This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/323830343a326336633a3a2f33322d313238203d3e20323635323137.roa
File:                     323830343a326336633a3a2f33322d313238203d3e20323635323137.roa (raw, json)
Hash identifier:          mPmFCm8ilMdueYRD2BbIq8/i/Laj/o3PO3ZZSQdqSls=
Subject key identifier:   C7:38:9C:51:CB:3A:B4:43:91:61:43:F5:27:CA:3D:83:14:9F:DF:59
Certificate issuer:       /CN=2BDEDB462587B54D8EAD035C81DB7FC030F30BBD
Certificate serial:       0FFF4B98A2D82CE5B4FFB89C243D502C98304F9E
Authority key identifier: 2B:DE:DB:46:25:87:B5:4D:8E:AD:03:5C:81:DB:7F:C0:30:F3:0B:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/323830343a326336633a3a2f33322d313238203d3e20323635323137.roa
Signing time:             Wed 12 Nov 2025 22:54:54 +0000
ROA not before:           Wed 12 Nov 2025 22:49:54 +0000
ROA not after:            Wed 11 Nov 2026 22:54:54 +0000
asID:                     265217
IP address blocks:        2804:2c6c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.crl
                          rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ff:4b:98:a2:d8:2c:e5:b4:ff:b8:9c:24:3d:50:2c:98:30:4f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BDEDB462587B54D8EAD035C81DB7FC030F30BBD
        Validity
            Not Before: Nov 12 22:49:54 2025 GMT
            Not After : Nov 11 22:54:54 2026 GMT
        Subject: CN=C7389C51CB3AB443916143F527CA3D83149FDF59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:50:b7:1d:92:63:99:fd:eb:b3:8c:f7:7d:0c:
                    fb:72:20:6f:c6:b0:b8:c7:a3:2d:75:af:96:7f:89:
                    50:d9:ba:4b:59:2d:9c:48:ad:e6:eb:d7:d9:a4:f0:
                    1c:d4:ba:9b:16:02:e7:d9:bd:dd:cc:53:8a:13:77:
                    f4:06:56:88:55:15:1c:c6:6b:ec:80:8f:05:cc:18:
                    c0:81:a3:33:b2:5e:7c:0e:60:f7:a6:53:74:67:31:
                    c7:25:c0:93:7d:6f:66:10:77:21:70:c9:22:fe:95:
                    d4:a7:4e:68:76:3e:53:55:89:e8:a8:f7:cb:1a:ff:
                    28:04:5a:67:63:b1:ce:6d:03:12:a9:89:71:2d:f9:
                    3e:0c:73:4f:83:69:80:9a:03:1e:cb:c0:68:c5:9d:
                    dd:6e:6b:31:33:1b:18:80:f1:67:91:0f:3d:aa:bd:
                    8a:12:98:17:8f:19:f8:e5:be:69:d9:a8:e6:4a:86:
                    10:07:38:0e:99:73:08:07:72:cf:4b:f9:b8:68:d8:
                    a5:f9:ce:3a:e6:6e:1f:d8:d4:f7:65:eb:7c:53:49:
                    6e:d5:58:f4:af:f5:5f:87:78:3c:2b:30:f4:45:7d:
                    d7:8c:49:5c:b4:68:e1:ae:27:97:7b:49:32:24:a0:
                    65:07:a7:18:1d:e4:cb:6a:2c:ef:1d:4d:fb:33:e1:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:38:9C:51:CB:3A:B4:43:91:61:43:F5:27:CA:3D:83:14:9F:DF:59
            X509v3 Authority Key Identifier:
                keyid:2B:DE:DB:46:25:87:B5:4D:8E:AD:03:5C:81:DB:7F:C0:30:F3:0B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/323830343a326336633a3a2f33322d313238203d3e20323635323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:0e:d9:f7:bf:6d:2f:56:d9:65:10:5d:ad:88:f7:5e:cf:
         f8:8b:66:6c:da:37:e1:22:83:fd:45:7b:ff:c2:ff:b2:2f:92:
         6a:2f:d8:44:f0:c0:dc:6d:6d:85:8a:66:7f:09:7b:cf:22:66:
         c0:5a:7a:62:e3:bb:1a:8d:e2:ae:c6:33:e7:6e:a1:39:41:a8:
         86:db:45:08:f7:1d:1f:61:51:bc:9a:b5:26:12:c1:7c:a4:ad:
         07:e3:09:fd:c4:b7:bf:79:19:49:02:a4:e6:3e:a4:43:71:f0:
         75:20:d2:39:80:0d:ed:10:6a:17:19:6c:82:cf:d4:3b:1a:92:
         9d:8d:88:db:c3:85:b8:23:e9:79:11:be:ed:1b:3b:61:38:cb:
         17:c5:5a:86:35:6f:5a:02:5a:81:d8:8a:d0:9e:60:b0:c8:c0:
         e8:7f:d0:68:0d:c0:8c:50:74:c9:53:70:80:ee:fe:a6:15:b9:
         d6:ea:ef:6a:84:2f:08:37:a8:d2:a9:fa:3c:a9:a9:5d:85:67:
         de:40:d6:cf:e5:62:7c:aa:8f:f0:0f:82:ae:87:65:cc:a3:23:
         79:60:45:12:aa:95:1a:64:8c:fe:35:87:a6:50:7a:69:5e:01:
         17:f4:71:74:46:b3:84:02:ac:58:bc:fb:52:96:0b:8e:94:c5:
         c5:0e:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:15:45 2025 by rpki-client