This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3a2f33322d3332203d3e20323635333933.roa
File:                     323830343a333336343a3a2f33322d3332203d3e20323635333933.roa (raw, json)
Hash identifier:          XEgnP2B6Yrit5DADHFdBaWJQDcP6jKpMIXaNn5ljCjE=
Subject key identifier:   6A:21:E7:E4:B9:D7:60:67:37:47:53:19:F7:AC:38:D4:9B:22:17:60
Certificate issuer:       /CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Certificate serial:       1AB71B77EEF45BB248C5F005D71CE00B60A5FD55
Authority key identifier: 22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3a2f33322d3332203d3e20323635333933.roa
Signing time:             Mon 10 Nov 2025 13:47:08 +0000
ROA not before:           Mon 10 Nov 2025 13:42:08 +0000
ROA not after:            Mon 09 Nov 2026 13:47:08 +0000
asID:                     265393
IP address blocks:        2804:3364::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b7:1b:77:ee:f4:5b:b2:48:c5:f0:05:d7:1c:e0:0b:60:a5:fd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
        Validity
            Not Before: Nov 10 13:42:08 2025 GMT
            Not After : Nov  9 13:47:08 2026 GMT
        Subject: CN=6A21E7E4B9D7606737475319F7AC38D49B221760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:5b:c4:74:64:20:e0:f8:06:54:cf:6e:91:
                    09:9c:62:b9:25:a6:ae:1f:ed:f3:c5:0d:65:0c:4c:
                    5a:46:80:55:cd:4e:b2:09:80:e7:37:4d:5c:32:a9:
                    cb:78:72:05:4f:cb:06:61:10:61:09:4c:a9:85:eb:
                    3a:6e:13:45:b6:b2:97:5f:34:5f:18:bd:0c:ee:05:
                    88:03:e0:54:f6:27:3b:f0:ab:9b:66:23:cc:fc:8d:
                    5d:77:e1:c5:8e:f6:83:cd:59:a4:d6:fd:9d:7a:b0:
                    fe:36:e8:25:44:67:96:a9:53:bc:a5:a7:23:93:02:
                    43:31:80:a6:e8:a5:20:9c:8f:8c:3f:c8:8c:40:56:
                    75:10:c2:a2:c3:5e:ba:27:5b:3d:25:d9:90:d9:9e:
                    b2:e5:89:7d:45:c1:44:54:4c:61:6b:cc:12:cd:54:
                    e6:c3:f4:f5:dd:b3:14:dc:64:59:03:9c:85:91:4b:
                    88:be:de:03:98:d7:14:0e:49:45:5e:75:4f:53:d1:
                    a8:88:d6:92:1c:a3:c1:4e:e4:f0:46:5d:20:b8:84:
                    ac:7d:a0:3f:ac:08:8a:85:c1:49:cf:ef:a9:20:2c:
                    04:bb:15:56:9b:38:d1:d5:1b:dc:f4:e6:12:c5:70:
                    ee:e9:96:df:72:b1:b5:b7:66:9c:95:ec:72:0f:a3:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:21:E7:E4:B9:D7:60:67:37:47:53:19:F7:AC:38:D4:9B:22:17:60
            X509v3 Authority Key Identifier:
                keyid:22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3a2f33322d3332203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364::/32

    Signature Algorithm: sha256WithRSAEncryption
         e4:6e:8c:df:41:26:91:b7:7a:49:8b:e5:ef:b6:bf:19:e3:fe:
         4e:8e:cc:8d:48:02:22:19:36:96:1d:e1:2f:df:30:5b:57:ca:
         d6:bd:8a:a2:a2:1c:d0:d3:9f:07:04:ae:50:39:db:d2:c6:7f:
         3d:32:b3:76:51:b7:8a:9a:f9:18:b5:ab:d1:ed:d1:32:1e:13:
         fb:c3:a9:e9:c1:3e:af:6b:64:30:50:56:bf:6f:61:72:6f:a0:
         88:ac:53:d4:da:86:d4:91:ff:ba:8a:ae:be:f7:2f:c7:2c:08:
         fb:1d:af:71:26:52:0e:fb:dd:e2:6f:87:46:46:c1:7f:a6:f7:
         d2:33:93:8a:73:5e:c3:1c:0a:80:63:c3:13:f3:95:d8:e3:27:
         df:58:8c:e3:2c:4b:5f:99:e3:80:f3:7d:ee:e1:dc:04:e3:7b:
         93:f9:74:78:d3:36:ef:56:59:e6:69:10:d1:f5:7a:47:f5:9c:
         d5:ff:67:85:bf:12:4f:54:de:d7:2a:29:79:70:47:08:70:c5:
         9d:35:ac:5b:7e:1d:25:64:f2:57:9e:19:18:4f:cd:73:23:78:
         82:99:9b:ac:81:d0:94:98:ce:20:91:26:31:9b:11:26:56:0f:
         37:a7:0b:8e:05:81:d0:e4:85:7c:43:cc:a3:f3:9f:37:ef:57:
         e6:50:c5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:29 2025 by rpki-client