This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/323830343a346538383a3a2f33322d3332203d3e20323638323637.roa
File:                     323830343a346538383a3a2f33322d3332203d3e20323638323637.roa (raw, json)
Hash identifier:          7pVG2Xe1wBi98wT5zA9++02AlaI0UL731PErxaJLoY8=
Subject key identifier:   80:2D:22:F7:FB:0A:54:7B:E2:FD:70:58:AD:57:79:C0:60:76:EB:8D
Certificate issuer:       /CN=E0E56E765738AF9709155514C8A4C6494D4155B3
Certificate serial:       4F820988275750A7FC1AC8015F1C8C742B2368F8
Authority key identifier: E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/323830343a346538383a3a2f33322d3332203d3e20323638323637.roa
Signing time:             Mon 24 Nov 2025 16:00:00 +0000
ROA not before:           Mon 24 Nov 2025 15:55:00 +0000
ROA not after:            Mon 23 Nov 2026 16:00:00 +0000
asID:                     268267
IP address blocks:        2804:4e88::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl
                          rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:82:09:88:27:57:50:a7:fc:1a:c8:01:5f:1c:8c:74:2b:23:68:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E56E765738AF9709155514C8A4C6494D4155B3
        Validity
            Not Before: Nov 24 15:55:00 2025 GMT
            Not After : Nov 23 16:00:00 2026 GMT
        Subject: CN=3082010A0282010100CD148CCDEB1A1DB4099EFABD6ACF3A7BC2F959EEC269EB09742AA3C005CBED75F52CABD662532A3DB13ECA712693DB5D8BB05B2DE9EAE591A38018CD8513768952B701BDEFBE8313263A8A2A4839F2184FEBFCEA0BCC27B0F1FB5887C60DD3CE4F3AF3D5839152287868342A690A9EAF66C75DC6F316A20CD4B43D63463D5620039C4854025AFC0F9BAB50EF1B0A9FF9FCE24E8DD36A741340CEFC799412BE6A2DD9AA88D5B629B9033DC38033BB150BBB53D203E3C59A61227A8F22B5D5B6DCAC91B7472C001FF18ABB75463046A888FFD0F508ACD1CCF61FD9FDE96DB9EBE6C029A1DACA083DC2817569AB3EA8712D78B011925FAFB6B200B3B779F9AFAB9D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:8c:cd:eb:1a:1d:b4:09:9e:fa:bd:6a:cf:
                    3a:7b:c2:f9:59:ee:c2:69:eb:09:74:2a:a3:c0:05:
                    cb:ed:75:f5:2c:ab:d6:62:53:2a:3d:b1:3e:ca:71:
                    26:93:db:5d:8b:b0:5b:2d:e9:ea:e5:91:a3:80:18:
                    cd:85:13:76:89:52:b7:01:bd:ef:be:83:13:26:3a:
                    8a:2a:48:39:f2:18:4f:eb:fc:ea:0b:cc:27:b0:f1:
                    fb:58:87:c6:0d:d3:ce:4f:3a:f3:d5:83:91:52:28:
                    78:68:34:2a:69:0a:9e:af:66:c7:5d:c6:f3:16:a2:
                    0c:d4:b4:3d:63:46:3d:56:20:03:9c:48:54:02:5a:
                    fc:0f:9b:ab:50:ef:1b:0a:9f:f9:fc:e2:4e:8d:d3:
                    6a:74:13:40:ce:fc:79:94:12:be:6a:2d:d9:aa:88:
                    d5:b6:29:b9:03:3d:c3:80:33:bb:15:0b:bb:53:d2:
                    03:e3:c5:9a:61:22:7a:8f:22:b5:d5:b6:dc:ac:91:
                    b7:47:2c:00:1f:f1:8a:bb:75:46:30:46:a8:88:ff:
                    d0:f5:08:ac:d1:cc:f6:1f:d9:fd:e9:6d:b9:eb:e6:
                    c0:29:a1:da:ca:08:3d:c2:81:75:69:ab:3e:a8:71:
                    2d:78:b0:11:92:5f:af:b6:b2:00:b3:b7:79:f9:af:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2D:22:F7:FB:0A:54:7B:E2:FD:70:58:AD:57:79:C0:60:76:EB:8D
            X509v3 Authority Key Identifier:
                keyid:E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/323830343a346538383a3a2f33322d3332203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:18:38:e7:6e:81:ce:f2:d6:1d:76:bb:93:82:cf:91:9a:3b:
         d1:4f:53:cb:96:fb:76:06:0e:68:66:b2:8c:c5:c3:4d:c2:0b:
         26:a7:78:f4:93:91:f0:be:09:29:2d:95:07:cf:65:af:2d:54:
         ca:11:6c:e1:39:ca:ef:92:89:e6:ab:f8:21:bf:71:ae:79:c9:
         d1:4d:38:31:79:f2:a7:87:bd:9e:0b:df:66:da:72:60:ab:8c:
         c4:9e:5d:c1:6c:43:68:a2:60:3f:bc:5b:44:93:fb:fb:20:c5:
         55:54:93:3e:7b:d1:0f:07:ea:6f:2a:bd:01:0d:40:32:8b:11:
         41:ce:19:e7:e0:d4:a6:c5:e0:b4:5b:9b:e8:c9:14:ed:44:c7:
         f3:8a:4e:f1:97:b6:5c:3d:40:55:62:98:e0:3f:74:80:1d:29:
         4c:6d:6e:9b:c4:69:52:ba:7f:60:53:64:60:e2:76:f3:86:64:
         69:14:08:ff:63:3b:32:77:14:05:d9:a0:5d:ef:a1:cf:0d:72:
         77:d9:33:c3:26:69:89:80:a9:31:5a:98:54:3b:8f:0e:6d:75:
         40:ae:ea:6f:7a:94:b2:a5:87:8a:35:c1:44:54:59:b9:32:45:
         60:e4:1d:80:fd:1e:a4:68:45:2d:a4:f5:ab:05:74:f6:5d:2e:
         7b:4d:46:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----