This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa
File:                     323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa (raw, json)
Hash identifier:          AijwiWFdZhcsDsSxbWPjt6jLZhgwsseuVUsydshLbu4=
Subject key identifier:   37:A5:29:1C:CA:62:73:F9:34:1A:47:12:C8:8E:18:AA:A8:8B:E0:77
Certificate issuer:       /CN=83B043913D491364D833E396DC6545FC836AF449
Certificate serial:       3A1A92273BA72ED9E718E837ABD73737A1B86687
Authority key identifier: 83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa
Signing time:             Wed 03 Dec 2025 18:38:46 +0000
ROA not before:           Wed 03 Dec 2025 18:33:46 +0000
ROA not after:            Wed 02 Dec 2026 18:38:46 +0000
asID:                     267440
IP address blocks:        2804:418c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 22:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1a:92:27:3b:a7:2e:d9:e7:18:e8:37:ab:d7:37:37:a1:b8:66:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83B043913D491364D833E396DC6545FC836AF449
        Validity
            Not Before: Dec  3 18:33:46 2025 GMT
            Not After : Dec  2 18:38:46 2026 GMT
        Subject: CN=37A5291CCA6273F9341A4712C88E18AAA88BE077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:c2:90:7a:00:db:2f:52:e7:f9:8a:02:86:
                    32:86:28:21:52:8a:df:b9:94:ff:47:98:d7:a4:77:
                    f3:99:d3:7a:fd:92:21:b4:e9:69:0d:26:3f:c0:94:
                    9b:52:de:e6:da:a1:56:9a:65:60:e8:a7:de:86:1f:
                    ec:cf:7d:b3:bb:c8:15:07:8a:8d:50:cd:9f:81:ec:
                    ab:44:e6:24:c2:71:a7:89:da:23:9f:b0:44:48:3d:
                    6e:7d:17:07:9b:71:9b:e2:01:a0:ab:4b:9a:27:71:
                    95:71:58:41:38:c9:a0:db:34:01:53:1c:42:3c:60:
                    40:ca:63:7d:76:46:77:6e:07:15:0e:39:41:41:08:
                    80:e5:db:a6:f7:30:8c:ba:d2:24:4e:4d:f8:f4:b5:
                    52:28:9b:f9:ac:4c:d2:02:bc:2f:89:6a:71:14:53:
                    80:a3:ae:2d:6b:fe:2e:4e:41:08:71:23:f3:f1:c4:
                    e9:46:2d:b3:44:d5:42:54:ec:be:6b:05:06:49:21:
                    31:ec:0b:9c:f5:a5:30:f4:d0:42:7e:8d:f0:31:19:
                    17:87:94:22:37:30:96:28:8a:0d:3e:39:c3:90:e7:
                    3c:0f:67:c3:83:08:f2:14:33:21:d9:b1:71:44:f7:
                    64:ba:9a:c8:ea:2b:36:22:56:5b:06:63:80:56:e2:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A5:29:1C:CA:62:73:F9:34:1A:47:12:C8:8E:18:AA:A8:8B:E0:77
            X509v3 Authority Key Identifier:
                keyid:83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:418c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8c:61:c2:21:94:6c:80:13:f0:8d:3e:a5:8e:49:37:77:0c:26:
         9a:27:4a:ad:4f:36:1d:8b:70:d3:44:04:0c:b5:e6:92:71:37:
         ff:75:19:a6:f7:61:0d:25:ec:0b:66:e1:f9:40:25:bd:9b:e9:
         b7:6e:d6:50:79:f0:ed:11:1c:2d:5e:23:86:b0:53:62:3a:15:
         e7:7b:3e:a9:5d:d0:d7:f3:e8:d6:9e:6c:3f:94:37:a6:ee:7b:
         37:7b:5d:a6:8f:2f:c2:99:56:8d:ac:12:19:d7:3a:01:6a:22:
         6b:1b:51:0f:dc:f0:ac:86:8f:bf:2f:e7:86:d7:6c:13:47:26:
         1c:1a:98:d1:f4:4f:73:50:0c:c5:72:67:c2:d3:58:7c:a9:89:
         b3:ed:04:5a:52:60:1f:1e:cc:28:29:41:6e:fd:98:fb:d2:ac:
         70:c0:45:dc:2d:af:77:6d:31:4a:4e:68:cb:2d:d3:4e:15:25:
         0c:8d:94:a5:30:95:cf:74:59:44:fd:1b:34:17:36:47:aa:d8:
         19:7c:4e:97:8a:50:0d:55:2c:45:2b:80:04:d3:33:41:59:9e:
         e8:84:05:6b:83:99:b9:04:19:62:80:26:0b:de:6b:72:98:51:
         24:2e:d3:e0:a8:a1:c7:5f:b3:1a:51:be:ae:09:7f:d5:c5:1f:
         08:36:75:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:11:51 2025 by rpki-client