This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          h7GzGk2t7cQjlWAk5BhfduhHtkZ87HP76EywqlAwYvw=
Subject key identifier:   8E:CF:50:ED:A7:BC:15:A4:3C:55:49:E6:B6:0C:6A:46:58:88:52:06
Certificate issuer:       /CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Certificate serial:       70D3A261A153264AE5C7463EE25D1D0679BCAAAB
Authority key identifier: 22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Mon 10 Nov 2025 13:47:24 +0000
ROA not before:           Mon 10 Nov 2025 13:42:24 +0000
ROA not after:            Mon 09 Nov 2026 13:47:24 +0000
asID:                     265393
IP address blocks:        2804:3364:8200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d3:a2:61:a1:53:26:4a:e5:c7:46:3e:e2:5d:1d:06:79:bc:aa:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
        Validity
            Not Before: Nov 10 13:42:24 2025 GMT
            Not After : Nov  9 13:47:24 2026 GMT
        Subject: CN=8ECF50EDA7BC15A43C5549E6B60C6A4658885206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:65:9a:65:30:8b:69:25:de:85:55:dd:11:
                    16:0c:04:f3:18:2e:c7:4d:30:de:fb:7d:15:7b:79:
                    7b:dd:19:de:e8:c6:91:4e:cc:3e:13:51:76:0a:c7:
                    a8:f2:18:82:a2:bd:63:fc:2d:c0:59:6f:07:7c:5f:
                    d6:6b:11:45:f8:6e:2f:2a:90:c2:cb:32:0f:20:ac:
                    41:f4:af:93:52:65:24:b7:e6:b5:1a:61:48:41:05:
                    3b:8d:64:81:24:d5:9a:df:1a:84:9a:89:40:5f:46:
                    ca:4d:63:94:f1:4d:9a:a3:00:5a:43:04:a4:67:75:
                    0c:2f:7e:ba:a1:ee:e7:16:e6:30:49:54:94:f4:4f:
                    27:fb:46:94:f6:d1:b4:af:db:d6:c4:29:dc:4b:18:
                    7b:6f:92:d2:0a:69:53:f0:0a:eb:9e:48:1c:3c:70:
                    a4:b1:49:43:ea:8e:e1:7e:bc:74:6c:ee:ba:8f:d5:
                    3f:96:b1:6c:ca:87:68:01:66:c6:76:2d:ad:de:d5:
                    9e:fd:e1:1d:43:ec:45:77:63:0f:56:18:11:6d:d6:
                    5b:48:c2:7e:3c:4e:98:79:d8:d7:ad:eb:72:1f:fb:
                    e1:24:d1:3f:31:31:78:c9:0d:08:86:7b:7a:d6:d8:
                    ef:aa:7f:1b:0d:c9:08:76:11:cf:8f:ef:98:6b:84:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CF:50:ED:A7:BC:15:A4:3C:55:49:E6:B6:0C:6A:46:58:88:52:06
            X509v3 Authority Key Identifier:
                keyid:22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:bf:b7:9f:36:e9:06:a1:34:5a:03:9a:22:1f:17:ae:b1:5f:
         0a:53:87:90:f4:92:32:4f:f9:34:1e:4d:2a:8b:6a:6c:62:be:
         e7:da:4b:39:22:c2:3a:41:ba:0c:81:7f:05:24:62:d5:ec:ba:
         fb:bb:03:ea:13:df:39:f8:15:d6:ee:72:4d:b4:4f:63:a4:3a:
         a6:0d:72:7a:7f:54:bd:c2:19:83:4a:91:b4:4e:d5:59:54:da:
         bd:d7:5c:b5:01:3a:1b:56:05:cb:a8:18:ac:86:55:30:f5:75:
         ab:a2:93:53:51:a3:49:37:c3:25:f2:53:f6:93:f6:28:be:b5:
         eb:da:28:4d:6c:8b:f7:37:eb:ac:b7:63:de:2d:95:b1:df:c9:
         ff:3d:89:03:a7:bf:94:1d:36:29:a0:fd:27:f6:11:ec:98:96:
         f4:2d:55:5e:4b:c0:9f:25:2f:a8:82:80:7f:c9:48:82:49:f8:
         97:0d:1b:6c:7a:f5:79:ff:a5:d5:e3:9c:26:34:18:9e:78:3b:
         a3:78:38:0d:6b:d8:8a:25:8f:42:77:5a:69:f3:db:8c:82:91:
         b5:99:46:a7:36:28:df:d6:32:d6:78:65:e2:20:76:9e:9f:8c:
         d5:ac:fc:2f:0d:84:57:fe:f4:d2:ac:e9:86:fe:bf:65:71:43:
         87:d7:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:50 2025 by rpki-client