This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a383030303a3a2f33342d3334203d3e20323637343430.roa
File:                     323830343a343138633a383030303a3a2f33342d3334203d3e20323637343430.roa (raw, json)
Hash identifier:          vjJ3trsjTTQJyx0yobdblKamYtaeRDpelkG8+WO6azE=
Subject key identifier:   8F:4B:22:AD:EF:56:C5:16:3D:06:38:4E:31:48:CA:60:C5:E3:1D:FF
Certificate issuer:       /CN=83B043913D491364D833E396DC6545FC836AF449
Certificate serial:       732E0AF97CE0442CFCCCF2C8EEFEC7898D47EE87
Authority key identifier: 83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a383030303a3a2f33342d3334203d3e20323637343430.roa
Signing time:             Wed 03 Dec 2025 18:38:49 +0000
ROA not before:           Wed 03 Dec 2025 18:33:49 +0000
ROA not after:            Wed 02 Dec 2026 18:38:49 +0000
asID:                     267440
IP address blocks:        2804:418c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 22:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2e:0a:f9:7c:e0:44:2c:fc:cc:f2:c8:ee:fe:c7:89:8d:47:ee:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83B043913D491364D833E396DC6545FC836AF449
        Validity
            Not Before: Dec  3 18:33:49 2025 GMT
            Not After : Dec  2 18:38:49 2026 GMT
        Subject: CN=8F4B22ADEF56C5163D06384E3148CA60C5E31DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:91:47:4a:e1:52:dc:92:d7:a5:67:cd:7a:
                    12:87:58:13:50:1f:69:65:c1:21:ac:10:35:3f:40:
                    26:ad:6f:5d:34:b8:46:9a:19:9b:1f:55:ec:07:a8:
                    14:b3:a7:0e:76:10:2a:82:ab:97:9f:4a:5f:7d:e9:
                    65:a8:7e:96:a6:98:20:8b:43:ea:bc:52:d3:b0:d0:
                    18:fe:27:0f:bb:a9:f5:e7:4d:3e:66:12:c4:81:b8:
                    6f:83:90:a3:c5:18:aa:62:77:d9:df:9f:94:4b:9f:
                    9e:97:c4:e9:7b:e6:fd:d2:3e:e7:2a:cf:3f:5e:97:
                    30:90:14:86:7e:d2:33:28:42:95:9c:fd:9d:74:54:
                    31:a3:a8:a1:f0:50:30:d9:38:1f:23:9d:b8:c1:82:
                    13:ee:30:33:11:1f:f1:9f:74:34:53:76:71:12:29:
                    44:7c:56:87:11:e6:48:60:22:35:93:cc:5c:a2:b4:
                    69:f2:09:df:84:fc:81:1a:20:14:7c:de:59:7e:f6:
                    2f:e6:37:b4:81:21:86:a6:27:73:75:f0:9f:45:dd:
                    c4:2d:2e:89:8a:e5:8e:04:f7:a0:2b:4d:c9:e8:18:
                    a7:76:b1:57:13:c7:ff:d2:e1:f3:3d:38:8b:9b:0f:
                    ff:17:c5:ba:3e:56:cb:d1:63:1b:51:d5:2e:4c:ed:
                    d9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4B:22:AD:EF:56:C5:16:3D:06:38:4E:31:48:CA:60:C5:E3:1D:FF
            X509v3 Authority Key Identifier:
                keyid:83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a383030303a3a2f33342d3334203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:418c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:bc:04:71:0a:8e:00:e2:af:6c:b2:17:ee:96:c8:e4:6b:
         c4:da:fd:b2:b4:02:e0:be:27:ea:f5:fe:08:80:9c:97:cb:de:
         32:1e:b6:ad:57:1e:ba:ef:02:50:d7:1b:d2:4c:e0:3b:f0:d1:
         d4:d8:94:a2:33:97:c5:72:c4:26:81:9f:6c:82:41:8b:a5:6c:
         1f:f9:6b:9e:fb:1b:f1:07:f8:c4:68:e6:e1:42:eb:3f:69:9d:
         2a:49:ca:e0:93:18:97:c7:ab:04:86:d5:35:93:38:f8:0c:18:
         40:28:16:7d:2d:d9:fa:8b:e6:08:9f:c1:78:3d:5c:49:26:8a:
         7a:42:df:7e:7a:ab:34:57:ee:3e:97:d8:86:11:db:43:b8:ae:
         ba:d1:d0:24:68:1a:21:ae:2e:4e:ad:f2:cb:69:5d:8f:01:a0:
         8f:28:dc:de:72:c5:82:5b:98:be:ef:c7:d4:9a:d7:91:13:7e:
         62:d8:2d:78:f2:77:e7:6f:be:17:54:d0:ed:62:70:42:a1:10:
         92:57:cd:34:17:a2:f9:09:6c:b9:08:48:6a:79:b3:a5:84:2a:
         06:6d:66:58:0a:29:c2:61:e0:9e:d9:9b:48:48:c0:4a:da:08:
         76:9b:96:cf:e9:e6:1a:81:f6:74:8f:06:4a:85:f2:e3:5e:44:
         33:db:7a:d7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcy4K+XzgRCz8zPLI7v7HiY1H7ocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNCMDQzOTEzRDQ5MTM2NEQ4MzNFMzk2REM2NTQ1RkM4
MzZBRjQ0OTAeFw0yNTEyMDMxODMzNDlaFw0yNjEyMDIxODM4NDlaMDMxMTAvBgNV
BAMTKDhGNEIyMkFERUY1NkM1MTYzRDA2Mzg0RTMxNDhDQTYwQzVFMzFERkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LpFHSuFS3JLXpWfNehKHWBNQ
H2llwSGsEDU/QCatb100uEaaGZsfVewHqBSzpw52ECqCq5efSl996WWofpammCCL
Q+q8UtOw0Bj+Jw+7qfXnTT5mEsSBuG+DkKPFGKpid9nfn5RLn56XxOl75v3SPucq
zz9elzCQFIZ+0jMoQpWc/Z10VDGjqKHwUDDZOB8jnbjBghPuMDMRH/GfdDRTdnES
KUR8VocR5khgIjWTzFyitGnyCd+E/IEaIBR83ll+9i/mN7SBIYamJ3N18J9F3cQt
LomK5Y4E96ArTcnoGKd2sVcTx//S4fM9OIubD/8Xxbo+VsvRYxtR1S5M7dnxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUj0sire9WxRY9BjhOMUjKYMXjHf8wHwYDVR0j
BBgwFoAUg7BDkT1JE2TYM+OW3GVF/INq9EkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzluSGlENGlwenI3M1U4TDVTUUhNYUtSQmtTMUdzNWFoQTRjdDlSQzN3
OEEvMC84M0IwNDM5MTNENDkxMzY0RDgzM0UzOTZEQzY1NDVGQzgzNkFGNDQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzQjA0MzkxM0Q0OTEzNjRE
ODMzRTM5NkRDNjU0NUZDODM2QUY0NDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5bkhpRDRpcHpyNzNVOEw1U1FITWFLUkJrUzFHczVhaEE0Y3Q5UkMzdzhBLzAv
MzIzODMwMzQzYTM0MzEzODYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM0MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQYyAMA0GCSqGSIb3DQEBCwUA
A4IBAQADv7wEcQqOAOKvbLIX7pbI5GvE2v2ytALgvifq9f4IgJyXy94yHratVx66
7wJQ1xvSTOA78NHU2JSiM5fFcsQmgZ9sgkGLpWwf+Wue+xvxB/jEaObhQus/aZ0q
ScrgkxiXx6sEhtU1kzj4DBhAKBZ9Ldn6i+YIn8F4PVxJJop6Qt9+eqs0V+4+l9iG
EdtDuK660dAkaBohri5OrfLLaV2PAaCPKNzecsWCW5i+78fUmteRE35i2C148nfn
b74XVNDtYnBCoRCSV800F6L5CWy5CEhqebOlhCoGbWZYCinCYeCe2ZtISMBK2gh2
m5bP6eYagfZ0jwZKhfLjXkQz23rX
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:09:26 2025 by rpki-client