:04:74:25:14:47:e1:5f:27:d2:
                    9f:ae:39:56:ba:8d:7e:24:07:c8:68:4f:3c:64:21:
                    d8:7b:b8:46:99:9a:76:10:a2:08:19:50:80:aa:80:
                    d4:be:0a:e3:95:d6:1a:74:92:03:66:a5:5f:f6:ed:
                    07:45:0b:3f:5a:28:1c:fb:2d:3c:26:4c:3b:f9:60:
                    50:23:c0:25:ef:07:e9:74:1f:83:ae:75:aa:87:78:
                    34:6d:6a:61:cc:30:c6:89:24:5d:a1:38:11:53:a1:
                    67:3e:9a:e8:db:30:c6:f1:09:25:55:6a:83:12:60:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:17:E9:68:7A:60:C8:D6:3B:85:0E:AE:05:8A:F7:CD:4C:61:33:69
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a3a2f33322d3438203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7668::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:dc:06:f6:7b:7f:82:d6:6e:99:2e:c9:5c:30:06:49:55:48:
         76:32:48:74:e7:27:3b:e9:ef:18:f7:69:2f:94:1b:47:1a:52:
         01:e7:f0:20:20:19:7f:03:8e:3e:52:6f:67:0e:11:d1:7a:97:
         ea:f2:53:48:9f:45:ab:5b:6e:84:1d:c8:8a:e9:df:78:d1:8b:
         f6:d0:10:81:29:19:22:22:0c:9c:73:7c:b5:5c:e3:7f:51:37:
         0b:7d:be:b1:90:ca:94:8b:4f:35:fd:c2:cd:6f:70:a0:18:2b:
         df:e5:d7:6e:7a:e0:08:37:79:40:3f:31:db:e7:c9:b9:36:5a:
         b0:57:d7:0e:36:b8:3c:1f:36:c0:08:9b:63:16:e1:12:27:4f:
         e1:46:6b:27:20:1d:47:27:4f:a7:a7:eb:42:1d:5b:cb:88:c4:
         81:6a:7f:e0:81:a9:df:78:b0:a9:e3:73:7c:d0:93:56:23:72:
         71:9f:5e:9a:4d:70:64:e7:89:09:ad:f3:60:af:0d:6f:00:f1:
         13:28:12:fa:b4:26:2e:53:51:11:27:67:e2:87:a3:cf:d0:53:
         2b:3d:52:d9:ac:05:c5:2b:51:61:c6:77:8d:80:3d:24:0c:46:
         75:fa:cb:56:a6:fd:1e:3f:e3:d9:c3:7b:8b:b7:35:f1:4c:31:
         a0:45:5d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:26:46 2025 by rpki-client