This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a3a2f33332d3333203d3e20323637343430.roa
File:                     323830343a343138633a3a2f33332d3333203d3e20323637343430.roa (raw, json)
Hash identifier:          VJgnDMc+DYWOTb5/QhEq1ZM6RZ2zbnWMTliv5AyRo04=
Subject key identifier:   8D:25:DD:1D:FC:44:4A:88:30:2F:B2:D7:1F:1E:B7:55:5A:98:64:FF
Certificate issuer:       /CN=83B043913D491364D833E396DC6545FC836AF449
Certificate serial:       24580DDC1796C704E11A9CBDD146D2AB20D43E6E
Authority key identifier: 83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a3a2f33332d3333203d3e20323637343430.roa
Signing time:             Wed 03 Dec 2025 18:38:49 +0000
ROA not before:           Wed 03 Dec 2025 18:33:49 +0000
ROA not after:            Wed 02 Dec 2026 18:38:49 +0000
asID:                     267440
IP address blocks:        2804:418c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 22:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:58:0d:dc:17:96:c7:04:e1:1a:9c:bd:d1:46:d2:ab:20:d4:3e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83B043913D491364D833E396DC6545FC836AF449
        Validity
            Not Before: Dec  3 18:33:49 2025 GMT
            Not After : Dec  2 18:38:49 2026 GMT
        Subject: CN=8D25DD1DFC444A88302FB2D71F1EB7555A9864FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:83:58:31:83:4c:a9:4d:8c:af:89:7b:fb:
                    83:3c:51:03:03:ee:3f:16:0a:29:08:43:49:23:a7:
                    e9:ac:1d:f8:e1:9b:de:25:ab:c0:0c:dc:ea:78:e6:
                    78:cd:81:31:5b:d8:c8:a9:80:ce:3f:c2:52:a0:ce:
                    36:1b:80:78:b7:f8:d0:bb:0b:d9:24:cc:97:9c:fd:
                    f7:aa:e1:6c:d8:2f:f9:1a:df:82:76:fc:48:ee:2c:
                    73:62:a7:88:6e:c4:c5:4d:ff:66:c1:ab:dc:d0:ea:
                    d9:c2:bf:6b:b4:7c:b4:65:21:5e:d7:26:23:92:6b:
                    b8:b0:13:c1:74:f7:2d:3d:52:29:8d:76:3a:5c:c2:
                    95:ad:92:b8:09:5e:a2:c2:00:be:fb:21:17:26:34:
                    4b:0c:87:e4:2e:76:7f:01:d9:f8:52:83:33:5e:0b:
                    40:4b:b2:09:36:59:78:b6:76:46:e1:e0:72:b2:e6:
                    89:98:a4:78:7c:fd:a4:74:b8:95:a9:cf:56:13:d1:
                    fb:06:ee:36:e7:2f:16:21:27:53:07:c4:e9:22:34:
                    a7:3f:71:98:80:f1:89:77:ca:fb:1a:28:b4:28:23:
                    ef:5f:f3:97:94:bb:8f:8d:72:62:b5:05:83:c8:6d:
                    07:ea:ab:81:74:7e:b5:0c:44:e6:fe:a7:41:cc:5c:
                    a1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:25:DD:1D:FC:44:4A:88:30:2F:B2:D7:1F:1E:B7:55:5A:98:64:FF
            X509v3 Authority Key Identifier:
                keyid:83:B0:43:91:3D:49:13:64:D8:33:E3:96:DC:65:45:FC:83:6A:F4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/83B043913D491364D833E396DC6545FC836AF449.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83B043913D491364D833E396DC6545FC836AF449.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a3a2f33332d3333203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:418c::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:2f:7d:63:3e:de:fb:7b:4b:e9:ef:6b:bd:32:81:19:db:e8:
         41:73:40:ab:f6:2b:ec:cd:74:39:62:37:53:21:92:e6:74:1c:
         d4:9d:e9:05:3e:ea:f8:34:e7:e0:c8:b5:cc:9f:cc:08:35:ef:
         7c:c4:a1:a8:28:86:b2:25:e0:85:ca:d8:95:9c:c9:b5:30:a3:
         cc:34:9e:f6:af:df:d9:fa:a8:71:69:4a:35:b1:20:4d:52:9e:
         4f:62:19:c0:34:cf:e0:3b:d6:f2:6c:e9:d2:04:46:39:05:df:
         b9:e3:2e:ca:0c:31:af:5c:2f:4c:10:68:21:93:a0:2e:80:d5:
         c3:89:ad:03:fe:70:cb:29:13:da:e5:14:8e:16:07:3a:7e:2b:
         86:d9:1a:e7:07:d1:5b:0e:09:02:f8:24:ad:12:57:06:77:7e:
         b4:82:30:d2:5e:2c:a6:75:9e:85:76:97:bc:d2:9b:a9:c6:da:
         94:52:09:35:36:62:9d:82:71:58:85:c7:9f:fe:5f:94:63:6e:
         4b:a4:e0:cf:1b:59:1f:6d:1e:97:23:4e:8a:2d:15:9e:59:ff:
         76:7e:2f:3a:97:11:39:b4:35:bd:8f:05:11:df:ce:10:ed:c4:
         35:8e:a4:3b:fa:e2:cb:48:ad:62:53:9b:21:20:8b:36:5e:fb:
         07:b5:8f:f0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJFgN3BeWxwThGpy90UbSqyDUPm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNCMDQzOTEzRDQ5MTM2NEQ4MzNFMzk2REM2NTQ1RkM4
MzZBRjQ0OTAeFw0yNTEyMDMxODMzNDlaFw0yNjEyMDIxODM4NDlaMDMxMTAvBgNV
BAMTKDhEMjVERDFERkM0NDRBODgzMDJGQjJENzFGMUVCNzU1NUE5ODY0RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5oNYMYNMqU2Mr4l7+4M8UQMD
7j8WCikIQ0kjp+msHfjhm94lq8AM3Op45njNgTFb2MipgM4/wlKgzjYbgHi3+NC7
C9kkzJec/feq4WzYL/ka34J2/EjuLHNip4huxMVN/2bBq9zQ6tnCv2u0fLRlIV7X
JiOSa7iwE8F09y09UimNdjpcwpWtkrgJXqLCAL77IRcmNEsMh+Qudn8B2fhSgzNe
C0BLsgk2WXi2dkbh4HKy5omYpHh8/aR0uJWpz1YT0fsG7jbnLxYhJ1MHxOkiNKc/
cZiA8Yl3yvsaKLQoI+9f85eUu4+NcmK1BYPIbQfqq4F0frUMROb+p0HMXKE/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjSXdHfxESogwL7LXHx63VVqYZP8wHwYDVR0j
BBgwFoAUg7BDkT1JE2TYM+OW3GVF/INq9EkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzluSGlENGlwenI3M1U4TDVTUUhNYUtSQmtTMUdzNWFoQTRjdDlSQzN3
OEEvMC84M0IwNDM5MTNENDkxMzY0RDgzM0UzOTZEQzY1NDVGQzgzNkFGNDQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzQjA0MzkxM0Q0OTEzNjRE
ODMzRTM5NkRDNjU0NUZDODM2QUY0NDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5bkhpRDRpcHpyNzNVOEw1U1FITWFLUkJrUzFHczVhaEE0Y3Q5UkMzdzhBLzAv
MzIzODMwMzQzYTM0MzEzODYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM3
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARBjAAwDQYJKoZIhvcNAQELBQADggEBABUvfWM+
3vt7S+nva70ygRnb6EFzQKv2K+zNdDliN1MhkuZ0HNSd6QU+6vg05+DItcyfzAg1
73zEoagohrIl4IXK2JWcybUwo8w0nvav39n6qHFpSjWxIE1Snk9iGcA0z+A71vJs
6dIERjkF37njLsoMMa9cL0wQaCGToC6A1cOJrQP+cMspE9rlFI4WBzp+K4bZGucH
0VsOCQL4JK0SVwZ3frSCMNJeLKZ1noV2l7zSm6nG2pRSCTU2Yp2CcViFx5/+X5Rj
bkuk4M8bWR9tHpcjTootFZ5Z/3Z+LzqXETm0Nb2PBRHfzhDtxDWOpDv64stIrWJT
myEgizZe+we1j/A=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:09:32 2025 by rpki-client