This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a3a2f33322d3332203d3e20323637343430.roa
File:                     323830343a343138633a3a2f33322d3332203d3e20323637343430.roa (raw, json)
Hash identifier:          gOz6nCd+skQGwMMLGVoO/A9SnQcopJW6an58RLe8uHY=
Subject key identifier:   D9:B5:FB:A4:60:72:EA:62:F3:32:55:18:0F:B8:FD:97:8D:5F:13:16
Certificate issuer:       /CN=83B043913D491364D833E396DC6545FC836AF449
Certificate serial:       5AD33F4C97D059E8139AA29F88FE8E7D0EA31347
Authority key identifier: 83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a3a2f33322d3332203d3e20323637343430.roa
Signing time:             Wed 03 Dec 2025 18:38:49 +0000
ROA not before:           Wed 03 Dec 2025 18:33:49 +0000
ROA not after:            Wed 02 Dec 2026 18:38:49 +0000
asID:                     267440
IP address blocks:        2804:418c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d3:3f:4c:97:d0:59:e8:13:9a:a2:9f:88:fe:8e:7d:0e:a3:13:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83B043913D491364D833E396DC6545FC836AF449
        Validity
            Not Before: Dec  3 18:33:49 2025 GMT
            Not After : Dec  2 18:38:49 2026 GMT
        Subject: CN=D9B5FBA46072EA62F33255180FB8FD978D5F1316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:74:99:9e:4b:de:be:d9:c7:c4:e8:24:d5:
                    2d:73:11:b9:3b:d4:14:c8:ba:15:c4:21:99:75:1a:
                    c8:0b:c9:15:55:de:28:04:25:de:20:02:ad:2e:66:
                    05:c8:53:04:ff:e6:6a:31:c7:a9:80:88:ca:00:ba:
                    dc:9a:ee:0c:ae:e7:7e:87:db:0b:5d:ae:81:ae:40:
                    d0:3a:b9:f9:d6:18:7c:da:6b:0c:3c:e6:8c:26:c0:
                    8a:92:77:00:aa:3f:f0:94:f2:01:75:fd:ce:f2:4b:
                    40:91:82:07:b0:c4:04:3d:fb:35:58:d0:67:54:65:
                    d2:4d:b2:83:ed:ee:92:0a:d6:dc:70:cf:d3:61:a5:
                    de:4f:d4:d5:22:17:4c:cc:08:fb:09:02:f8:a1:16:
                    90:d1:d0:79:51:81:33:49:e4:45:c2:3f:49:3c:01:
                    1b:e1:80:0f:06:a6:55:0d:4d:11:00:83:c5:7a:1a:
                    b7:f7:84:c4:a6:70:8e:57:b7:45:35:29:0a:b7:11:
                    07:0f:b1:c4:09:d8:57:b3:10:c7:b0:aa:69:1f:ee:
                    41:a8:22:5d:6d:1b:76:25:5e:5c:c8:4e:62:fa:40:
                    21:40:0c:df:11:32:35:c9:86:eb:ea:13:50:8e:51:
                    e1:3c:82:36:cc:22:50:18:5c:6f:3e:a2:a2:01:c4:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B5:FB:A4:60:72:EA:62:F3:32:55:18:0F:B8:FD:97:8D:5F:13:16
            X509v3 Authority Key Identifier:
                keyid:83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a3a2f33322d3332203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:418c::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:33:e3:d6:28:3b:02:89:ab:fb:99:72:49:71:97:f8:29:
         91:36:7a:c8:5a:80:f4:14:69:d1:44:5b:eb:07:06:cd:02:07:
         2b:a7:c9:58:b3:b7:56:53:e2:30:4c:9f:48:14:fd:e6:16:c8:
         45:49:2a:a2:68:0e:be:26:af:1c:a9:78:e4:c2:71:71:74:40:
         0a:3c:9c:0b:3f:c4:d5:d5:9f:00:51:1e:4b:e6:42:19:ba:dc:
         4f:7c:31:0c:69:e6:5a:d4:03:1c:6a:2e:1c:94:5d:41:36:5c:
         61:e2:62:2b:0f:e6:31:83:f5:9a:b2:dc:a1:e8:a0:08:38:2b:
         d6:8b:a8:47:46:60:d6:6c:e1:29:c4:ea:43:d4:89:ad:00:d9:
         9d:81:7f:c5:7c:24:e3:8f:28:fe:36:05:7f:da:4b:85:31:94:
         d3:22:1c:70:20:f8:31:b0:6f:54:af:5e:52:c2:ff:e8:da:79:
         84:da:b4:9e:5e:33:5d:31:44:cd:c8:b2:45:a6:96:42:a1:60:
         50:96:ed:30:55:f9:50:61:dd:ff:c6:31:ff:9e:74:4b:18:3f:
         b9:2b:b0:0f:bd:c3:4b:89:87:9a:4d:8e:9c:8d:5b:45:8b:36:
         92:2c:fb:21:39:f5:18:56:db:68:a4:3a:d8:85:1f:17:36:c2:
         54:ba:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:55:49 2025 by rpki-client