This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/323830343a316335303a3a2f33322d3334203d3e203631363439.roa
File:                     323830343a316335303a3a2f33322d3334203d3e203631363439.roa (raw, json)
Hash identifier:          PPQrGSN3r3lgolucLFLlahZWF3dNOc3p+VcnbrrzaN0=
Subject key identifier:   15:35:BD:11:65:98:78:50:82:5D:FF:C3:2A:6A:B6:EC:5E:EA:3C:08
Certificate issuer:       /CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
Certificate serial:       3AFE16B06F7BF0400819F98DA9C1158C29B22196
Authority key identifier: D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/323830343a316335303a3a2f33322d3334203d3e203631363439.roa
Signing time:             Wed 03 Dec 2025 17:38:20 +0000
ROA not before:           Wed 03 Dec 2025 17:33:20 +0000
ROA not after:            Wed 02 Dec 2026 17:38:20 +0000
asID:                     61649
IP address blocks:        2804:1c50::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl
                          rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 17:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fe:16:b0:6f:7b:f0:40:08:19:f9:8d:a9:c1:15:8c:29:b2:21:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
        Validity
            Not Before: Dec  3 17:33:20 2025 GMT
            Not After : Dec  2 17:38:20 2026 GMT
        Subject: CN=1535BD1165987850825DFFC32A6AB6EC5EEA3C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:18:b2:a6:c3:f5:21:c4:3e:cb:5c:78:66:d5:
                    3f:b8:6a:35:a9:84:31:c9:61:6c:9c:11:a5:43:6d:
                    d0:69:fe:2f:96:c9:74:9e:53:9e:90:90:05:ca:65:
                    41:a4:0e:fe:ae:68:21:1c:ff:4b:11:b4:a3:56:fa:
                    b6:70:df:67:0d:1f:0c:e7:0c:11:82:f1:f7:df:47:
                    75:a9:e1:de:65:6a:1e:be:ed:58:75:71:3c:07:36:
                    6d:d0:39:39:c6:e7:b2:bb:dc:85:a6:e4:41:29:29:
                    9a:db:e0:c9:a6:ca:d8:e8:24:d6:40:cf:5b:6c:8e:
                    61:47:fe:1c:53:8b:d4:a9:02:01:3c:04:93:3e:5d:
                    6d:e0:2d:7a:0d:fc:a3:36:e6:58:11:39:80:ba:db:
                    d4:89:e8:b2:81:e0:5d:ea:26:e6:2b:73:24:9f:fb:
                    75:97:e5:6c:28:a9:f0:41:c6:14:72:95:3f:db:23:
                    88:e9:43:1f:bf:73:bd:b4:0b:80:32:93:94:56:90:
                    fe:65:82:97:5b:bb:59:ee:16:f1:ae:58:c9:3b:c3:
                    0d:8a:ad:48:33:99:c5:16:43:2c:08:1d:91:34:09:
                    c1:56:b7:e2:aa:fe:4f:05:0a:82:35:50:1e:c6:10:
                    dd:4b:28:95:e3:04:ab:75:5c:84:4d:ba:9e:66:fc:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:35:BD:11:65:98:78:50:82:5D:FF:C3:2A:6A:B6:EC:5E:EA:3C:08
            X509v3 Authority Key Identifier:
                keyid:D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/323830343a316335303a3a2f33322d3334203d3e203631363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         e8:57:94:52:e4:4b:8b:2e:ff:5a:1a:f5:e8:37:51:c4:d7:54:
         bf:06:3c:5a:05:fa:ef:b9:58:aa:7c:f6:0c:a1:29:36:01:a3:
         44:2b:30:43:08:c9:b6:eb:89:ee:bb:82:5f:48:2b:28:3b:1f:
         12:a4:8b:5c:e7:cd:59:ed:ed:a1:78:43:9e:d5:ae:1a:d3:e2:
         ce:6b:cc:31:be:29:a9:07:eb:42:98:c7:89:06:d1:c6:f7:b4:
         72:1a:b9:e2:f6:f3:6f:e7:b6:c9:53:c9:f0:50:2b:fa:a5:c8:
         c4:73:af:eb:bf:0d:34:4d:25:4e:27:fa:01:c9:f9:8c:ed:eb:
         ce:5d:9e:70:93:4c:b7:ce:1e:ce:83:e2:8b:a8:10:6b:bd:27:
         85:0e:79:a8:f0:45:fe:d2:19:09:ce:a5:a7:17:3a:33:1c:ec:
         b2:f1:37:d8:7f:ac:aa:fc:ac:76:37:24:e3:7a:af:cf:6f:47:
         64:89:8f:f8:43:67:ad:35:43:ea:67:48:d7:1d:2b:e8:50:bd:
         58:4a:c2:6b:f8:ee:fb:d9:68:cd:d5:62:20:d8:1c:fd:ad:cc:
         7c:0e:f7:f6:c0:ea:bb:1f:99:1d:72:1e:b8:67:18:2c:37:e4:
         f3:88:8c:bf:5b:dd:18:18:70:3a:b8:07:5f:f4:ce:ad:a0:0a:
         55:ce:15:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:29:15 2025 by rpki-client